last executing test programs: 3m9.233660202s ago: executing program 3 (id=28): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002030500000000000000000000000007080005400000000c08000340000000000800c0ec2d1fffff090002000000a8fa010000000800010000000026080003400000000208000540000000010800044000000020"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x40800) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000880)=0x5a6, 0x4) bind$inet(r2, &(0x7f00000008c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000900)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000000940), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000980)=0x5, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000009c0)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/14, 0xe}, 0x805}], 0x1, 0x45833af96e4b39fd, 0x0) write(r1, &(0x7f0000000180)='br', 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='./dev\x00', 0x124) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000500)='ext4\x00', 0x108410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000540)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000780)={0x4, 0x7, 0x0, 0x5, 0x2, 0x5775d27c, 0x154, 0x100}, 0x20) sendmsg$nl_generic(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa0000, 0x14) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, {0x9, 0x8, 0x8, 0x3}}) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000240)={0xffffff55, 0x1, &(0x7f0000175000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0xc0000, 0x0, 0x2c, 0x0, 0x11, 0x30, 0x2e, 0x33}) 3m8.922530804s ago: executing program 3 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, &(0x7f00000002c0)) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r1, @ANYRES16=r0], 0x414}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000480)="a648c2e0939ae847719ebabe92f36d", 0xffffffffffffff21, 0x20000800, &(0x7f0000000300)={0xa, 0x4001, 0x1fffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3a7}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="11d4ef78a55c2bd8bd8e0b0bc2e23b6395d0fc12f3945bf622430f2124fd26b2259e90deb65eb2901df80dd62053482fedc92f9e4289700bad10fc50b23b40a6fd33b4c7e1f442a153231d41a305a834bf7cee7d8feea32c5c71b121e39ea7babab2c366b6c497be1f72b80503681c1b4ee2c91af7cfb03cc62158e43b62fd5a475f0c319a24e78e8d9b2f1619ff105252b6d5", 0x93, 0x2000c851, &(0x7f0000000580)={0xa, 0x4e22, 0x7, @mcast1, 0x1}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000004c0)="11d4ef78a55c2bd8bd8e0b0bc2e23b6395d0fc12f3945bf622430f2124fd26b2259e90deb65eb2901df80dd62053482fedc92f9e4289700bad10fc50b23b40a6fd33b4c7e1f442a153231d41a305a834bf7cee7d8feea32c5c71b121e39ea7babab2c366b6c497be1f72b80503681c1b4ee2c91af7cfb03cc62158e43b62fd5a475f0c319a24e78e8d9b2f1619ff105252b6d5", 0x93, 0x2000c851, &(0x7f0000000580)={0xa, 0x4e22, 0x7, @mcast1, 0x1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000894) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000894) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010300000000086e05fe000000000000010902240001000040000904000142030003000921fffffe01222900090581030000080700"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x20, 0x1}}}, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x20, 0x1}}}, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m7.104619053s ago: executing program 3 (id=42): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x242002, 0x0) fcntl$setstatus(r1, 0x404, 0x26c00) ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0) r2 = socket(0x2d, 0x2, 0x0) setsockopt(r2, 0x11d, 0x1, &(0x7f0000000100)="01000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200)={0x1}, 0x1) sendto(r2, 0x0, 0x42, 0x40040, &(0x7f0000000180)=@generic={0x2d, "00000000000000000800010000000600"}, 0x80) r3 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder_logs/state\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x0, 0xa8, 0x200, 0xa57}, 0x14) read(r3, &(0x7f0000002000)=""/4095, 0x105b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)={0x3}) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) 3m7.000599649s ago: executing program 3 (id=43): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0xfffffffffffffc01, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="600000001000e3ff0100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280022802400010020a1070000000000000000000000000000e8a011abc0c53d00"/99, 0x63) (async, rerun: 64) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000140)={0x2, 0xffffffff, 0x3}) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x943, 0x0, 0x0, @fd}, @nested={0xc, 0x45, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @fd=r2}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) (rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './proc/sys/kernel/watchdog_thresh'}, 0x25) (async) bind$inet(r3, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060088a800000c0003"], 0x68}}, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) (async, rerun: 32) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) write(r0, &(0x7f0000000180)="ea0a1d682063832241fed70e58281c0fcfcdcfe24b12ba2666fb4b8fd87c2360881ff8bd882617437c3c5d6363aafbd331c1", 0x32) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$vhost_msg_v2(r7, &(0x7f0000000680)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) (async) unlink(&(0x7f0000000100)='./file0\x00') (async) mkdirat(r0, &(0x7f00000002c0)='./bus\x00', 0x140) 3m6.092991074s ago: executing program 3 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbd) (async) syz_usb_connect(0x0, 0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) 3m5.88857628s ago: executing program 3 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m5.434234719s ago: executing program 32 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m2.851556928s ago: executing program 1 (id=58): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}, 0xa}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r4, 0x8000, 0x42d, 0x80000001, 0x1, 0xd2a}, &(0x7f00000002c0)=0x14) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x20000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000140)={0x6, 0x0, 0x6001, 0x5, 0xb0bd, 0x1, 0xb, 0x1}) (async, rerun: 64) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r6) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) (async) ptrace$setsig(0x4203, r6, 0x5, &(0x7f0000000000)={0x1e, 0x3, 0x2}) (async) syz_open_procfs(r6, &(0x7f00000000c0)='net/rfcomm\x00') 3m1.661353026s ago: executing program 1 (id=62): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0), 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000180)) (async) r2 = socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) 3m1.402149572s ago: executing program 1 (id=63): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) open(&(0x7f0000000000)='./file1\x00', 0x145142, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x14002, &(0x7f0000000180)={[{@stats}, {}, {@stats}, {@stats}, {}]}) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x310a0124) 3m1.302311571s ago: executing program 1 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0xb, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003020000000203ccbe"]}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000440)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000540)={0x84, 0x0, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "23bc"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xfffd}, 0x0, &(0x7f0000000780)={0x40, 0x17, 0x6, @local}, 0x0, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x1}, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(r2, &(0x7f0000000980)={0x24, &(0x7f0000000840)={0x20, 0x22, 0x6a, {0x6a, 0x10, "f136b0e9ec76330336702b80afebaa68f133badf9dbff94e97858fa5a6d36026f541c621719b7493d5da014edb3c630da604e6c92b0b92d5ab589c91e108e432d6d2c2acd9c5527587a62d74760c7538b49968172a328764b582ed3458402a3928e301a4545d175e"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000900)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x4, "5df30fe5"}, @global=@item_012={0x1, 0x1, 0x6, '.'}, @local=@item_4={0x3, 0x2, 0x9, "f8498e3f"}, @global=@item_012={0x1, 0x1, 0xa, '<'}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x16f7, 0x8, 0x1, {0x22, 0xe3c}}}}, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x0, 0x10, 0x7, "7ebd19cfdade97"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x1, 0xae, "71b47401f3b42e9a390c1d0ce83d3a60694ca5015c8b96c9d8ead7783e5feb2f068242c37e6d735a688db863dc6c2c99f063fde048332a2f2667833ea1469c0262586801cd871b07522386e04beafd7862c39512a0934c30e1e080fc77347cbae3d9fe0a915f1dd124ad11fab5350da9d8e6e25a1b8b355bec929be6febf15c3f94b9731a526e9e91277e1393a3c105441b0fb22441120bb031d7bab7b278289254e7d19eb74b19b8516842cc278"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x20}}) r3 = syz_usb_connect$cdc_ncm(0x2, 0x7e, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x4, 0x40, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "fc0c67a0"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xa4, 0x3, 0xf1}, {0x6, 0x24, 0x1a, 0xfab8, 0x8}, [@country_functional={0xc, 0x24, 0x7, 0x6, 0x1, [0x2, 0x28e7, 0x1ff]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x2, 0xaa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x200, 0xc0, 0xad, 0xa8, 0x8, 0x4}, 0x15, &(0x7f0000000c80)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x5, 0xf, 0xfbb, [0xc0]}]}, 0x2, [{0xd8, &(0x7f0000000cc0)=@string={0xd8, 0x3, "8bef7d0d019ba9594944a13ac8e634ebe442baedd77caf0989230d38059ba48fcd26bd5e28794289684ca2363bbf3c9619ba382d54805583329e6977b4184da0c2ab56cf1057cd5549db9135aadfeb59c336ca8d4f1bc7814fd930d41ed60d2b86eba85f7602affdcd0fe2c36337181818cf8a07d72769b14495a7314f1ed2aaa749f1fed1b9a30e0d245652ab7d8528f5e5d7f312422c9c0e0490dd20748e17ff560e4d01ff2f2e10643c8db10e85eae231e0e43edbe8829bc5ec53d91c92211f2ee42657f02d92aa700ca121251833ea0ee55fff4e"}}, {0xdc, &(0x7f0000000dc0)=@string={0xdc, 0x3, "f91a5ab4fff1923c92e3a2e814ff199ad49b268bf1ee587cf8fdc3b5b7380b749a108d72be20357c54c947748177729b146eeb03625c0c853a143fa7c293435cbc82740322444026f2b6101b8ecfc48c4088e481c22718f3743b7714edf324ed632663fe389eeb3167d5d1d84dce7105cd39fa50ca77cb5b264b4af62a05814befde017e9afb8c4d58c54e244daa644eb6e777084fd5d186343d143dffbb646d34a3c0578c95ea642dad6a4b74569a0fbaee3b5730ced1c4f2b4c12a42e2aa5ad6ecafc647c780ab50c1196e14c9f8b0d95ff5f6e9aa412aab26"}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000001040)={0x14, &(0x7f0000000f00)={0x40, 0xa, 0xdf, {0xdf, 0x1, "a52d8e567888b6b8be870215e3330ddbc15d8c57692035d66dc25bfced3c846b3753ecb33b3c35873a2f9f51d0d2a3c1253e1c4df9f75577d2f61596a6eadb3683f8fba15ff3fbc3aeefca1c907e984082eb0ee90282bc1c9cce9768d7d62597691dfc148fb63a37c20446c3dfb65345561e5c4516ac9893924e3de0238020af768adb0bd21ec1cb13effb50450ad3dc419a5666486928e7f34f744a2386b7c4356a7e3d473b3041fe2dd6cd7287bb821b971dfb8ee45cb756c7670806a36f62fceea64f2292812dc0cea7f503866f0788f8f27a2893020c8e7f8cbd3c"}}, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001300)={0x44, &(0x7f0000001080)={0x0, 0x15, 0xc0, "a32884f73502227096ea8a22298dc72c0c3a4c65bc9979808a4f55468af131fbc553414c591f4fd5d748765a6f5ccc95266c35df8b60ea52722f5c32780309d0608dca5cf8fa4e5343c2893e34b7693f048e5e84b1460f214d2dde35305f5592db82fac4f8c9a4172985864aecf0409a3b2831a0be58b6d61ccf61820bac15fcbf61f231d9975ab039a67259234bc11ee1977bddde364576d93d136f4d4bca59b27b330e936e97c0585f9c65354c8b619764b4f6d63e9ea6dba15da8cfaa8692"}, 0xfffffffffffffffc, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000011c0)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x81, 0x4, 0x8a1, 0x4, 0x4, 0x0, 0x7, 0xfff8, 0xffff, 0x4}}, &(0x7f0000001200)={0x20, 0x85, 0x4, 0xc00}, &(0x7f0000001240)={0x20, 0x83, 0x2}, &(0x7f0000001280)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000012c0)={0x20, 0x89, 0x2}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 2m59.09793484s ago: executing program 1 (id=70): syz_usb_connect(0x0, 0x4b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000000e40)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000ec0)='100', 0x3) mount(0x0, &(0x7f0000000f40)='./dev\x00', &(0x7f0000000f80)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./pipe\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x4b, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000000e40)='proc\x00', 0x4000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000ec0)='100', 0x3) (async) mount(0x0, &(0x7f0000000f40)='./dev\x00', &(0x7f0000000f80)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./pipe\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./pipe\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) (async) 2m58.64836982s ago: executing program 1 (id=73): syz_usb_connect(0x0, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b00012c0000000904000000020a"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') statx(r0, 0x0, 0x1000, 0x400, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x6, 0x1000}, &(0x7f00000002c0)=0x90) 2m57.869465539s ago: executing program 33 (id=73): syz_usb_connect(0x0, 0x5d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b00012c0000000904000000020a"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') statx(r0, 0x0, 0x1000, 0x400, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x6, 0x1000}, &(0x7f00000002c0)=0x90) 2m49.800528169s ago: executing program 0 (id=98): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x200, 'syz0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, &(0x7f0000000040)) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffdd5, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) getpriority(0x0, r3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x2}, 0xe) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x4, {0xa, 0x4e21, 0xfffffffb, @mcast2, 0x7f}}}, 0x32) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x200, 'syz0\x00', 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, &(0x7f0000000040)) (async) syz_clone(0x0, 0x0, 0xfffffffffffffdd5, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r3, 0x0) (async) getpriority(0x0, r3) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x2}, 0xe) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x4, {0xa, 0x4e21, 0xfffffffb, @mcast2, 0x7f}}}, 0x32) (async) 2m48.199204452s ago: executing program 4 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x140) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000200)='./sys\x00', &(0x7f0000000240), &(0x7f0000000280)=0x1000, 0x8, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) splice(r1, 0x0, r1, 0x0, 0x5, 0x2) write(r0, &(0x7f0000000180)='3', 0x1) write$cgroup_int(r0, &(0x7f00000001c0)=0x9, 0x12) 2m46.285812816s ago: executing program 0 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x106, 0x0, @remote}}}, 0x118) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000099, 0x0, 0x3ff}]}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r10 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r10, 0x29, 0x3e, &(0x7f0000000640)=0x3, 0x4) sendto$inet6(r10, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="00d7229c", @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000234000000000800040005000800080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r11 = getpid() sched_setscheduler(r11, 0x1, &(0x7f00000007c0)=0x5) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x210000, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000880), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r13, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000008c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000eb9bdfa616000000080083008b7b05b2c7cf6a492a73ffd40d28574434c24577dabdaa8f2d75067e9a0d12ba21c169939d139ab2c5c68c88530013467409568fe39f3a8255a3b603545086455462d8a17fdda6280166858706076fa8a936273034ce4165792e90b1c3d39d6903b482adfa5f76a5aad751575368227f441c2b4044f90700000077ebdd9689980f4d41ef0ae080f09242d77e8f6bffb723a48f1cc749d6fcf2d8246086fe", @ANYRES32=r9, @ANYBLOB="08001c00", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600010000000100000008001d00", @ANYRES32=r12, @ANYBLOB="08001d00", @ANYRES32=r13, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0xd40ce6e30c62e049) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, 0x0) 2m45.090314143s ago: executing program 4 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000040)='btrfs\x00', 0x880, 0x0) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={&(0x7f0000000400)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="af", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18"], 0x18, 0x20000001}, 0x20008000) (async) sendto$l2tp6(r1, &(0x7f0000000540)="91", 0x1, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x9, @private0, 0x24d, 0x2}, 0x20) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000640)={r3, 0x3}, 0x8) (async, rerun: 32) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000300)=""/161, 0xa1}], 0x2) (rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0) syslog(0x9, 0x0, 0x0) (async, rerun: 32) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) write(r4, 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x7, 0xd, '\x00', &(0x7f0000000180)=0x7}) 2m44.326240361s ago: executing program 0 (id=117): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000001dc0)=ANY=[@ANYBLOB="120100030000004035121d824000010203010902750003010c2081080b0001010520b50904000000010120"], &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0}) 2m44.09779599s ago: executing program 4 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = syz_io_uring_setup(0x2959, &(0x7f0000000140)={0x0, 0xd008, 0x80, 0x1, 0x397}, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f00000003c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x13c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000980), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000009c0)={0x1, @vbi={0x3, 0x3, 0xfff, 0x50323234, [0x6, 0x9], [0x7, 0x6], 0x3}}) (async) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000940)={0x10020, 0x3, 0x0, 0x2471}) sendmmsg$sock(r3, &(0x7f0000000100)=[{{&(0x7f0000000340)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, 0x0}}], 0x1, 0x55) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000800)={0x1, [0x0]}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000880)={r9}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000008c0)={r9, 0xc}, 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sec/apparmor/.load\x00', 0x2, 0x0) write(r10, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="2a00000008000500720b02008570fcff0700"], 0x12) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001200010000000000ffdbdf250a000000000000001000"/50, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000001000000"], 0x4c}}, 0x0) (async) r12 = dup(r6) syz_ublk_setup_queues(r12, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe99c, 0x20000, 0x1000000, 0x19a, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4669, 0x400, 0x4, 0x194}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x80, 0xffffffff, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca14, 0x40, 0x2, 0x120}}], 0x1, 0x0, 0x0) 2m43.916651936s ago: executing program 4 (id=122): modify_ldt$write(0x1, &(0x7f0000000040)={0x6, 0x20000800, 0x1000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000002c0)={0x1, 0x0, 0xfffe}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x0, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 2m43.597693347s ago: executing program 4 (id=125): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3109, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0xdb, "", [{{0x9, 0x4, 0x0, 0x6, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xd8f, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xf9}}}}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x42, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffff, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000640)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000540)={0x2, 0x2, 0x0, 0x1000, 0x2, 0x3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000500)={0x5, &(0x7f0000000200)=[{@fixed}, {}, {}, {@none}, {}]}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x44, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x2f, 0x0, @local, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}], "a542e5fa"}}}}}}, 0x7a) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m42.896870137s ago: executing program 0 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$fuse(0x0, &(0x7f0000002800)='./file0/../file0\x00', &(0x7f0000002840), 0x4000, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x14000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@measure}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_user={'subj_user', 0x3d, '/dev/cec#\x00'}}, {@subj_type={'subj_type', 0x3d, '\\]/#&{'}}, {@uid_eq}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x32, 0x62, 0x0, 0x39, 0x65, 0x36, 0x72aae510ad2285d1], 0x2d, [0x64, 0x32, 0x0, 0x37], 0x2d, [0x66, 0x0, 0x32, 0x37], 0x2d, [0x34, 0x34, 0x35, 0x65], 0x2d, [0x0, 0x37, 0x31, 0x66, 0x36, 0x63, 0x37, 0x39]}}}, {@subj_role={'subj_role', 0x3d, '\x00'}}]}}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0xfec00000, 0x8, 0x1, 0xfffffbfe, 0x0, [{0x4, 0xc, 0x4, '\x00', 0x38}, {0x80, 0xfe, 0x7c, '\x00', 0x2f}, {0x2, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x1, '\x00', 0x5}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0xb, 0x4, '\x00', 0x7}, {0x6, 0x6, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x40, '\x00', 0x84}, {0x16, 0x24, 0xa9, '\x00', 0x1}, {0x7, 0x1, 0x17, '\x00', 0x4}, {0x6, 0xc, 0x5, '\x00', 0x3}, {0x19, 0x10, 0x8c, '\x00', 0x8}, {0x5, 0xc0, 0x3, '\x00', 0x3}, {0x8, 0x2, 0xcb, '\x00', 0x5}, {0x7, 0x6, 0xd, '\x00', 0xd3}, {0xba, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3}, {0x3, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x6, 0x31, '\x00', 0xf7}, {0x7, 0x7, 0x5, '\x00', 0xa}, {0xff, 0x0, 0x6, '\x00', 0x7}, {0x6, 0x85, 0x4, '\x00', 0xff}]}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x103902, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000540), 0xffffffffffffffff, 0xc0c00) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x3, 0x8, 0x0, 0x9, 0x8, 0x97, 0xbf, 0xc6, 0x81, 0xfe, 0xc, 0x0, 0x5, 0x8, 0x0, 0x2, 0x8, 0xff, '\x00', 0x61, 0x10000000000001}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x8, 0x3000000000002}, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/reserved_size', 0x48a82, 0x1) read$FUSE(r7, &(0x7f0000000740)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000002780)={0x48}) 2m42.653813885s ago: executing program 0 (id=131): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0xd, 0x2, 0xe26a}, 0x30, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xb, @pix_mp={0x38305543, 0x8, 0x78110513, 0x0, 0x9, [{0xffff, 0x7}, {0x9}, {0x0, 0x7fffffff}, {0x9, 0xda}, {0x4, 0x8}, {0x8, 0x4}, {0x2, 0x400}, {0x6, 0x1000}], 0xff, 0x80, 0x1, 0x1, 0x3}}) landlock_restrict_self(r0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m42.354257189s ago: executing program 0 (id=132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="100d06006831db12fbf582e993e597253f0000"], 0x0, 0x0}) 2m41.720436805s ago: executing program 34 (id=132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="100d06006831db12fbf582e993e597253f0000"], 0x0, 0x0}) 2m41.698039595s ago: executing program 4 (id=134): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002030500000000000000000000000007080005400000000c08000340000000000800c0ec2d1fffff090002000000a8fa010000000800010000000026080003400000000208000540000000010800044000000020"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x40800) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000880)=0x5a6, 0x4) write(r1, &(0x7f0000000180)='br', 0x2) 2m31.330958374s ago: executing program 5 (id=161): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2000010, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002480)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x181000) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000024c0)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x5, 0x4800003e, r5, 0x0) read$FUSE(r4, &(0x7f0000002500)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_INIT(r0, &(0x7f00000023c0)={0x50, 0x0, r2, {0x7, 0x2d, 0xfff, 0x2080, 0x2866, 0x5, 0xfffffe01, 0x2, 0x0, 0x0, 0x10, 0x5}}, 0x50) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000000180)='8', 0x1) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r7, 0x7af, 0x0) unshare(0x40040400) write$FUSE_BMAP(r6, &(0x7f00000001c0)={0x18, 0x0, r2, {0x800004}}, 0x18) 2m30.60133196s ago: executing program 5 (id=167): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xa05, 0x3e37, 0xc, 0x2, 0x22, 0x3}, &(0x7f00000001c0)=0x9c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r1, 0x80047456, 0xfffffffffffffffd) 2m30.521743645s ago: executing program 5 (id=168): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x101182, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x64, &(0x7f0000000ac0)=0x800, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000006c000000160a01040000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c000380140001006c6f00000000000000000000000000001400010064756d6d79300000000000000000000054000000030a01040000930000000000010000000900010073797a30000000000900030073797a300000000014000480080001400000000208000240000000000b00070066696c746572000008000a400000000158000000060a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c0004802800018011000100666c6f775f6f66666c6f61640000000010000280090001"], 0x160}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050029bd7000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a003400020202020202000005001801040000000500190107000000"], 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) r7 = openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000980)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000e40)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000e80)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_dev$dvb_demux(&(0x7f0000000ec0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000f00)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r8, &(0x7f0000000f40)=[{&(0x7f0000000f80)=""/192, 0xc0}], 0x1, 0x1, 0x8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000001040)={0x2, 0x1, 0x3, 0x2, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./dir0\x00', 0x1ff) mount(&(0x7f0000000b40)=@filename='mtd0\x00', &(0x7f0000000b80)='./dir0\x00', &(0x7f0000000bc0)='jffs2\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000c00)='./dir0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {r7}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./security\x00', &(0x7f0000000680)='securityfs\x00', 0x0, 0x0) 2m29.689678349s ago: executing program 5 (id=170): r0 = fsopen(&(0x7f0000000400)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f00000000c0)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x12) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7d, 0x5, 0x9, 0x0, {0x9, 0x7, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55c58d8ce6f01cf60d7a"}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x120}}, 0x24008000) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2042, 0x0) fchdir(r1) utimensat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 2m29.613811267s ago: executing program 5 (id=171): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000980)='/dev/comedi2\x00', 0x1, 0x0) r1 = fanotify_init(0x8, 0x400) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40) (async) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000000)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000140)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000200)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) (async) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000240)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000540)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r8, r6, &(0x7f0000000240)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000540)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000009c0)={'pcmda12\x00', [0x8000, 0x2, 0x4, 0x2000002, 0x6c3, 0x6, 0x8002, 0x8000, 0x7, 0xc729, 0x0, 0xa, 0x7, 0xa, 0x29, 0x72ef, 0x9, 0x51, 0x6, 0x9, 0x0, 0x6, 0xfffffffc, 0x9, 0x1000, 0x6, 0x471, 0xffffff85, 0x383, 0x8001, 0x4, 0xa1]}) close_range(r0, r0, 0x2) 2m28.766931757s ago: executing program 5 (id=178): r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000000)='./file1\x00', 0x60142, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000140)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="000000adba28b489"], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f0000002500)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r3, &(0x7f0000002540)={0x50, 0xffffffffffffffda, r4, {0x7, 0x9, 0x0, 0xb0b0012, 0x0, 0xde, 0x1002}}, 0x50) read$FUSE(r3, &(0x7f00000025c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000004600)={0x10, 0xffffffffffffffda, r7}, 0x10) close(0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000004680)='./file1\x00', 0x103042, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) read$FUSE(r8, &(0x7f00000046c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r8, &(0x7f0000006700)={0x78, 0xfe810eb2396f40ee, r9, {0x77, 0x8, 0x0, {0x2, 0x7fffffffffffffff, 0x0, 0x191c, 0x7, 0x7, 0xb601, 0x6f048c06, 0x1, 0x8000, 0x7, r5, r6, 0x8, 0x5}}}, 0x78) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 2m26.65604775s ago: executing program 35 (id=134): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002030500000000000000000000000007080005400000000c08000340000000000800c0ec2d1fffff090002000000a8fa010000000800010000000026080003400000000208000540000000010800044000000020"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x40800) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000880)=0x5a6, 0x4) write(r1, &(0x7f0000000180)='br', 0x2) 2m13.258545463s ago: executing program 36 (id=178): r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(&(0x7f0000000000)='./file1\x00', 0x60142, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000140)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="000000adba28b489"], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f0000002500)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r3, &(0x7f0000002540)={0x50, 0xffffffffffffffda, r4, {0x7, 0x9, 0x0, 0xb0b0012, 0x0, 0xde, 0x1002}}, 0x50) read$FUSE(r3, &(0x7f00000025c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000004600)={0x10, 0xffffffffffffffda, r7}, 0x10) close(0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000004680)='./file1\x00', 0x103042, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) read$FUSE(r8, &(0x7f00000046c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r8, &(0x7f0000006700)={0x78, 0xfe810eb2396f40ee, r9, {0x77, 0x8, 0x0, {0x2, 0x7fffffffffffffff, 0x0, 0x191c, 0x7, 0x7, 0xb601, 0x6f048c06, 0x1, 0x8000, 0x7, r5, r6, 0x8, 0x5}}}, 0x78) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 5.565829929s ago: executing program 7 (id=749): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) pread64(r1, &(0x7f00000003c0)=""/239, 0xef, 0xfffffffffffffffb) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x70bd2d, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x400c8a4) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r9 = dup(r8) setsockopt$inet6_int(r1, 0x29, 0x1f, &(0x7f0000000340)=0xfffffff8, 0x4) write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 5.373947843s ago: executing program 7 (id=752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xbfffff89, 0x6, 0x6, 0xfffffff8}, {0x1, 0x5, 0x0, 0x8, 0x0, 0x1, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0x7fffffff, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x27ff, 0x400}, {0xc0000005, 0x800100, 0x4, 0xff65, 0x400003, 0x40000002, 0x9}, {0x7ffffffe, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 5.219277106s ago: executing program 7 (id=754): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000029c0)='cmdline\x00') exit(0xaf) preadv(r0, &(0x7f0000002a00)=[{&(0x7f0000002a40)=""/129, 0x81}], 0x1, 0x5, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={0x0, 0xfffffdf4}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000500)={0xf000, 0x118000}) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/175, 0xaf}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000640), 0xe09) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000780)='6', 0x1) modify_ldt$write(0x1, &(0x7f00000007c0)={0x1fff, 0x0, 0x400}, 0x10) mount$binder(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000800), 0x1200850, &(0x7f0000000840)={[{@stats}]}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x8d, 0x2, 0x7, 0x1, 0x2, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x6, 0x9, 0xb0}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x82, 0xf, 0x7}}]}}}]}}]}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000900)={0x2020}, 0x2020) r7 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x19, &(0x7f0000000440)=0x9, 0x4) ppoll(&(0x7f0000000480)=[{r8, 0x52db}], 0x1, 0x0, 0x0, 0x0) syz_usb_ep_read(r7, 0x2, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000280)={0x14, &(0x7f0000000080)={0x0, 0x5, 0xda, {0xda, 0x3, "b8e9a7dc8606030c8ec28c94f0d45ee64bd1a4a1764042ada5dd6ca64c768d15f5d734a44c4c8c8442d7d9cfe4f61a53d7819abc7a6558385d469c88d20fe2dc8be60d2e951cbb3956206e6ffe33f8c62ddfd4d446fb1fd7965162a1e46ac8d5517e0d31fe5a9a6d11abf6144be4a66e006130883b313dfb5f980e68c70341131291e65647461748856e965272e33cb996a66dd0971c309ffcaa4cfd5f9ca0ea1d927ec0f8d7d2dedd52b71bf07c624ed9ce1d5a076e09785d6447c2873070a83ac7bd89e602b94017d1b6fdb1c6d1845de3c2e506e3a973"}}, &(0x7f0000000180)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "bd28124c29f70dded88c124139b237c772d31bf34b5cc7bdba482fa556c3cd47c62b42f4c48f736d39461ec2773c8e0dd22dee5a3ba5933de6ea5835bfe800c35a1147c01e963f4521166a882b604ee00c7a7effbd251485699496e318f342bae16b366a6d441af3fd85ffce7ce27adfc6c86c153fb0771fb5e60ba3382403b3a48acbeec304dc2062f5e4c0b15e30fe22e1d1e8f5a11c36d44f2abfb35d05aa218919bbec030d2b8aab462b8354634ad7fa08c52506a0d8bb0ac96a513e5c0eeb"}}}, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x0, 0x5, 0x34, "50325c6eb388610f660bb90100d100112cf4f85931406fbdd9df1351b88628dc0ac8eea92eebafb5b83dc9afe4942d16f736aef2"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)=ANY=[@ANYBLOB="c00505eeffff151f2e61c48403b8a9671b83e1400000000000"], &(0x7f00000003c0)={0x40, 0x5, 0x4, "ad9a0cb8"}}) 3.615723517s ago: executing program 2 (id=755): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xffffffff, 0x1, 0x13, 0xffffffffffffffff, 0x0) (async) r1 = syz_io_uring_setup(0x2063, &(0x7f0000000000)={0x0, 0x7c82, 0x40, 0x2, 0x78}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) (async) r3 = open$dir(&(0x7f0000001180)='./file0\x00', 0xc000, 0x10) syz_io_uring_submit(0x0, r0, r2, &(0x7f00000011c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140)='./file0\x00', r3, 0x400}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001240), 0x408200, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xd0, r5, 0x400, 0xe00, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x60c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xbb}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x11d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf8f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x9}, 0x20000000) (async, rerun: 64) sendmsg$AUDIT_TRIM(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x10, 0x3f6, 0x300, 0x70bd26, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) (rerun: 64) sendmsg(r4, &(0x7f0000001880)={&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f0000001840)=[{&(0x7f0000001600)="73fc26d2dea45f3d858bf157ab8ecdf17e5ea9d641025ca8cd4346d00a9405c996667f76e9a6bf9aaf59223a41f8e92d822bd5f1fb0a53369c864d41a50485683e47d3195fb261c29cd371a4fd62f397893743158417ed638f9437105774ed17e92e61f241427f1126d3fb3330f81ed5bb2290b3fcb5324e67a4c159efa7d5dbd8592816a4c2c4a863402109404755d8c05b3e8822f9b89416b12552d928d764db55e49f5120edde21ab31e34730ebde641f0393ec5e90d6a97fcb10aee5820b8e49edbc96", 0xc5}, {&(0x7f0000001700)="e58d48933b03c2cf3a38b5dd33938655c9b4595d6edef6ebd215292131c834eb31658e156aba88f1e3f80de29da45ee13cf2131a5cfea2b57f247d1aa09d257ddc59e5fae94cb4c8e0f91e67a061ce0727c8", 0x52}, {&(0x7f0000001780)="1d6a24deecaf8b71f8139fa19c71810bc261d00715d46457c3f948f0e2e98d6970389221266bb1804e08093f447cc1ff7f2d0dc9", 0x34}, {&(0x7f00000017c0)="bdab90f294108c8c6865f77a3e1ad4a5c2a368791e85ffd69cf2cb671715c78344ff9ad918191c433cf8038060b8c832648f782180f96951cdff773201df67e00430483cd0efe2f88eda182e2c35e5ed7ca617537f381bf0ce8e35fb85853a24bd2b27528a86b1caf1", 0x69}], 0x4}, 0x4000801) (async) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000018c0), 0x20000, 0x0) getsockname$netlink(r6, &(0x7f0000001900), &(0x7f0000001940)=0xc) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000001980)={0x1950, 0x0, 0x300e, 0x7, 0x38, {0x3, 0x9}}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000019c0)=0x1) (async, rerun: 32) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001a00), 0x10000, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a80), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000001c00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xd0, r8, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xa73}, {0x8, 0x15, 0xb63}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa8f}, {0x6, 0x11, 0xddc}, {0x8, 0x15, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfb98}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0xffffffff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44050}, 0x10080) (async) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async) ioctl$IOC_PR_REGISTER(r6, 0x401870c8, &(0x7f0000001c40)={0xcaa8, 0x4, 0x1}) (async) pwritev2(r1, &(0x7f0000001d80)=[{&(0x7f0000001c80)="bd031676c148277b8b002eaba2259a285841cadc2410deffec9b55855b35628874610ebcbfedd22ee662cccc72c377a1fbe473234b8a2c1dc7becd74b847ad17e72a1344c10559248e398e83603184043fb572235886f49bcefd4552fcb0bc3a160d0e6ce3272ce78de5653023bd34f069bc7b0116556742c9f6dac6911fe92d76fe9eb65a0f358e343047753e35d97b5235da2a54c7807075393b200040f07379f268e27e569d997733b2bad4dae901636b3cabaffd7ae0e2f5dcbdc60c303277d98d083aa9ba2f371aef01a7ac0be389920b5eeddb613176801e3bf2a1957a15396a10fd58c98311038ac0f7c6f52937789f5de1fee2", 0xf7}], 0x1, 0x6, 0x2, 0x14) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001e00)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, r5, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x431c, 0x13}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20000050) ioctl$SNDCTL_TMR_STOP(r7, 0x5403) (async) r10 = open$dir(&(0x7f0000001f00)='./file1\x00', 0x608c00, 0xa0) unlinkat(r10, &(0x7f0000001f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0xa0, r5, 0x714, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x43}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f558487a94ef64f31628a813a7"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "382af66c16"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x1f580e}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "710c13160d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8011}, 0x8000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003100), r6) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x70, r11, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xa0e, 0x26}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e31f2732698fc91e77d84499a8617f09"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4ce97e49f18a7721202e7514934893ed"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d0a49f534474b8fd44a181d9705acad4"}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_usb_connect(0x1, 0x2d2, &(0x7f0000003240)={{0x12, 0x1, 0x310, 0x9f, 0xba, 0xf3, 0x40, 0xd49, 0x7010, 0x8a7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c0, 0x2, 0x0, 0x8, 0x40, 0x80, "", [{{0x9, 0x4, 0xb3, 0x3, 0x5, 0x9e, 0xff, 0x4f, 0x8, [], [{{0x9, 0x5, 0xb39d766f47e0a18a, 0x0, 0x8, 0x9e, 0xb, 0x80}}, {{0x9, 0x5, 0x3, 0xa, 0x3ff, 0x7, 0x6, 0x6, [@generic={0xe3, 0x22, "1fd0dc8f022dbaa6e4e06b75639daf1168c2dd960d74b953eaa8cc73f886ecba2ac70650d5ff85ed705ec3f0b88acf2cfe204de238c3c122dde3f8a8f54ab4493cbb87f3cd16a95be00202b4246122add8c3bf789ce38c6c12ae80a4415d0557099dcfb590f8cca225f5644d02afbf2cc51555519502c12fda1e8d235b4b45a22308612472f7eee07e3b62c24e7c58a15858fe30d30215ea043b4f00648f02ac9a1efe584b75a995ba74a176ebad8d71b79627c91de4b3284d275073f5af5e957792b657b35186dbad2c2e5e0187a863ac95d2c1b7dae05be96bbf1097af039640"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x4, 0x2, 0x95, [@generic={0x3f, 0x23, "7414ae4ee1852e58fbafc467ca1d2d46c68178bbfa1f34f80852deb4068c7ae57ebc5a2c2ab6759058f01721df70ba4df65ffc4083b3d764815df2a779"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6b3f}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x8e, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe3, 0x1ff}]}}]}}, {{0x9, 0x4, 0x1c, 0xc, 0x4, 0x5, 0xd9, 0xf5, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x26}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0x6, "25de683404"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x402, 0x2, 0x4, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x3, 0x2, 0x5}]}, @generic={0xc6, 0x10, "94549c529153e9ecdca577427020f52b6b8e8473d74be6e42373d338c3c8d587a59d667dc284088debe9edd52e506787c8966903ffd228fe852c3d14a249248c3b6ca0caacaddcad421ea4f9be80a171ccd59ee69f5dc7764a7c47a8c49f5b58718005070ab6c2cb494db4e13dccb0a8b46e73763b8f47097405d2022b14521aa9213269441ca3f36bdeebe0417ce1e6ab00ecef3f876a5d383754f2dd9be6ae21c467d3fd248dc2ac76e2d3966708d3bbf76e3f61369ead05c22ed6499c6f4695a1236f"}], [{{0x9, 0x5, 0x9, 0x3, 0x400, 0x1, 0xe, 0x93, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x2, 0x2}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0xb1, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x9, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x26, 0xfff6}]}}]}}]}}]}}, &(0x7f00000036c0)={0xa, &(0x7f0000003540)={0xa, 0x6, 0x310, 0x8, 0x7, 0x5, 0x20, 0x4}, 0x8, &(0x7f0000003580)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0xaf, &(0x7f00000035c0)=@string={0xaf, 0x3, "d01aba5599596f3e0ecfc71713f43fc28521e98b20f6496f5dbe483da955d316835dc61b1719cb25f03b8d70b5ea3684391d8b2f869becfe8d3ce11755948d6c229542a123d174518d3037bf61c7c944ef8346224720bb0fb6809db6eacf91b84ae92b01aef233f9acf1d022b02fb824765ca31ad47a36f2a9e444cbdfdf44a5c3d855a9dd98a4236a477cda87983518aef04ffb622420406aebee576406f75ae8c2d2127231e0dca8ba250467"}}, {0x4, &(0x7f0000003680)=@lang_id={0x4, 0x3, 0x807}}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000003700)={0x2, 0x8}, &(0x7f0000003740)=0x8) 3.387226411s ago: executing program 8 (id=756): syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x200) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000960100060100839ddfc226000000002a90a027b3ff82e854988b147043022effffe868a67964dd9183265e6e562138cfa44bfd40785a21dd39e3055baa29b5a7423f2111583954d5447cfabadcd8d59914bc565a51f82200"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2.854128557s ago: executing program 2 (id=757): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc2042, 0x140) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x3}, 0x1, 0x38, 0x9, 0x8, 0x28, 'syz0\x00', "4cb4412d67cb6a409d0ccab16b2d25fd760885eb90458f190a018920fb489acc", "4c4fd123a288618a4cf413564c69a4112b7ffc470502f8143bf985ffd21cfbe5", [{0x9, 0xee1, {0x3, 0xfffff70f}}, {0x6, 0x5, {0x3, 0x1}}, {0x140, 0x8, {0x2, 0x1}}, {0x6, 0x1, {0x2, 0x9}}, {0x11c, 0x1}, {0x5, 0x0, {0x3, 0x1}}, {0x2, 0x0, {0x2, 0xdd}}, {0x0, 0x9, {0x0, 0x3}}, {0x4ff, 0x81, {0x1, 0x7}}, {0x2, 0x101d, {0x3, 0xf}}, {0x5, 0x9, {0x0, 0x6}}, {0x1, 0x9}, {0x400, 0x4, {0x0, 0xccb8}}, {0xa6c, 0xfff8, {0x1, 0x3}}, {0x5, 0xff80, {0x1, 0x7ff}}, {0x4, 0x3, {0x3, 0x6ab2}}, {0x8, 0x7f, {0x0, 0x3}}, {0x8, 0x0, {0x2, 0x80000000}}, {0xa, 0x1, {0x0, 0x6}}, {0x8, 0x5, {0x1, 0x2}}, {0x1, 0x8, {0x0, 0x80}}, {0x4, 0x80, {0x1, 0x1}}, {0x3, 0x3000, {0x0, 0x401}}, {0x1, 0xbee8, {0x2, 0x8}}, {0xa, 0xe84, {0x1, 0x6}}, {0x1000, 0x200, {0x1, 0x7ff}}, {0x1, 0x4, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x994}}, {0x8001, 0x3, {0x2, 0x4}}, {0x8, 0xe, {0x1, 0x9}}, {0x1, 0x1209, {0x1, 0x5}}, {0xe096, 0x40, {0x1, 0x5}}, {0x0, 0x5, {0x0, 0xa7}}, {0x2, 0x3, {0x0, 0x6ab7}}, {0xfffe, 0x4, {0x0, 0x37}}, {0x8, 0x4, {0x3, 0x710}}, {0x600, 0x1, {0x0, 0x200}}, {0x4, 0x3, {0x3, 0xd}}, {0xffff, 0xcd, {0x3, 0x2}}, {0x735, 0x7f, {0x3, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44004}, 0x20040004) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="c74424000f000000c74424026a9e0000c7442406000000000f018414c1c1490fc7610dc442499e2bb9800000c00f3235004000000f30c7442402176c0000c7442406000000000fee1424240f682b430f785508b805000000b90e15900b0f01c1430f00d5c7442400654d0000c7442402f9ca00000f011424", 0x78}], 0x1, 0x5f, &(0x7f00000001c0)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.753955557s ago: executing program 8 (id=758): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) syz_open_dev$sg(&(0x7f0000000840), 0x800000000004, 0x189482) (async) syz_open_dev$sg(&(0x7f0000000880), 0x0, 0x20a00) (async) r2 = socket$inet(0x2, 0x800, 0x9) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000002c0)=0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x2, 0x5, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000500)=0x10) (async) sendmmsg$inet_sctp(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="ca", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="200000e7ffffffffffffff000200000001000c0001040000ffffffff", @ANYRES32=0x0], 0x20, 0x20008040}], 0x1, 0x0) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x888e, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) (async) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}, {&(0x7f00000008c0)="66bfaf13411667d21f9b9fdbe0188fc4d6294245bf9c07e24cdc6eff8ecfddb90820f223fe0e1597131b12af686c914d0fcb1d7ef56b318c0cb16268ef6b930b942c37b28626aae2091e85b083a58a7ddcd339d1264d7294339741d3f30b924dc90235b1676ba7eb41449e1b0b093d5229f58361612b4d9800d0309c3aec5afe737f2700dfdc5df70b421c146210fda2392a3ee4f2d2a10c8e013928e5ed79f28b63d7b2100f6a55dc957d0fb703466b5dd45def12a3230a5c1261be45df4fecabd438b39d", 0xc5}, {&(0x7f0000000b00)="fc78b92fb25a35212510040453e0218c25501d75cfeb98c62da6dcca9ca7fe27b6a235c388d2d8fbd84083a0f6c80db8ef65305f61e4b4e080d141ddcf37052b9f69b64f5d32212909ea5fe07a1104c7bf98cc9d57aee9fe87726fa81ad5c9338a5d9d01ee113142d1811c08b2fbe14475e2cfbb0d9aee9ed0ead66c7a7745afea59828be6672d4a797c4cb6024049dfb40c89eb9986f8738455054723bfc6adb123205398cca8a69b6d9ebf1ee221ef44f93856ad9605d22d88db0c524b29ded79fc94070013f5f6b388645ffac0c10c2da460dcacb01db4b", 0xd9}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)}}], 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x50641, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000440)=0xffffffff, 0x4) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x502, 0x0) write$tun(r10, &(0x7f0000000c00)=ANY=[], 0x340a) (async) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000300)={0x10001, 0x4, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) syz_usb_connect(0x5, 0xf4, &(0x7f0000000540)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d2a407210400020122c705090500100004f4082501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b770bf357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c60000"], 0x0) 2.618263527s ago: executing program 2 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7ffffffd, 0x4) write$binfmt_script(r1, 0x0, 0x6f4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x47, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a101"], 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) fcntl$notify(r0, 0x402, 0x4df5b240c89b21c) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x0, 0x0, 0xfffc}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x48, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x17, 0x1, 0x5, 0x6, [{0xe, 0x7, "9602857026aaad8d145c5a3878b0e817082dacc17a72e4a4edf9590a47b06309c067a677d973a5b32bf8a6b5278304d95855c03be13f"}]}}}}}, 0x7e) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2.332080041s ago: executing program 6 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r2 = syz_create_resource$binfmt(&(0x7f0000002880)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000280)='./file0\x00') setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./dev\x00', &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000005c0)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro64=0x2400, 0x8}}], 0x68}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = fsopen(&(0x7f0000000380)='ramfs\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r9 = geteuid() lstat(&(0x7f00000006c0)='./dev/sda1\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuseblk(&(0x7f0000000580), &(0x7f0000000600)='./dev\x00', &(0x7f0000000640), 0x11c0001, &(0x7f00000027c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[], [{@context={'context', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, ',(,'}}, {@fowner_lt={'fowner<', r11}}]}}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r7, 0x1, 0x18) symlinkat(&(0x7f00000003c0)='.\x00', r12, &(0x7f0000000400)='./file0\x00') openat2(r12, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x8}, 0x18) sendto$unix(r12, &(0x7f00000004c0)="070c062c40db", 0x6, 0x10, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) 1.83451915s ago: executing program 7 (id=761): r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000002c0)) sendmsg$inet6(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="944c", 0x2}], 0x1}, 0x20000010) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getgroups(0x2, &(0x7f0000000300)=[0x0, 0x0]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x2, 0xfffffffe, 0x40, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x10, 0x21ec1014, 0x7}}) 1.817902748s ago: executing program 6 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x60ac80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f000000c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f00000006c0)="67670fc7b56c000000f3de2b650f30baf80c66b8cc27948c66efbafc0c66b81400000066ef81be009000000f235cd9ff0f20950f20d86635080000000f22d80faef7", 0x42}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="355d38d658ff121750cb01960ae82278ee120fd759c232f108be68884398c9134e0d4f14216bcfa5e21c6768c0398313366063d2600c1c6a72b60e6921e415", @ANYRES16=r7, @ANYRES64=r6], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x8881) ioctl$KDDELIO(r3, 0x4b35, 0x3c7) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000540), 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r7, @ANYRES64=r9, @ANYRESDEC=r0], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x2401c884) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000001c0)="f0820d5166b9800000c00f326635000100000f30f0830f05d38700006526d23b0f79dbb808010f00d89a9b006c000f21aaf30f1a89cfb1"}], 0x1f3, 0x0, 0x0, 0x0) r11 = epoll_create1(0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) write(r12, &(0x7f00000003c0)="05be68c5c543e280d18070b15923e566546f3e6507b233f3ea0a33b010ad4548719bf4e7c1", 0x25) epoll_pwait(r11, &(0x7f0000000380), 0x0, 0x2d516fba, 0x0, 0x0) 1.310382189s ago: executing program 6 (id=763): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/189, 0xbd}], 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000010280)={0x6, &(0x7f0000000140)=[{0x0, 0x9, 0xff}, {0x0, 0xe, 0x87, 0x4}, {0x100, 0x7, 0x7f, 0xa}, {0x8, 0x12, 0x6, 0x6}, {0xb, 0x5, 0x10, 0x80000000}, {0x765a, 0x2e, 0x83, 0x5}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000010280)={0x6, &(0x7f0000000140)=[{0x0, 0x9, 0xff}, {0x0, 0xe, 0x87, 0x4}, {0x100, 0x7, 0x7f, 0xa}, {0x8, 0x12, 0x6, 0x6}, {0xb, 0x5, 0x10, 0x80000000}, {0x765a, 0x2e, 0x83, 0x5}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000010300), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000010340)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) (async) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000010340)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r2, &(0x7f0000010380)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000103c0)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x200) dup3(r3, r2, 0x0) (async) r4 = dup3(r3, r2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000010380)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$tipc(r5, &(0x7f0000010440)={&(0x7f0000010480)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x88000) (async) sendmsg$tipc(r5, &(0x7f0000010440)={&(0x7f0000010480)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x88000) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000010400)=0x16) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000010500)={0x2e, 0x21, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000104c0)=@any_dev={0x2, 0x70e, 0x0, 0x0, 0x1000, 0xb, 0xffffffffffffffff}}}, &(0x7f0000010580)=0x0) syz_ublk_setup_queues(r4, r6, &(0x7f00000105c0)={0x0, 0xc24b, 0x200, 0x2, 0x1ff, 0x0, r0}, &(0x7f0000010640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19ff, 0x40, 0x2, 0x2f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ae4, 0x20, 0x1, 0x22b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40ef, 0x20, 0x2, 0x28f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa892, 0x400, 0x0, 0x25b, 0x0, r0}}], 0x4, &(0x7f00000118c0)={0x2e, 0x8, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xb}, 0x0, 0x0, '\x00', {0x0, 0x560, 0x0, &(0x7f00000108c0)=@buf_1k="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"}}, &(0x7f0000011940)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_SCRUB_METADATA(r7, 0xc040583c, &(0x7f00000102c0)={0x14, 0x0, 0xa31, 0x8, 0x80}) 1.191569721s ago: executing program 8 (id=764): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) migrate_pages(0x0, 0x266d, &(0x7f0000000180)=0xff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'dummy0\x00', &(0x7f0000000380)=@ethtool_channels={0x3d, 0x2, 0x7, 0x1, 0x200, 0xffffffff, 0x98, 0x40, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x3, 0x80000000, {{0x2b, 0x4, 0x2, 0x0, 0xac, 0x60, 0x0, 0xff, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0x7, 0xc5, [@rand_addr=0x64010100]}, @cipso={0x86, 0x43, 0x3, [{0x6, 0x8, "cd072bc3879f"}, {0x2, 0x11, "93e0e6e7ea18b63e044720b87866d5"}, {0x7, 0x3, '0'}, {0x7, 0x8, "b5987ee48f6a"}, {0x2, 0x2}, {0x0, 0x11, "ed9520ac3b1461246200328c6f2cfd"}, {0x5, 0x6, "b62e974c"}]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x13, 0x76, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0x12, "b4857ce52343e2309ca590bcd57db9da"}, {0x1, 0xe, "73a824f069ad507c3735d2c2"}, {0x6, 0xe, "4069349fcce4b382d04cb438"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x3, 0x80000000, {{0x2b, 0x4, 0x2, 0x0, 0xac, 0x60, 0x0, 0xff, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0x7, 0xc5, [@rand_addr=0x64010100]}, @cipso={0x86, 0x43, 0x3, [{0x6, 0x8, "cd072bc3879f"}, {0x2, 0x11, "93e0e6e7ea18b63e044720b87866d5"}, {0x7, 0x3, '0'}, {0x7, 0x8, "b5987ee48f6a"}, {0x2, 0x2}, {0x0, 0x11, "ed9520ac3b1461246200328c6f2cfd"}, {0x5, 0x6, "b62e974c"}]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x13, 0x76, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0x12, "b4857ce52343e2309ca590bcd57db9da"}, {0x1, 0xe, "73a824f069ad507c3735d2c2"}, {0x6, 0xe, "4069349fcce4b382d04cb438"}]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="a6d246d2df4f44cd9262a7251eb6459b0a40988e89f9bce658ba3a1fc279fe90d276b5df56482ca718e30527f35708891a3353d43ed021967ab38af9b408aa9f986a817e79d371f527838d578234e21af6325d7e75e5aa8aa7520dadfef79e0f63ffef033f3ae987c95c9a55a8496d86174025876fd608efbee32672e893716bb0ae61fab5c39fe598b20f7d5604a89d8ff66a18675719bdaa8ec9663a32fb580af72cf667cc331e8d18d1471ad861eefe448868afd972fde51d35f7fd2919cda64a40702577671eaee1aaabdb3246f6a7fb6fb800814abfc00606ead90e4d5936c6", 0xe2}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x30, 0x0, 0x1, [0xffff, 0x7f, 0x8, 0x7, 0x0, 0x8, 0x8]}, @lsrr={0x83, 0xb, 0x52, [@dev={0xac, 0x14, 0x14, 0x2f}, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x90}}], 0x1, 0x8000) (async) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="a6d246d2df4f44cd9262a7251eb6459b0a40988e89f9bce658ba3a1fc279fe90d276b5df56482ca718e30527f35708891a3353d43ed021967ab38af9b408aa9f986a817e79d371f527838d578234e21af6325d7e75e5aa8aa7520dadfef79e0f63ffef033f3ae987c95c9a55a8496d86174025876fd608efbee32672e893716bb0ae61fab5c39fe598b20f7d5604a89d8ff66a18675719bdaa8ec9663a32fb580af72cf667cc331e8d18d1471ad861eefe448868afd972fde51d35f7fd2919cda64a40702577671eaee1aaabdb3246f6a7fb6fb800814abfc00606ead90e4d5936c6", 0xe2}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x30, 0x0, 0x1, [0xffff, 0x7f, 0x8, 0x7, 0x0, 0x8, 0x8]}, @lsrr={0x83, 0xb, 0x52, [@dev={0xac, 0x14, 0x14, 0x2f}, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x90}}], 0x1, 0x8000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f00000009c0)={0x2, 0xc5fb, @value=0x3}) add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)="bc30a071d8bcb879", 0x8, 0xfffffffffffffffe) (async) r4 = add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)="bc30a071d8bcb879", 0x8, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000b80)={r4, r5, r4}, &(0x7f0000000bc0)=""/83, 0xfffffffffffffe8b, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x0) (async) r6 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x0) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000100)={0x0, 0x5, 0x4000d}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000680)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000700)="88", 0x1}], 0x1}, 0x4048043) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, &(0x7f0000000c40)={0x20, 0x9, 0xda, {0xda, 0x24, "c5b1d4f105d2d5f9303d678088b7f1026f01b089efc029c47331dc0298a4dd0c216a976d0634c952b2c03b0f8eb3da8e9172a8978bd18e585889474bc1e3825721ce63bc5b9079431ad839428da19416d975817ac7fc3f734d2d964e847d46b95d3c5aff3c26b122b301e1d465e71e3204ec1bb1ed0cebe0ded39ecb7d84c3c36eba82873be4eb3fce2225479f7a216f9362f1ff14237c4590962df90165c4d9bf6639eb9bafa5f90d10877cf6d817eca8a603da463178bf4dccd7fc01d8dc335f1a20567c195cf3080c5b58156a4135e1f9ad450b14f3a4"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="00039b00050000000000000018673144fc47345c817e554f15d942fb182feadc124b72da26f3ac677c3193d7f210e825fe5d32f9e6808c8c257a5a9a3253fc719c4362789911812a91f867ddf306e37567f858df35cda4d196ba3c2b8013c6f584c3a3d2f7f816ca0b986ceeb4bc67461bbbd0473507527d44685ba026ea69d3bde92d2529fa2743fa89f0e1ac97111120817bfec38d38b9cc43602cc5936b29bb3cfcd14ffe8bc218"], &(0x7f0000000e00)={0x0, 0xf, 0x1f1, {0x5, 0xf, 0x1f1, 0x6, [@generic={0x14, 0x10, 0x3, "9de4d135e40607d42867eafe732c50b158"}, @generic={0xc4, 0x10, 0xa, "00ae95749c2eb3e55f962280ca4913914d9541a846ff5710cf4cedb4a1579a82d26381ddfdae6eaa6871f884b1cc06ddbfde5c6591ce0f99893a7b832f4c80321c690741c86d8fb7d9563afc7a9e6b141bfe2d6cdd12d0c055b7f7fde898d9ff489116913089ae04359f656d74d96a5f3dd6e9b776c1b07a569380ba7377a77ff03d469876948d80fed4ab615e7729f0eead352c9e64c7d78d43b3707a2cb2921af6a489596cc785cec383bf40dea259c927de0be4c672a7aa83782fa9f4a72358"}, @ss_container_id={0x14, 0x10, 0x4, 0x68, "f4b92e482d1fc90323f17dae4d7df8e2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xcd, 0x2, 0x4, 0x5}, @generic={0xeb, 0x10, 0x2, "d95e1fbf3d9640279b1abfeeff5d936bcf891466c30b9b64a6c968fb30b25ac5195f057091abd97c8a5ce129543cc91c1075606f6e1aa257640982633800f1a9d86a5d78bf2f014214009230b6d237fa4053a6a2e1a5ea86c488eea91c32550710e696e53427363639d7c294aa20ca9aad109a17667fb4da4952b0d9ab76872d44dfbf5502ff3eac10049353e540e03ebf88b0b8af8833116f45ba629c68e0b5b92b00f0d4b69569b14cdc6816bf582836109daa048fd977541ee85008f048ef7a4590f37fd1ad342ba287c25b02264a531f14b21fbc38a5cfbdb0d4aa9a555f80871058f95908fe"}]}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x93, 0x18, 0x0, 0x4, "cf245854", "b1cbb69f"}}, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd9, 0x3, 0xf6, 0xc0, 0x20, 0x9, 0x3}}}, &(0x7f0000001580)={0x84, &(0x7f00000010c0)=ANY=[@ANYBLOB="2015f3000000d8a5b1161e5f88cb5834a68c517c9784bc469287c7a184e7f5f4fe3d64784e08a2869d17c79ac700949763ec12e715939f6990a343a90516303fe697989c1de28a1b1d69634fdd6740595dcd171b3dda7ce1a624a5969736bc704891aed0c52701764411a19d7f1a279fda5b33f36b5369c39e199116eca9f1841452837f17bdec947cde88ef1c9bdca3071c70c05a6a5741ec8933906afec49a4065b2d62e4a58171d9b306918e23fc8effb522330dc71b22f78bf6417a1c8a39517f2583294e62de17a01356dbfe42bc3fc4309fc4422577fa9016019339775bb1ab1732401a4cc9d5a513b6a98b61e0d0900000000000000"], &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001280)=ANY=[@ANYBLOB=' \x00\b\x00'/14], &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001340)={0x40, 0xb, 0x2, "9db6"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0xffc8}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001400)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001440)={0x40, 0x19, 0x2, "5fba"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x81a}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x3}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r9 = dup(r7) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000800)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) write$cgroup_int(r3, &(0x7f0000000000)=0x8, 0x12) fcntl$dupfd(r9, 0x406, r3) (async) fcntl$dupfd(r9, 0x406, r3) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000440)={0x87, @empty, 0x4e20, 0x0, 'rr\x00', 0x20, 0x6, 0x41}, 0x2c) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0xfffffffa, 0x0, 0x4, 0x0, 0x2}) (async) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0xfffffffa, 0x0, 0x4, 0x0, 0x2}) 1.189259123s ago: executing program 7 (id=765): socket$netlink(0x10, 0x3, 0xc) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x190) r2 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0xfffc, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() (async) r4 = getpid() r5 = semget$private(0x0, 0x4000000009, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) fremovexattr(r6, &(0x7f0000000280)=@known='trusted.overlay.upper\x00') semtimedop(r5, &(0x7f0000000440)=[{0x4, 0xaee, 0x1000}, {0x4, 0x7d07, 0x1800}], 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000004c0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000480)}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x3, r8, 0x0, 0x2, 0x1b, &(0x7f0000000500)="3ad202a71f8c2673c67645d5cfe1fe02000000e637b78f7b231f1e"}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x3, r8, 0x0, 0x2, 0x1b, &(0x7f0000000500)="3ad202a71f8c2673c67645d5cfe1fe02000000e637b78f7b231f1e"}) r9 = syz_pidfd_open(r4, 0x0) setns(r9, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 633.018315ms ago: executing program 6 (id=766): fsopen(&(0x7f0000000000)='nfs\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='\xf9i\"\xfa9\xce@\xb3\x1b\x0fx\x82/\x95\xf6\x8c\xb3\xc1\xa1\xc0J\xbek\x7f[\xb5\x9d\xea\xc5\xe7\xf5d\x14\xa0\x02J\xce\x83\xda=\xb6\xdf\xe7\xf7A\xcf\xc0\n\xd4\xfd\x9a\xc4m\x0fv\x06\x1b\x801:\x04 R\x8f\xbb+\xadTn\xe9o\ab\x06;\xee5\xfc\xda\x17\xd7\xcb\xbc\xa1\x1a\x03{\xf3\xbey\x8f%j\xc7\xa4', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001e40)='source\x00', &(0x7f0000001e80)='#\x00', 0x0) 578.089968ms ago: executing program 6 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90812d84, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002380)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000023c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x20, 0x0, 0x0, {0x0, 0x34}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000044c0)="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", 0x2000, &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006580)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x20000003, 0x5, 0x4, 0x8, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x0, r3, 0x0, 0x80, 0x8}}, {0xffffdfffffffffff, 0x401, 0x6, 0x8100008, '\x9e\xaf\x82\xa7\x13&'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0) 482.076613ms ago: executing program 2 (id=768): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000000)=0x8, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000a80)=[@textreal={0x8, 0x0}], 0x1, 0x6f, &(0x7f0000000ac0)=[@cr4={0x1, 0x40d62}], 0x1) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 372.494559ms ago: executing program 2 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b03"], 0xfdef) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x30, 0x0, 0x4, 0xfffff020}, {0x6, 0x4, 0x0, 0x8000}]}, 0x10) 338.93205ms ago: executing program 8 (id=770): r0 = landlock_create_ruleset(&(0x7f0000000680)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x9}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffe0}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xdc}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x83}]}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_IE={0x11, 0x3, "41e61539f2dbdccf805c9a9fdf"}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x10000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r7, 0x715, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5c3, 0x1f}}}}, [@NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x3}, {0x4, 0x2}, {0x7, 0x9}, {0x3, 0xa}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x7}, {0x2, 0x1}, {0x3, 0x6}, {0x4}, {0x2, 0x9}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0x4}, {0x6, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0x5}, {0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7a822363ffbb02be}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x40, 0x8, 0x7, 0xfc00, 0x6, 0x4, 0x2e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x70, 0x5, 0x0, 0x9, 0x8, 0x7]}}]}]}, @NL80211_ATTR_PBSS={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x40) 254.104114ms ago: executing program 6 (id=771): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 208.025596ms ago: executing program 7 (id=772): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a070089b4c45a10000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x8, 0x6, 0x401, @vifc_lcl_addr=@private=0xa010100, @broadcast}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000180)=""/145, 0x91}, {0x0}], 0x3}, 0x10f}], 0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/11, 0xb}}], 0x1, 0x10022, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r3, 0x4004480d, &(0x7f0000000100)) 149.080163ms ago: executing program 8 (id=773): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='autofs\x00', 0x91000, 0x0) 49.827734ms ago: executing program 2 (id=774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85512, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582d5"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000001900010028bd7000fddbdf252dc447bdf8b40018"], 0x18}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044) close(r3) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b28, &(0x7f0000000940)={'wlan1\x00', @random="1f00"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@local, 0x9c940000, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x9c940000, 0x0, 0x2, 0x2, 0x5, 0x102}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r7 = syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040030410600005010203010902200001010080320904"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000180)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="200efef20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 8 (id=775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x17, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000100)={0xfff9, [0x0, 0x800], 0x4}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0xf) (async) ioctl$TCFLSH(r4, 0x400455c8, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f01c4d1480726650f78020f00dd0f796a00ba4300b86ca3efdec4f2aa3e6567263e0f01c30f20e06635000200000f22e0", 0x31}], 0xb44, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 20035][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.521835][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.708727][ T10] usb 8-1: USB disconnect, device number 15 [ 209.875911][ T6492] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 210.027244][ T6492] usb 3-1: Using ep0 maxpacket: 32 [ 210.032502][ T6492] usb 3-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 210.050309][ T6492] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 210.050324][ T6492] usb 3-1: config 0 has no interface number 0 [ 210.052031][ T6492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.052044][ T6492] usb 3-1: Product: syz [ 210.052051][ T6492] usb 3-1: Manufacturer: syz [ 210.052059][ T6492] usb 3-1: SerialNumber: syz [ 210.072804][ T6492] usb 3-1: config 0 descriptor?? [ 210.107272][ T6492] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 210.175900][ T10] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 210.319145][ T6492] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 210.335741][ T10] usb 9-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 210.361679][ T6492] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 210.378151][ T10] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 210.378167][ T10] usb 9-1: config 0 has no interface number 0 [ 210.378190][ T10] usb 9-1: config 0 interface 41 has no altsetting 0 [ 210.409959][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.409975][ T10] usb 9-1: Product: syz [ 210.409983][ T10] usb 9-1: Manufacturer: syz [ 210.409990][ T10] usb 9-1: SerialNumber: syz [ 210.442392][ T10] usb 9-1: config 0 descriptor?? [ 210.676449][ T5690] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 210.741780][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.742060][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.744835][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 210.745305][ T6492] usb 3-1: USB disconnect, device number 54 [ 210.782991][ T6492] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 210.804611][ T6492] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 210.843332][ T6492] quatech2 3-1:0.51: device disconnected [ 210.882846][ T5690] usb 8-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 210.895938][ T5690] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.898446][ T5690] usb 8-1: config 0 descriptor?? [ 210.931083][ T5690] pwc: Samsung MPC-C10 USB webcam detected. [ 211.140236][ T5690] pwc: send_video_command error -71 [ 211.140247][ T5690] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 211.140307][ T5690] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 211.141812][ T5690] usb 8-1: USB disconnect, device number 16 [ 211.274336][ T10] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 211.495267][ T5340] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 211.647851][ T5340] usb 7-1: New USB device found: idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 211.648646][ T5340] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.648680][ T5340] usb 7-1: config 0 interface 0 has no altsetting 0 [ 211.650324][ T5340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.650337][ T5340] usb 7-1: Product: syz [ 211.650345][ T5340] usb 7-1: Manufacturer: syz [ 211.650352][ T5340] usb 7-1: SerialNumber: syz [ 211.693062][ T5340] usb 7-1: config 0 descriptor?? [ 211.725469][ T5340] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 211.747172][ T5340] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.748273][ T5340] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 211.748303][ T5340] usb 7-1: media controller created [ 211.814314][ T5340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.984236][ T8040] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.000817][ T8041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.000934][ T5340] DVB: Unable to find symbol tda10046_attach() [ 212.000941][ T5340] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 212.000948][ T5340] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 212.209518][ T5340] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 212.211695][ T5340] usb 7-1: USB disconnect, device number 35 [ 212.591679][ T10] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 212.592533][ T10] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 212.592664][ T10] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 212.622676][ T5690] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 212.646359][ T10] usb 9-1: USB disconnect, device number 29 [ 212.766090][ T5690] usb 8-1: device descriptor read/64, error -71 [ 213.005744][ T5690] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 213.148542][ T5690] usb 8-1: device descriptor read/64, error -71 [ 213.256729][ T5690] usb usb8-port1: attempt power cycle [ 213.597320][ T5690] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 213.618917][ T5690] usb 8-1: device descriptor read/8, error -71 [ 213.650532][ T5340] hid (null): unknown global tag 0xe [ 213.653692][ T5340] hid-generic 0800:0009:8001.000B: unknown main item tag 0x7 [ 213.653712][ T5340] hid-generic 0800:0009:8001.000B: unknown global tag 0xe [ 213.653720][ T5340] hid-generic 0800:0009:8001.000B: item 0 1 1 14 parsing failed [ 213.654067][ T5340] hid-generic 0800:0009:8001.000B: probe with driver hid-generic failed with error -22 [ 213.736560][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 213.851378][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.512'. [ 213.851636][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.512'. [ 213.864688][ T5690] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 213.885999][ T5690] usb 8-1: device descriptor read/8, error -71 [ 213.886326][ T10] usb 9-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 213.887114][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.889726][ T10] usb 9-1: config 0 descriptor?? [ 213.892315][ T8070] CIFS mount error: No usable UNC path provided in device string! [ 213.892315][ T8070] [ 213.892489][ T8070] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.894217][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 213.996766][ T5690] usb usb8-port1: unable to enumerate USB device [ 214.455261][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 214.606450][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 214.610128][ T9] usb 7-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 214.610985][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.610998][ T9] usb 7-1: config 0 has no interface number 0 [ 214.612700][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.612713][ T9] usb 7-1: Product: syz [ 214.612720][ T9] usb 7-1: Manufacturer: syz [ 214.612728][ T9] usb 7-1: SerialNumber: syz [ 214.676724][ T9] usb 7-1: config 0 descriptor?? [ 214.683565][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 214.724323][ T10] gspca_stv06xx: I2C: Read error writing address: -71 [ 214.739242][ T10] usb 9-1: USB disconnect, device number 30 [ 214.888698][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.904669][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.924020][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.924316][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.386291][ T5609] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 215.915380][ T5340] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 216.066353][ T5340] usb 3-1: Using ep0 maxpacket: 32 [ 216.074807][ T5340] usb 3-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 216.086688][ T5340] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.086706][ T5340] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.093268][ T5340] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 216.093283][ T5340] usb 3-1: Product: syz [ 216.093291][ T5340] usb 3-1: Manufacturer: syz [ 216.144613][ T5340] hub 3-1:4.0: USB hub found [ 216.177612][ T9] gspca_spca1528: reg_w err -71 [ 216.177662][ T9] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 216.184941][ T9] usb 7-1: USB disconnect, device number 36 [ 216.281607][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.281836][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.282049][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.282240][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.282442][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.282630][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.349516][ T5340] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 216.377809][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.378060][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.413588][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.413808][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.414000][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.414168][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.414334][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.414554][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.414729][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.414911][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.480237][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.480417][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.480589][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.480787][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.480981][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.481152][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.481317][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.551911][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.552142][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.552325][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.560795][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.561006][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.561224][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.607898][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.608122][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.608295][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.608467][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.608634][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.608807][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.614719][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.614924][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.681551][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.681744][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.681913][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.682095][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.682270][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.682436][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.747248][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.747469][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.747640][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.747810][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.747989][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.748179][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.750674][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.752431][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.752684][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.752856][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.753030][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.753196][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.753364][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.753552][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.811139][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.833244][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 216.906472][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.906659][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.906843][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.907040][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.907208][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.909602][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.909787][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.909982][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 216.910152][ T8094] UBIFS error (pid: 8094): cannot open "ubi0_0", error -19 [ 217.565299][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 217.715205][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 217.715645][ T9] usb 7-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 217.716438][ T9] usb 7-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 217.716464][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.723378][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.723391][ T9] usb 7-1: Product: syz [ 217.723399][ T9] usb 7-1: Manufacturer: syz [ 217.723406][ T9] usb 7-1: SerialNumber: syz [ 217.795266][ T9] usb 7-1: config 0 descriptor?? [ 218.081096][ T8123] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 218.315843][ T9] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 218.468140][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 218.468162][ T9] usb 9-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=1.00 [ 218.469043][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.743640][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.743929][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.806339][ T5688] usb 3-1: USB disconnect, device number 55 [ 218.835348][ C0] port100 9-1:1.0: NFC: Urb failure (status -71) [ 218.835377][ C0] port100 9-1:1.0: NFC: Urb failure (status -71) [ 218.839037][ T9] port100 9-1:1.0: NFC: Could not get supported command types [ 218.888743][ T9] usb 9-1: USB disconnect, device number 31 [ 218.940759][ T8129] dvmrp31: entered allmulticast mode [ 219.007934][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 219.057824][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 219.072902][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 219.086993][ T8133] device-mapper: ioctl: device name cannot contain '/' [ 219.167210][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 219.167240][ T10] usb 8-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 219.168023][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.168036][ T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.168059][ T10] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 219.168079][ T10] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 219.168098][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 219.168111][ T10] usb 8-1: config 1 interface 1 has no altsetting 0 [ 219.262251][ T10] usb 8-1: string descriptor 0 read error: -22 [ 219.262328][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.769819][ T8143] jffs2: notice: (8143) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 219.843894][ T8141] 9p: Unknown Cache mode or invalid value f [ 220.161845][ T10] usb 8-1: 2:0: failed to get current value for ch 1 (-71) [ 220.174858][ T10] usb 8-1: Warning! Unlikely big volume step count (=30292), linear volume or wrong cval->res? [ 220.174873][ T10] usb 8-1: [2] FU [Speaker Playback Volume] ch = 1, val = -30292/0/1 [ 220.256309][ T5688] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 220.326048][ T10] usb 8-1: USB disconnect, device number 21 [ 220.408228][ T5688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.408259][ T5688] usb 3-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 220.409454][ T5688] usb 3-1: config 12 has an invalid interface number: 99 but max is 0 [ 220.409469][ T5688] usb 3-1: config 12 has no interface number 0 [ 220.409491][ T5688] usb 3-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 220.409505][ T5688] usb 3-1: config 12 interface 99 has no altsetting 0 [ 220.474603][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.474619][ T5688] usb 3-1: Product: syz [ 220.474626][ T5688] usb 3-1: Manufacturer: syz [ 220.474634][ T5688] usb 3-1: SerialNumber: syz [ 221.372251][ T9] usb 7-1: USB disconnect, device number 37 [ 221.385337][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 221.500281][ T5688] usb 3-1: no audio or video endpoints found [ 221.521999][ T5688] usb 3-1: USB disconnect, device number 56 [ 221.540007][ T10] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 221.567621][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.567638][ T10] usb 8-1: Product: syz [ 221.567645][ T10] usb 8-1: Manufacturer: syz [ 221.567652][ T10] usb 8-1: SerialNumber: syz [ 221.885791][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 221.928809][ T5690] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 222.034107][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 222.034145][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 222.034452][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 222.034481][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 222.087624][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 222.087853][ T5690] usb 9-1: New USB device found: idVendor=28bd, idProduct=0909, bcdDevice=0.00 [ 222.094765][ T9] usb 7-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 222.125029][ T5690] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.125088][ T5690] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.125100][ T5690] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.125214][ T5690] usb 9-1: config 0 interface 0 has no altsetting 0 [ 222.125235][ T5690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.137261][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.137277][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 222.202015][ T5690] usb 9-1: config 0 descriptor?? [ 222.203168][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 222.223006][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.223021][ T9] usb 7-1: Product: syz [ 222.223028][ T9] usb 7-1: Manufacturer: syz [ 222.223036][ T9] usb 7-1: SerialNumber: syz [ 222.268491][ T10] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 222.269432][ T9] usb 7-1: config 0 descriptor?? [ 222.314309][ T10] usb 8-1: USB disconnect, device number 22 [ 222.494106][ T9] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22 [ 222.901163][ T8177] syz.6.536 (8177): /proc/8176/oom_adj is deprecated, please use /proc/8176/oom_score_adj instead. [ 222.951523][ T9] rc_core: IR keymap rc-imon-pad not found [ 222.951537][ T9] Registered IR keymap rc-empty [ 222.951588][ T9] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 222.951618][ T9] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 223.006626][ T9] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 223.047092][ T9] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 223.093749][ T9] imon 7-1:0.0: iMON device (15c2:0045) on usb<7:38> initialized [ 223.125823][ T10] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 223.190530][ T5690] usbhid 9-1:0.0: can't add hid device: -71 [ 223.190606][ T5690] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 223.223259][ T5690] usb 9-1: USB disconnect, device number 32 [ 223.232701][ T8177] imon:lcd_write: invalid payload size: 0 (expected 8) [ 223.261372][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 223.262779][ T9] usb 7-1: USB disconnect, device number 38 [ 223.286573][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 223.286594][ T10] usb 8-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 223.320305][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.320321][ T10] usb 8-1: Product: syz [ 223.320329][ T10] usb 8-1: Manufacturer: syz [ 223.320336][ T10] usb 8-1: SerialNumber: syz [ 223.388609][ T10] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 223.419809][ T10] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 223.454248][ T10] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 223.483452][ T10] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 223.503845][ T10] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 223.568652][ C0] usb 8-1: malformed indat packet [ 223.568873][ C0] usb 8-1: malformed indat packet [ 223.569060][ C0] usb 8-1: malformed indat packet [ 223.569245][ C0] usb 8-1: malformed indat packet [ 223.569429][ C0] usb 8-1: malformed indat packet [ 223.569612][ C0] usb 8-1: malformed indat packet [ 223.569806][ C0] usb 8-1: malformed indat packet [ 223.781498][ T8194] netlink: 'syz.7.539': attribute type 10 has an invalid length. [ 223.797092][ T8194] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 223.797222][ T8194] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 223.797233][ T8194] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 223.801994][ T10] usb 8-1: USB disconnect, device number 23 [ 223.881510][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 223.914716][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 223.936281][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 223.957249][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 223.978527][ T10] keyspan 8-1:1.0: device disconnected [ 223.993633][ T5690] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 224.155299][ T5690] usb 3-1: Using ep0 maxpacket: 16 [ 224.162555][ T5690] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.162586][ T5690] usb 3-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 224.171047][ T5690] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 224.211101][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.211118][ T5690] usb 3-1: Product: syz [ 224.211125][ T5690] usb 3-1: Manufacturer: syz [ 224.211133][ T5690] usb 3-1: SerialNumber: syz [ 224.424192][ T8207] tipc: Started in network mode [ 224.424226][ T8207] tipc: Node identity ac1414bb, cluster identity 4711 [ 224.441066][ T8207] tipc: New replicast peer: 172.30.0.8 [ 224.453564][ T5690] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 224.453932][ T5690] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 224.475426][ T8207] tipc: Enabled bearer , priority 10 [ 224.644326][ T5690] usb 3-1: 2:1 : can't get High Capability descriptor [ 224.970389][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.970635][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.004852][ T1055] rpcbind: server 127.0.0.1 not responding, timed out [ 225.327851][ T8243] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 225.455373][ T5690] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 225.574965][ T5688] tipc: Node number set to 2886997179 [ 225.608751][ T5690] usb 8-1: unable to get BOS descriptor or descriptor too short [ 225.608783][ T5690] usb 8-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 225.609626][ T5690] usb 8-1: config 142 has an invalid interface number: 251 but max is 0 [ 225.609640][ T5690] usb 8-1: config 142 descriptor has 1 excess byte, ignoring [ 225.609649][ T5690] usb 8-1: config 142 has no interface number 0 [ 225.609669][ T5690] usb 8-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 225.609683][ T5690] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 225.609702][ T5690] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 225.609713][ T5690] usb 8-1: config 142 interface 251 has no altsetting 0 [ 225.612096][ T5690] usb 8-1: string descriptor 0 read error: -22 [ 225.612166][ T5690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.729831][ T8238] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 225.729934][ T8238] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 225.733913][ T5690] cypress_m8 8-1:142.251: HID->COM RS232 Adapter converter detected [ 225.765857][ T5690] usb 8-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 225.845287][ T5688] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 225.944475][ T5690] usb 8-1: USB disconnect, device number 24 [ 225.977483][ T5690] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 225.977855][ T5690] cypress_m8 8-1:142.251: device disconnected [ 225.995289][ T5688] usb 7-1: Using ep0 maxpacket: 8 [ 226.002417][ T5688] usb 7-1: New USB device found: idVendor=1b96, idProduct=000a, bcdDevice=0.00 [ 226.026739][ T5688] usb 7-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 226.026769][ T5688] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.026783][ T5688] usb 7-1: config 0 interface 0 has no altsetting 0 [ 226.026802][ T5688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.069128][ T5688] usb 7-1: config 0 descriptor?? [ 226.283447][ T5688] usb 7-1: string descriptor 0 read error: -71 [ 226.303547][ T5688] usb 7-1: USB disconnect, device number 39 [ 226.721891][ T10] usb 3-1: USB disconnect, device number 57 [ 226.835289][ T5688] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 227.005423][ T5688] usb 8-1: Using ep0 maxpacket: 8 [ 227.007491][ T5688] usb 8-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 227.041949][ T5688] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.041966][ T5688] usb 8-1: Product: syz [ 227.041974][ T5688] usb 8-1: Manufacturer: syz [ 227.041981][ T5688] usb 8-1: SerialNumber: syz [ 227.045078][ T5688] usb 8-1: config 0 descriptor?? [ 227.072926][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 227.101149][ T5688] gspca_main: se401-2.14.0 probing 047d:5003 [ 227.180272][ T33] audit: type=1326 audit(1792293886.520:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.8.558" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa14119e559 code=0x0 [ 227.302145][ T8266] Bluetooth: MGMT ver 1.23 [ 227.314657][ T8255] netlink: 763 bytes leftover after parsing attributes in process `syz.7.555'. [ 227.536085][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.536379][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.543641][ T8269] netlink: 763 bytes leftover after parsing attributes in process `syz.7.555'. [ 227.546071][ T5688] gspca_se401: Wrong descriptor type [ 227.645248][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 227.780623][ T5688] usb 8-1: USB disconnect, device number 25 [ 227.795731][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 227.798128][ T10] usb 7-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 227.798951][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 227.798965][ T10] usb 7-1: config 179 has no interface number 0 [ 227.798987][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 227.799000][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 227.799014][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.799034][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 227.799048][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 227.799069][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.804776][ T8268] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 228.244161][ T10] usb 7-1: USB disconnect, device number 40 [ 228.244196][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 228.244223][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 228.405373][ T5707] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 228.555362][ T5707] usb 9-1: Using ep0 maxpacket: 16 [ 228.559259][ T5707] usb 9-1: unable to get BOS descriptor or descriptor too short [ 228.559289][ T5707] usb 9-1: New USB device found: idVendor=0499, idProduct=101c, bcdDevice=0.40 [ 228.560138][ T5707] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 150, changing to 7 [ 228.561713][ T5707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.561726][ T5707] usb 9-1: Product: syz [ 228.561734][ T5707] usb 9-1: Manufacturer: syz [ 228.561741][ T5707] usb 9-1: SerialNumber: syz [ 228.682799][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.682893][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.682949][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.683019][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.683073][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.683147][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.683202][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.683270][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.683325][ T8284] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 228.827800][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 228.864491][ T5707] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.864882][ T5707] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 228.889878][ T5707] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.893693][ T5707] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 228.962437][ T5707] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.995692][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 229.106098][ T5707] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 229.127001][ T5707] usb 9-1: USB disconnect, device number 33 [ 229.153095][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 229.153127][ T10] usb 8-1: New USB device found: idVendor=056a, idProduct=0015, bcdDevice=0.00 [ 229.155277][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 229.155298][ T10] usb 8-1: can't read configurations, error -71 [ 229.218479][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.471527][ T8300] bond0: (slave ip6tnl0): refused to change device type [ 229.488085][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'. [ 229.488111][ T8300] netlink: 48 bytes leftover after parsing attributes in process `syz.2.570'. [ 229.525993][ T5690] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 229.675428][ T5707] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 229.675940][ T5690] usb 7-1: Using ep0 maxpacket: 32 [ 229.676808][ T5690] usb 7-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 229.680218][ T5690] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.680232][ T5690] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.680244][ T5690] usb 7-1: config 0 interface 0 has no altsetting 0 [ 229.681908][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.681921][ T5690] usb 7-1: Product: syz [ 229.681929][ T5690] usb 7-1: Manufacturer: syz [ 229.681937][ T5690] usb 7-1: SerialNumber: syz [ 229.722550][ T5690] usb 7-1: config 0 descriptor?? [ 229.846970][ T5707] usb 9-1: New USB device found: idVendor=0cf2, idProduct=6250, bcdDevice=0.00 [ 229.847896][ T5707] usb 9-1: config index 0 descriptor too short (expected 804, got 36) [ 229.853399][ T5707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.853413][ T5707] usb 9-1: Product: syz [ 229.853420][ T5707] usb 9-1: Manufacturer: syz [ 229.853428][ T5707] usb 9-1: SerialNumber: syz [ 229.907344][ T5707] ums_eneub6250 9-1:1.0: USB Mass Storage device detected [ 229.910091][ T8308] FAULT_INJECTION: forcing a failure. [ 229.910091][ T8308] name failslab, interval 1, probability 0, space 0, times 0 [ 229.910109][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.2.573 Not tainted syzkaller #0 PREEMPT(full) [ 229.910121][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.910129][ T8308] Call Trace: [ 229.910134][ T8308] [ 229.910138][ T8308] dump_stack_lvl+0xe8/0x150 [ 229.910157][ T8308] should_fail_ex+0x3eb/0x540 [ 229.910175][ T8308] should_failslab+0xa8/0x100 [ 229.910189][ T8308] __kmalloc_cache_noprof+0x9e/0x600 [ 229.910207][ T8308] ? super_dev_alloc+0x4e/0x100 [ 229.910217][ T8308] ? super_dev_alloc+0x4e/0x100 [ 229.910228][ T8308] ? __list_lru_init+0x542/0x680 [ 229.910245][ T8308] super_dev_alloc+0x4e/0x100 [ 229.910257][ T8308] sget_fc+0xfa8/0x1a60 [ 229.910271][ T8308] ? __pfx_afs_dynroot_test_super+0x10/0x10 [ 229.910287][ T8308] ? __pfx_afs_set_super+0x10/0x10 [ 229.910299][ T8308] ? __pfx_sget_fc+0x10/0x10 [ 229.910313][ T8308] ? __kasan_kmalloc+0x93/0xb0 [ 229.910324][ T8308] ? __kmalloc_cache_noprof+0x31c/0x600 [ 229.910339][ T8308] ? __kmalloc_cache_noprof+0x148/0x600 [ 229.910353][ T8308] ? afs_get_tree+0x3b9/0x12c0 [ 229.910366][ T8308] afs_get_tree+0x725/0x12c0 [ 229.910376][ T8308] ? apparmor_capable+0x126/0x170 [ 229.910391][ T8308] vfs_get_tree+0x92/0x2a0 [ 229.910402][ T8308] do_new_mount+0x325/0xb00 [ 229.910420][ T8308] ? __pfx_do_new_mount+0x10/0x10 [ 229.910435][ T8308] ? ns_capable+0x84/0xe0 [ 229.910448][ T8308] ? path_mount+0x647/0x1050 [ 229.910463][ T8308] ? user_path_at+0xd4/0x160 [ 229.910481][ T8308] __se_sys_mount+0x31d/0x420 [ 229.910499][ T8308] ? __pfx___se_sys_mount+0x10/0x10 [ 229.910517][ T8308] ? __x64_sys_mount+0x20/0xc0 [ 229.910532][ T8308] do_syscall_64+0x166/0x520 [ 229.910547][ T8308] ? trace_irq_disable+0x3b/0x140 [ 229.910558][ T8308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.910569][ T8308] ? clear_bhb_loop+0x70/0xc0 [ 229.910582][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.910592][ T8308] RIP: 0033:0x7fe6f4d9e559 [ 229.910603][ T8308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.910612][ T8308] RSP: 002b:00007fe6f5c00028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.910625][ T8308] RAX: ffffffffffffffda RBX: 00007fe6f5025fa0 RCX: 00007fe6f4d9e559 [ 229.910632][ T8308] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 229.910639][ T8308] RBP: 00007fe6f4e35ab8 R08: 00002000000001c0 R09: 0000000000000000 [ 229.910646][ T8308] R10: 0000000000004080 R11: 0000000000000246 R12: 0000000000000000 [ 229.910653][ T8308] R13: 00007fe6f5026038 R14: 00007fe6f5025fa0 R15: 00007ffdcbbf1d88 [ 229.910669][ T8308] [ 230.155813][ T5707] scsi host1: usb-storage 9-1:1.0 [ 230.451939][ T8319] netlink: 88 bytes leftover after parsing attributes in process `syz.7.576'. [ 230.452116][ T8318] netlink: 88 bytes leftover after parsing attributes in process `syz.7.576'. [ 230.516658][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.520648][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.679798][ T5690] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 230.889110][ T5690] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 230.889519][ T5690] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 231.006347][ T5707] ums_eneub6250 9-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 231.012644][ T5707] usb 9-1: USB disconnect, device number 34 [ 231.458638][ T8328] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 231.518280][ T8334] io-wq is not configured for unbound workers [ 231.715427][ T5707] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 231.773903][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.579'. [ 231.867235][ T5707] usb 8-1: New USB device found: idVendor=172f, idProduct=0500, bcdDevice=0.00 [ 231.870536][ T5707] usb 8-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.870555][ T5707] usb 8-1: config 0 interface 0 has no altsetting 0 [ 231.870573][ T5707] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.873062][ T5707] usb 8-1: config 0 descriptor?? [ 232.015630][ T8342] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input24 [ 232.107923][ T8346] x_tables: unsorted underflow at hook 2 [ 232.312582][ T5707] waltop 0003:172F:0500.000C: unbalanced collection at end of report description [ 232.326742][ T5707] waltop 0003:172F:0500.000C: probe with driver waltop failed with error -22 [ 232.437307][ T8351] tipc: Failed to remove unknown binding: 66,0,0/33554436:3187295928/3187295929 [ 232.437886][ T8351] tipc: Failed to remove unknown binding: 66,0,0/33554436:3187295928/3187295929 [ 232.513292][ T5688] usb 8-1: USB disconnect, device number 28 [ 232.733110][ T8358] program syz.8.585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.839274][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.844469][ T5688] usb 7-1: USB disconnect, device number 41 [ 232.973789][ T8363] netlink: 312 bytes leftover after parsing attributes in process `syz.8.588'. [ 232.994757][ T8363] netlink: 1 bytes leftover after parsing attributes in process `syz.8.588'. [ 233.275351][ T5688] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 233.278056][ T5690] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 233.386995][ T5707] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 233.425189][ T5688] usb 7-1: Using ep0 maxpacket: 32 [ 233.425782][ T5688] usb 7-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 233.426121][ T5690] usb 3-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 233.427573][ T5688] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 233.427587][ T5688] usb 7-1: config 0 has no interface number 0 [ 233.427608][ T5688] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 233.427722][ T5688] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.427734][ T5688] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 233.427745][ T5688] usb 7-1: config 0 interface 196 has no altsetting 0 [ 233.428654][ T5690] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 233.428666][ T5690] usb 3-1: Product: syz [ 233.428673][ T5690] usb 3-1: Manufacturer: syz [ 233.428681][ T5690] usb 3-1: SerialNumber: syz [ 233.433889][ T5690] usb 3-1: config 0 descriptor?? [ 233.441001][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.441014][ T5688] usb 7-1: Product: syz [ 233.441022][ T5688] usb 7-1: Manufacturer: syz [ 233.441029][ T5688] usb 7-1: SerialNumber: syz [ 233.490079][ T5690] ch341 3-1:0.0: ch341-uart converter detected [ 233.515384][ T6492] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 233.548567][ T5707] usb 8-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 233.563572][ T5688] usb 7-1: config 0 descriptor?? [ 233.602649][ T5707] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.602684][ T5707] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.602695][ T5707] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.602709][ T5707] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.602727][ T5707] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.622570][ T8364] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 233.679871][ T5707] usb 8-1: config 0 descriptor?? [ 233.695458][ T6492] usb 9-1: Using ep0 maxpacket: 32 [ 233.695987][ T6492] usb 9-1: New USB device found: idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 233.696007][ T6492] usb 9-1: too many configurations: 17, using maximum allowed: 8 [ 233.696851][ T6492] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.696883][ T6492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.696893][ T6492] usb 9-1: config 0 has no interface number 0 [ 233.697652][ T6492] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.697664][ T6492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.697694][ T6492] usb 9-1: config 0 has no interface number 0 [ 233.698458][ T6492] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.698470][ T6492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.698480][ T6492] usb 9-1: config 0 has no interface number 0 [ 233.699258][ T6492] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.699271][ T6492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.699280][ T6492] usb 9-1: config 0 has no interface number 0 [ 233.706659][ T6492] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.706673][ T6492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.706704][ T6492] usb 9-1: config 0 has no interface number 0 [ 233.870061][ T6492] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.870077][ T6492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.870086][ T6492] usb 9-1: config 0 has no interface number 0 [ 233.873386][ T6492] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.873400][ T6492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.873430][ T6492] usb 9-1: config 0 has no interface number 0 [ 233.874397][ T6492] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 233.874410][ T6492] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.874419][ T6492] usb 9-1: config 0 has no interface number 0 [ 233.961452][ T6492] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.961488][ T6492] usb 9-1: Product: syz [ 233.961495][ T6492] usb 9-1: Manufacturer: syz [ 233.961503][ T6492] usb 9-1: SerialNumber: syz [ 234.002829][ T6492] usb 9-1: config 0 descriptor?? [ 234.006136][ T6492] etas_es58x 9-1:0.2: Starting syz syz (Serial Number syz) [ 234.031441][ T5688] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 234.031614][ T5688] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 234.066769][ T5688] usb 7-1: USB disconnect, device number 42 [ 234.113843][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.114132][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.143297][ T5690] usb 3-1: failed to receive control message: -71 [ 234.143331][ T5690] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 234.169345][ T5690] usb 3-1: USB disconnect, device number 58 [ 234.170516][ T5690] ch341 3-1:0.0: device disconnected [ 234.228303][ T5707] input: HID 17ef:6047 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:17EF:6047.000D/input/input25 [ 234.248241][ T6492] usb 9-1: USB disconnect, device number 35 [ 234.318386][ T5707] lenovo 0003:17EF:6047.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 234.449504][ T8368] Invalid ELF header len 2 [ 234.465630][ T5690] usb 8-1: USB disconnect, device number 29 [ 234.985457][ T5690] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 235.136170][ T5690] usb 3-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 235.156833][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.156849][ T5690] usb 3-1: Product: syz [ 235.156856][ T5690] usb 3-1: Manufacturer: syz [ 235.156864][ T5690] usb 3-1: SerialNumber: syz [ 235.163335][ T5690] usb 3-1: config 0 descriptor?? [ 235.179015][ T5690] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 059 [ 235.434215][ T8388] validate_nla: 24 callbacks suppressed [ 235.434229][ T8388] netlink: 'syz.8.595': attribute type 10 has an invalid length. [ 235.434501][ T8388] veth1_macvtap: left promiscuous mode [ 235.464856][ T8388] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 235.610676][ T5690] (null): failure reading functionality [ 235.629245][ T5690] i2c i2c-3: connected i2c-tiny-usb device [ 235.687648][ T8403] FAULT_INJECTION: forcing a failure. [ 235.687648][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 235.687670][ T8403] CPU: 0 UID: 0 PID: 8403 Comm: syz.6.598 Not tainted syzkaller #0 PREEMPT(full) [ 235.687692][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.687704][ T8403] Call Trace: [ 235.687711][ T8403] [ 235.687720][ T8403] dump_stack_lvl+0xe8/0x150 [ 235.687749][ T8403] should_fail_ex+0x3eb/0x540 [ 235.687782][ T8403] should_failslab+0xa8/0x100 [ 235.687806][ T8403] __kvmalloc_node_noprof+0x171/0x820 [ 235.687836][ T8403] ? __kmalloc_cache_noprof+0x31c/0x600 [ 235.687864][ T8403] ? bpf_int_jit_compile+0x5af/0x17d0 [ 235.687887][ T8403] ? bpf_int_jit_compile+0x5af/0x17d0 [ 235.687918][ T8403] bpf_int_jit_compile+0x5af/0x17d0 [ 235.687963][ T8403] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 235.688000][ T8403] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 235.688027][ T8403] ? bpf_prepare_filter+0xd5d/0x12d0 [ 235.688042][ T8403] __bpf_prog_select_runtime+0x53d/0xc30 [ 235.688059][ T8403] ? bpf_prog_realloc+0x172/0x210 [ 235.688073][ T8403] bpf_prepare_filter+0x10df/0x12d0 [ 235.688087][ T8403] ? __pfx_seccomp_check_filter+0x10/0x10 [ 235.688102][ T8403] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 235.688114][ T8403] ? __asan_memcpy+0x40/0x70 [ 235.688131][ T8403] bpf_prog_create_from_user+0x2c6/0x440 [ 235.688144][ T8403] ? __pfx_seccomp_check_filter+0x10/0x10 [ 235.688160][ T8403] do_seccomp+0x791/0xdc0 [ 235.688175][ T8403] ? __se_sys_futex+0x3a8/0x450 [ 235.688190][ T8403] ? __pfx_do_seccomp+0x10/0x10 [ 235.688211][ T8403] ? rcu_is_watching+0x16/0xb0 [ 235.688231][ T8403] do_syscall_64+0x166/0x520 [ 235.688246][ T8403] ? trace_irq_disable+0x3b/0x140 [ 235.688257][ T8403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.688267][ T8403] ? clear_bhb_loop+0x70/0xc0 [ 235.688280][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.688290][ T8403] RIP: 0033:0x7fc03b99e559 [ 235.688300][ T8403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.688309][ T8403] RSP: 002b:00007fc03c8ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 235.688321][ T8403] RAX: ffffffffffffffda RBX: 00007fc03bc25fa0 RCX: 00007fc03b99e559 [ 235.688329][ T8403] RDX: 0000200000000600 RSI: 0000000000000008 RDI: 0000000000000001 [ 235.688335][ T8403] RBP: 00007fc03ba35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 235.688342][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.688348][ T8403] R13: 00007fc03bc26038 R14: 00007fc03bc25fa0 R15: 00007ffd2b5c93f8 [ 235.688363][ T8403] [ 235.975238][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.975487][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.120431][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.120690][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.143378][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.143637][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.625237][ T6492] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 236.645247][ T5690] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 236.775234][ T6492] usb 8-1: Using ep0 maxpacket: 8 [ 236.777221][ T6492] usb 8-1: unable to get BOS descriptor or descriptor too short [ 236.777250][ T6492] usb 8-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 236.779455][ T6492] usb 8-1: config 4 interface 0 has no altsetting 0 [ 236.782406][ T6492] usb 8-1: string descriptor 0 read error: -22 [ 236.782454][ T6492] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 236.822117][ T5690] usb 7-1: Using ep0 maxpacket: 32 [ 236.838101][ T5690] usb 7-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 236.859875][ T5690] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 236.859892][ T5690] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 236.859905][ T5690] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.875274][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.875289][ T5690] usb 7-1: Product: syz [ 236.875296][ T5690] usb 7-1: Manufacturer: syz [ 236.875303][ T5690] usb 7-1: SerialNumber: syz [ 236.876546][ T6492] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 236.932608][ T5690] usb 7-1: config 0 descriptor?? [ 236.947904][ T6492] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 236.948199][ T6492] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 236.948226][ T6492] usb 8-1: media controller created [ 237.014492][ T6492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.309543][ T6492] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 237.335038][ T6492] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 237.354466][ T5690] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 237.554198][ T5690] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 237.554237][ T5690] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 237.605898][ T5690] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 237.780080][ T5690] usb 3-1: USB disconnect, device number 59 [ 238.117675][ T5690] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 238.350205][ T8434] ceph: No mds server is up or the cluster is laggy [ 238.805217][ T5690] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 238.955842][ T5690] usb 3-1: New USB device found: idVendor=0b05, idProduct=19b6, bcdDevice=0.00 [ 238.956655][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 238.956673][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.956694][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.960827][ T5690] usb 3-1: config 0 descriptor?? [ 239.405213][ T5688] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 239.408177][ T5690] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0B05:19B6.000E/input/input26 [ 239.414117][ T5340] usb 7-1: USB disconnect, device number 43 [ 239.519324][ T10] usb 8-1: USB disconnect, device number 30 [ 239.551431][ T5690] asus 0003:0B05:19B6.000E: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.2-1/input0 [ 239.579238][ T5688] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 239.603939][ T5688] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.603971][ T5688] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.603982][ T5688] usb 9-1: config 1 has no interface number 0 [ 239.604005][ T5688] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 239.604026][ T5688] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 239.665953][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.666265][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.668998][ T5688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.669019][ T5688] usb 9-1: Product: syz [ 239.669027][ T5688] usb 9-1: Manufacturer: syz [ 239.669034][ T5688] usb 9-1: SerialNumber: syz [ 239.770335][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.770618][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.807611][ T6492] asus 0003:0B05:19B6.000E: Asus failed to set fn lock: -71 [ 239.807679][ T10] usb 3-1: USB disconnect, device number 60 [ 239.994852][ T8453] fido_id[8453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 240.195235][ T5690] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 240.325221][ T5690] usb 7-1: device descriptor read/64, error -71 [ 240.475185][ T10] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 240.565721][ T5690] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 240.584132][ T5688] cdc_ncm 9-1:1.1: bind() failure [ 240.626713][ T10] usb 8-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 240.629106][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.629120][ T10] usb 8-1: Product: syz [ 240.629128][ T10] usb 8-1: Manufacturer: syz [ 240.629135][ T10] usb 8-1: SerialNumber: syz [ 240.632277][ T10] usb 8-1: config 0 descriptor?? [ 240.655349][ T6492] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 240.705720][ T5690] usb 7-1: device descriptor read/64, error -71 [ 240.786771][ T7158] usb 9-1: USB disconnect, device number 36 [ 240.815456][ T5690] usb usb7-port1: attempt power cycle [ 240.836776][ T6492] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 240.840783][ T6492] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.840811][ T6492] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 240.840825][ T6492] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 240.840836][ T6492] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 240.840873][ T6492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.843043][ T8462] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 240.843118][ T8462] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 240.844376][ T6492] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 240.922072][ T6492] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 240.922123][ T6492] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 240.962585][ T6492] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 240.963664][ T6492] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 240.963710][ T6492] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 240.997126][ T6492] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 241.059978][ T8462] jffs2: notice: (8462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.226960][ T5690] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 241.245948][ T5690] usb 7-1: device descriptor read/8, error -71 [ 241.313883][ T6492] usb 3-1: USB disconnect, device number 61 [ 241.330995][ T6492] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 241.349576][ T6492] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 241.350114][ T6492] keyspan 3-1:1.0: device disconnected [ 241.448675][ T8460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.449043][ T8460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.495762][ T5690] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 241.516920][ T5690] usb 7-1: device descriptor read/8, error -71 [ 241.625915][ T5690] usb usb7-port1: unable to enumerate USB device [ 241.805240][ T6492] usb 9-1: new low-speed USB device number 37 using dummy_hcd [ 241.879555][ T10] usb 8-1: f81604_read: reg: 100f failed: -EREMOTEIO [ 241.935354][ T6492] usb 9-1: device descriptor read/64, error -71 [ 242.175228][ T6492] usb 9-1: new low-speed USB device number 38 using dummy_hcd [ 242.275177][ T5690] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 242.305246][ T6492] usb 9-1: device descriptor read/64, error -71 [ 242.415492][ T6492] usb usb9-port1: attempt power cycle [ 242.425547][ T4923] Bluetooth: hci3: command 0x0406 tx timeout [ 242.432524][ T5690] usb 3-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 242.462935][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.462951][ T5690] usb 3-1: Product: syz [ 242.462959][ T5690] usb 3-1: Manufacturer: syz [ 242.462966][ T5690] usb 3-1: SerialNumber: syz [ 242.474336][ T5690] usb 3-1: config 0 descriptor?? [ 242.503693][ T5690] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 062 [ 242.765202][ T6492] usb 9-1: new low-speed USB device number 39 using dummy_hcd [ 242.786318][ T6492] usb 9-1: device descriptor read/8, error -71 [ 242.995292][ T5688] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 243.026548][ T6492] usb 9-1: new low-speed USB device number 40 using dummy_hcd [ 243.045614][ T6492] usb 9-1: device descriptor read/8, error -71 [ 243.147461][ T5688] usb 7-1: Using ep0 maxpacket: 8 [ 243.150564][ T5688] usb 7-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 243.151472][ T5688] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.151485][ T5688] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.151496][ T5688] usb 7-1: config 1 has no interface number 0 [ 243.151516][ T5688] usb 7-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 243.161927][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.161941][ T5688] usb 7-1: Product: syz [ 243.161948][ T5688] usb 7-1: Manufacturer: syz [ 243.161956][ T5688] usb 7-1: SerialNumber: syz [ 243.163162][ T6492] usb usb9-port1: unable to enumerate USB device [ 243.266578][ T10] usb 8-1: f81604_read: reg: 200f failed: -EPROTO [ 243.282024][ T5690] (null): error -EIO: failure setting delay to 10us [ 243.282079][ T5690] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 243.306937][ T10] usb 8-1: USB disconnect, device number 31 [ 243.334194][ T5690] usb 3-1: USB disconnect, device number 62 [ 243.373915][ T10] usb 8-1: f81604_read: reg: 100f failed: -ENODEV [ 243.462141][ T5268] usb 8-1: f81604_read: reg: 200f failed: -ENODEV [ 243.481861][ T10] usb 8-1: f81604_read: reg: 200f failed: -ENODEV [ 243.594501][ T5688] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 243.651071][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.846758][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.846816][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.846860][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.846908][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.846951][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.846995][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.847039][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.847084][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.847127][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 243.847172][ T8480] binder: BINDER_SET_CONTEXT_MGR already set [ 244.184026][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.199464][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.831438][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 244.857769][ T10] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 245.660687][ T10] usb 7-1: USB disconnect, device number 48 [ 246.128922][ T8528] 9pnet_fd: Insufficient options for proto=fd [ 246.175260][ T5688] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 246.329811][ T5688] usb 9-1: New USB device found: idVendor=046d, idProduct=c50c, bcdDevice=0.00 [ 246.330681][ T5688] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.330699][ T5688] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.330710][ T5688] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.330724][ T5688] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.330742][ T5688] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.400101][ T5688] usb 9-1: config 0 descriptor?? [ 246.436550][ T10] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 246.587834][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 246.588379][ T10] usb 7-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 246.596898][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.596914][ T10] usb 7-1: Product: syz [ 246.596921][ T10] usb 7-1: Manufacturer: syz [ 246.596929][ T10] usb 7-1: SerialNumber: syz [ 246.641788][ T10] usb 7-1: config 0 descriptor?? [ 246.661127][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 246.737755][ T1055] IPVS: starting estimator thread 0... [ 246.825754][ T8543] IPVS: using max 56 ests per chain, 134400 per kthread [ 246.864769][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.887491][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.891466][ T8521] kAFS: unable to lookup cell 'syze@s0' [ 246.945027][ T5688] input: HID 046d:c50c as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:046D:C50C.0010/input/input28 [ 246.983815][ T5690] sony 0005:054C:03D5.0011: UNIQ does not contain a MAC address; duplicate check skipped [ 247.112860][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.113215][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.141346][ T5688] logitech 0003:046D:C50C.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.8-1/input0 [ 247.165306][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 247.198635][ T5688] usb 9-1: USB disconnect, device number 41 [ 247.224263][ T5624] udevd[5624]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xcc, key code 108): Invalid argument [ 247.224340][ T5624] udevd[5624]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xd4, key code 103): Invalid argument [ 247.325363][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 247.326008][ T9] usb 3-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 247.326492][ T9] usb 3-1: config 0 has no interfaces? [ 247.332516][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.332531][ T9] usb 3-1: Product: syz [ 247.332539][ T9] usb 3-1: Manufacturer: syz [ 247.332547][ T9] usb 3-1: SerialNumber: syz [ 247.399569][ T9] usb 3-1: config 0 descriptor?? [ 247.473296][ T8556] fido_id[8556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 247.528467][ T5690] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0011/input/input29 [ 247.622865][ T5690] sony 0005:054C:03D5.0011: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 247.727295][ T5690] usb 3-1: USB disconnect, device number 63 [ 247.839314][ T8558] fido_id[8558]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.871308][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.871583][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.118486][ T10] gspca_ov534_9: reg_r err -71 [ 248.375306][ T10] gspca_ov534_9: Unknown sensor 0000 [ 248.375368][ T10] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 248.377064][ T10] usb 7-1: USB disconnect, device number 49 [ 248.545617][ T9] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 248.696480][ T9] usb 9-1: New USB device found: idVendor=145f, idProduct=0212, bcdDevice=0.00 [ 248.697271][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.697285][ T9] usb 9-1: config 0 has no interface number 0 [ 248.697314][ T9] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.697328][ T9] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.697339][ T9] usb 9-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.697352][ T9] usb 9-1: config 0 interface 1 has no altsetting 0 [ 248.698135][ T9] usb 9-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 248.698148][ T9] usb 9-1: Manufacturer: syz [ 248.699785][ T9] usb 9-1: config 0 descriptor?? [ 249.312538][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.312816][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.347550][ T9] uclogic 0003:145F:0212.0012: failed retrieving string descriptor #100: -71 [ 249.347586][ T9] uclogic 0003:145F:0212.0012: failed retrieving pen parameters: -71 [ 249.347608][ T9] uclogic 0003:145F:0212.0012: pen probing failed: -71 [ 249.347620][ T9] uclogic 0003:145F:0212.0012: failed probing parameters: -71 [ 249.347677][ T9] uclogic 0003:145F:0212.0012: probe with driver uclogic failed with error -71 [ 249.404663][ T9] usb 9-1: USB disconnect, device number 42 [ 249.464748][ T8586] jffs2: notice: (8586) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.614750][ T33] audit: type=1326 audit(1792293908.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.6.648" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc03b99e559 code=0x0 [ 249.671175][ T33] audit: type=1326 audit(1792293909.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8592 comm="syz.6.648" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc03b99e559 code=0x0 [ 249.765176][ T5690] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 249.915648][ T5690] usb 3-1: New USB device found: idVendor=0489, idProduct=e057, bcdDevice=0.00 [ 249.916440][ T5690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.916452][ T5690] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 249.916478][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.921347][ T5690] usb 3-1: config 0 descriptor?? [ 250.041277][ T8605] netlink: 156 bytes leftover after parsing attributes in process `syz.8.649'. [ 250.058104][ T8602] netlink: 180 bytes leftover after parsing attributes in process `syz.8.649'. [ 250.094907][ T8599] netlink: 'syz.8.649': attribute type 10 has an invalid length. [ 250.129511][ T8599] team0: Device nlmon0 is of different type [ 250.618076][ T8616] vivid-000: ================= START STATUS ================= [ 250.618138][ T8616] vivid-000: ================== END STATUS ================== [ 250.673681][ T8616]  [ 250.702667][ T5690] Bluetooth: Can't get version to change to load ram patch err [ 250.702680][ T5690] Bluetooth: Loading patch file failed [ 250.702696][ T5690] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 250.733563][ T5690] usb 3-1: USB disconnect, device number 64 [ 251.455312][ T5690] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 251.576005][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 251.591170][ T5690] usb 8-1: device descriptor read/64, error -71 [ 251.726770][ T9] usb 3-1: New USB device found: idVendor=046d, idProduct=0821, bcdDevice=1.00 [ 251.727841][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.727853][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.727877][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.732703][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.732717][ T9] usb 3-1: Product: syz [ 251.732725][ T9] usb 3-1: Manufacturer: syz [ 251.732732][ T9] usb 3-1: SerialNumber: syz [ 251.821276][ T9] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 251.845543][ T5690] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 251.977524][ T5690] usb 8-1: device descriptor read/64, error -71 [ 252.053179][ T9] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 252.053261][ T9] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 252.088413][ T5690] usb usb8-port1: attempt power cycle [ 252.109100][ T9] usb 3-1: USB disconnect, device number 65 [ 252.165684][ T5688] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 252.317269][ T5688] usb 9-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 252.318191][ T5688] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 252.318208][ T5688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 252.320258][ T5688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.320271][ T5688] usb 9-1: Product: syz [ 252.320279][ T5688] usb 9-1: Manufacturer: syz [ 252.320286][ T5688] usb 9-1: SerialNumber: syz [ 252.391441][ T5688] usb 9-1: config 0 descriptor?? [ 252.445951][ T5690] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 252.467855][ T5690] usb 8-1: device descriptor read/8, error -71 [ 252.610714][ T5688] powermate: unknown product id 0240 [ 252.628978][ T5688] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input30 [ 252.634487][ C0] powermate: config urb returned -71 [ 252.635262][ C0] powermate: config urb returned -71 [ 252.645410][ C0] powermate: config urb returned -71 [ 252.645577][ C0] powermate: config urb returned -71 [ 252.688450][ T5688] usb 9-1: USB disconnect, device number 43 [ 252.688576][ C0] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 252.710495][ T5690] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 252.729784][ T5690] usb 8-1: device descriptor read/8, error -71 [ 252.835468][ T5690] usb usb8-port1: unable to enumerate USB device [ 253.034656][ T8670] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 253.055565][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 253.579278][ T9] usb 3-1: New USB device found: idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 253.580083][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.583750][ T9] usb 3-1: config 0 descriptor?? [ 253.632358][ T9] gspca_main: spca505-2.14.0 probing 0733:0430 [ 253.756196][ T5688] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 253.804957][ T9] gspca_spca505: reg write: error -71 [ 253.805005][ T9] spca505 3-1:0.0: probe with driver spca505 failed with error -5 [ 253.826909][ T9] usb 3-1: USB disconnect, device number 66 [ 254.375254][ T5688] usb 7-1: Using ep0 maxpacket: 8 [ 254.381276][ T5688] usb 7-1: New USB device found: idVendor=093a, idProduct=010e, bcdDevice=a5.84 [ 254.393724][ T5688] usb 7-1: config 124 has an invalid interface number: 27 but max is 0 [ 254.393740][ T5688] usb 7-1: config 124 has no interface number 0 [ 254.393755][ T5688] usb 7-1: config 124 interface 27 has no altsetting 0 [ 254.428380][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.428397][ T5688] usb 7-1: Product: syz [ 254.428405][ T5688] usb 7-1: Manufacturer: syz [ 254.428413][ T5688] usb 7-1: SerialNumber: syz [ 254.684085][ T5688] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 254.684142][ T5688] gspca_mr97310a: reg write [21] error -22 [ 254.684185][ T5688] mr97310a 7-1:124.27: probe with driver mr97310a failed with error -22 [ 254.720571][ T5688] usb 7-1: USB disconnect, device number 50 [ 255.257293][ T8722] FAULT_INJECTION: forcing a failure. [ 255.257293][ T8722] name failslab, interval 1, probability 0, space 0, times 0 [ 255.257324][ T8722] CPU: 0 UID: 0 PID: 8722 Comm: syz.7.668 Not tainted syzkaller #0 PREEMPT(full) [ 255.257337][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 255.257347][ T8722] Call Trace: [ 255.257351][ T8722] [ 255.257357][ T8722] dump_stack_lvl+0xe8/0x150 [ 255.257376][ T8722] should_fail_ex+0x3eb/0x540 [ 255.257395][ T8722] should_failslab+0xa8/0x100 [ 255.257406][ T8722] ? security_inode_alloc+0x39/0x310 [ 255.257424][ T8722] kmem_cache_alloc_noprof+0x9c/0x600 [ 255.257438][ T8722] ? make_kgid+0x1d1/0x6a0 [ 255.257449][ T8722] ? security_inode_alloc+0x39/0x310 [ 255.257468][ T8722] security_inode_alloc+0x39/0x310 [ 255.257485][ T8722] inode_init_always_gfp+0x97e/0xd30 [ 255.257503][ T8722] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 255.257515][ T8722] alloc_inode+0x82/0x1b0 [ 255.257529][ T8722] new_inode+0x1f/0x170 [ 255.257545][ T8722] debugfs_create_dir+0x68/0x350 [ 255.257559][ T8722] kvm_create_vm_debugfs+0x1f0/0x8f0 [ 255.257576][ T8722] ? policy_nodemask+0x2cc/0x8e0 [ 255.257591][ T8722] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 255.257614][ T8722] kvm_dev_ioctl+0x1245/0x1700 [ 255.257634][ T8722] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 255.257652][ T8722] ? bpf_lsm_file_ioctl+0x9/0x20 [ 255.257662][ T8722] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 255.257677][ T8722] __se_sys_ioctl+0xfc/0x170 [ 255.257690][ T8722] do_syscall_64+0x166/0x520 [ 255.257704][ T8722] ? trace_irq_disable+0x3b/0x140 [ 255.257716][ T8722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.257733][ T8722] ? clear_bhb_loop+0x70/0xc0 [ 255.257747][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.257758][ T8722] RIP: 0033:0x7f8fe819e559 [ 255.257769][ T8722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.257778][ T8722] RSP: 002b:00007f8fe9027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.257790][ T8722] RAX: ffffffffffffffda RBX: 00007f8fe8425fa0 RCX: 00007f8fe819e559 [ 255.257797][ T8722] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 255.257804][ T8722] RBP: 00007f8fe8235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 255.257811][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.257817][ T8722] R13: 00007f8fe8426038 R14: 00007f8fe8425fa0 R15: 00007fffbbc7f3a8 [ 255.257834][ T8722] [ 255.257900][ T8722] debugfs: out of free dentries, can not create directory '8722-5' [ 255.717376][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.717411][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.016362][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.8.671'. [ 256.109632][ T8735] netlink: 36 bytes leftover after parsing attributes in process `syz.8.671'. [ 257.005420][ T5688] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 257.155726][ T5688] usb 3-1: New USB device found: idVendor=0a5c, idProduct=2033, bcdDevice=c8.51 [ 257.159846][ T5688] usb 3-1: config 2 has an invalid interface number: 56 but max is 0 [ 257.159864][ T5688] usb 3-1: config 2 has no interface number 0 [ 257.163526][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.163540][ T5688] usb 3-1: Product: syz [ 257.163548][ T5688] usb 3-1: Manufacturer: syz [ 257.163565][ T5688] usb 3-1: SerialNumber: syz [ 257.439301][ T5690] usb 3-1: USB disconnect, device number 67 [ 257.648315][ T8800] FAULT_INJECTION: forcing a failure. [ 257.648315][ T8800] name failslab, interval 1, probability 0, space 0, times 0 [ 257.648336][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.7.682 Not tainted syzkaller #0 PREEMPT(full) [ 257.648348][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 257.648356][ T8800] Call Trace: [ 257.648360][ T8800] [ 257.648365][ T8800] dump_stack_lvl+0xe8/0x150 [ 257.648384][ T8800] should_fail_ex+0x3eb/0x540 [ 257.648402][ T8800] should_failslab+0xa8/0x100 [ 257.648414][ T8800] ? key_alloc+0x318/0x1020 [ 257.648430][ T8800] kmem_cache_alloc_noprof+0x9c/0x600 [ 257.648447][ T8800] ? key_alloc+0x318/0x1020 [ 257.648464][ T8800] key_alloc+0x318/0x1020 [ 257.648485][ T8800] keyring_alloc+0x45/0xb0 [ 257.648503][ T8800] lookup_user_key+0x475/0x1230 [ 257.648522][ T8800] ? __pfx_lookup_user_key+0x10/0x10 [ 257.648537][ T8800] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 257.648555][ T8800] ? _copy_from_user+0x94/0xb0 [ 257.648570][ T8800] ? memdup_user+0x99/0xd0 [ 257.648586][ T8800] __se_sys_add_key+0x315/0x420 [ 257.648598][ T8800] ? __pfx___se_sys_add_key+0x10/0x10 [ 257.648614][ T8800] ? __x64_sys_add_key+0x20/0xc0 [ 257.648634][ T8800] do_syscall_64+0x166/0x520 [ 257.648650][ T8800] ? trace_irq_disable+0x3b/0x140 [ 257.648663][ T8800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.648674][ T8800] ? clear_bhb_loop+0x70/0xc0 [ 257.648687][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.648698][ T8800] RIP: 0033:0x7f8fe819e559 [ 257.648708][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.648718][ T8800] RSP: 002b:00007f8fe9027028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 257.648730][ T8800] RAX: ffffffffffffffda RBX: 00007f8fe8425fa0 RCX: 00007f8fe819e559 [ 257.648737][ T8800] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 257.648744][ T8800] RBP: 00007f8fe8235ab8 R08: fffffffffffffffe R09: 0000000000000000 [ 257.648751][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.648757][ T8800] R13: 00007f8fe8426038 R14: 00007f8fe8425fa0 R15: 00007fffbbc7f3a8 [ 257.648773][ T8800] [ 257.785839][ T4923] Bluetooth: hci4: command 0x0406 tx timeout [ 258.176430][ T8810] netlink: 'syz.6.684': attribute type 13 has an invalid length. [ 258.182279][ T8811] ima: rule for LSM 'u' is undefined [ 258.183351][ T33] audit: type=1807 audit(1792293924.513:11): action=measure func=FILE_CHECK obj_type=u res=0 [ 258.211296][ T33] audit: type=1802 audit(1792293924.553:12): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.686" res=0 errno=-22 [ 258.213284][ T8810] fuse: fd is not a fuse device [ 258.213452][ T8809] ima: policy update failed [ 258.213858][ T33] audit: type=1802 audit(1792293924.553:13): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.686" res=0 errno=-22 [ 258.377564][ T8816] netlink: zone id is out of range [ 258.377575][ T8816] netlink: zone id is out of range [ 258.377579][ T8816] netlink: zone id is out of range [ 258.377583][ T8816] netlink: zone id is out of range [ 258.377587][ T8816] netlink: zone id is out of range [ 258.377590][ T8816] netlink: zone id is out of range [ 258.377790][ T8816] netlink: zone id is out of range [ 258.377795][ T8816] netlink: zone id is out of range [ 258.377799][ T8816] netlink: zone id is out of range [ 258.377803][ T8816] netlink: zone id is out of range [ 258.525877][ T5690] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 258.580057][ T8821] input: syz0 as /devices/virtual/input/input32 [ 258.675941][ T5690] usb 7-1: Using ep0 maxpacket: 16 [ 258.676405][ T5690] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0102, bcdDevice=0.40 [ 258.678745][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.678758][ T5690] usb 7-1: Product: syz [ 258.678765][ T5690] usb 7-1: Manufacturer: syz [ 258.678773][ T5690] usb 7-1: SerialNumber: syz [ 258.866757][ T5688] usb 9-1: new low-speed USB device number 44 using dummy_hcd [ 258.998354][ T5688] usb 9-1: device descriptor read/64, error -71 [ 259.173463][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.173739][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.220999][ T8810] input: syz0 as /devices/virtual/input/input31 [ 259.247586][ T5688] usb 9-1: new low-speed USB device number 45 using dummy_hcd [ 259.336938][ T5690] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 259.344980][ T5690] usb 7-1: USB disconnect, device number 51 [ 259.375789][ T5688] usb 9-1: device descriptor read/64, error -71 [ 259.485518][ T5688] usb usb9-port1: attempt power cycle [ 259.577803][ T8839] jffs2: notice: (8839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 259.826875][ T5688] usb 9-1: new low-speed USB device number 46 using dummy_hcd [ 259.848668][ T5688] usb 9-1: device descriptor read/8, error -71 [ 260.085506][ T5688] usb 9-1: new low-speed USB device number 47 using dummy_hcd [ 260.105676][ T5688] usb 9-1: device descriptor read/8, error -71 [ 260.216015][ T5688] usb usb9-port1: unable to enumerate USB device [ 260.487498][ T5688] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 260.634132][ T8860] netlink: 120 bytes leftover after parsing attributes in process `syz.2.702'. [ 260.645064][ T5688] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 260.661762][ T5688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 260.661780][ T5688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 260.661954][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'. [ 260.663474][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.663486][ T5688] usb 7-1: Product: syz [ 260.663494][ T5688] usb 7-1: Manufacturer: syz [ 260.663501][ T5688] usb 7-1: SerialNumber: syz [ 260.733826][ T5688] usb 7-1: config 0 descriptor?? [ 260.748868][ T5688] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 260.971761][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.972061][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.137962][ T5688] usb 7-1: USB disconnect, device number 52 [ 261.305667][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 261.308174][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 261.308189][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 261.762931][ T5609] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 261.762948][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 261.762961][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.762967][ T5609] Workqueue: hci5 hci_rx_work [ 261.762988][ T5609] Call Trace: [ 261.762993][ T5609] [ 261.762998][ T5609] dump_stack_lvl+0xe8/0x150 [ 261.763015][ T5609] sysfs_create_dir_ns+0x271/0x2a0 [ 261.763028][ T5609] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 261.763041][ T5609] ? do_raw_spin_unlock+0xf5/0x200 [ 261.763059][ T5609] kobject_add_internal+0x622/0xcd0 [ 261.763074][ T5609] kobject_add+0x163/0x240 [ 261.763088][ T5609] ? __pfx_kobject_add+0x10/0x10 [ 261.763101][ T5609] ? get_device_parent+0x366/0x3a0 [ 261.763116][ T5609] device_add+0x3fa/0xb80 [ 261.763129][ T5609] hci_conn_add_sysfs+0xd5/0x210 [ 261.763145][ T5609] le_conn_complete_evt+0x1094/0x1780 [ 261.763163][ T5609] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 261.763175][ T5609] ? __mutex_unlock_slowpath+0x731/0x900 [ 261.763201][ T5609] ? skb_pull_data+0xf0/0x200 [ 261.763221][ T5609] hci_le_enh_conn_complete_evt+0x189/0x490 [ 261.763234][ T5609] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 261.763247][ T5609] hci_event_packet+0x67a/0xf10 [ 261.763267][ T5609] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 261.763283][ T5609] ? __pfx_hci_event_packet+0x10/0x10 [ 261.763301][ T5609] ? kcov_remote_start+0x523/0x7e0 [ 261.763316][ T5609] ? hci_send_to_monitor+0xdf/0x600 [ 261.763331][ T5609] hci_rx_work+0x2b4/0x1110 [ 261.763350][ T5609] ? process_scheduled_works+0x97a/0x1630 [ 261.763363][ T5609] process_scheduled_works+0xc3d/0x1630 [ 261.763392][ T5609] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.763409][ T5609] ? assign_work+0x3cf/0x5d0 [ 261.763424][ T5609] worker_thread+0xa47/0xfb0 [ 261.763445][ T5609] ? __kthread_parkme+0x71/0x1f0 [ 261.763465][ T5609] kthread+0x38b/0x480 [ 261.763481][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 261.763493][ T5609] ? __pfx_kthread+0x10/0x10 [ 261.763509][ T5609] ret_from_fork+0x514/0xb70 [ 261.763527][ T5609] ? __pfx_ret_from_fork+0x10/0x10 [ 261.763542][ T5609] ? __switch_to+0xc78/0x1410 [ 261.763557][ T5609] ? __pfx_kthread+0x10/0x10 [ 261.763573][ T5609] ret_from_fork_asm+0x1a/0x30 [ 261.763597][ T5609] [ 261.763621][ T5609] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 261.763642][ T5609] Bluetooth: hci5: failed to register connection device [ 262.285257][ T5688] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 262.437880][ T5688] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 262.438683][ T5688] usb 7-1: config index 0 descriptor too short (expected 47, got 46) [ 262.438697][ T5688] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.438721][ T5688] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 262.438743][ T5688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.881206][ T8896] FAULT_INJECTION: forcing a failure. [ 262.881206][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 262.881228][ T8896] CPU: 0 UID: 0 PID: 8896 Comm: syz.7.711 Not tainted syzkaller #0 PREEMPT(full) [ 262.881241][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.881248][ T8896] Call Trace: [ 262.881252][ T8896] [ 262.881258][ T8896] dump_stack_lvl+0xe8/0x150 [ 262.881279][ T8896] should_fail_ex+0x3eb/0x540 [ 262.881297][ T8896] should_failslab+0xa8/0x100 [ 262.881310][ T8896] __kmalloc_cache_noprof+0x9e/0x600 [ 262.881330][ T8896] ? device_create+0x13d/0x300 [ 262.881343][ T8896] ? device_create+0x13d/0x300 [ 262.881359][ T8896] device_create+0x13d/0x300 [ 262.881376][ T8896] ? __pfx_device_create+0x10/0x10 [ 262.881396][ T8896] bdi_register_va+0x9c/0x740 [ 262.881415][ T8896] super_setup_bdi_name+0xf8/0x210 [ 262.881425][ T8896] ? __pfx_ceph_set_super+0x10/0x10 [ 262.881438][ T8896] ? ceph_get_tree+0xa17/0x1a40 [ 262.881450][ T8896] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 262.881465][ T8896] ? ceph_mdsc_init+0xce5/0xde0 [ 262.881478][ T8896] ceph_get_tree+0xa37/0x1a40 [ 262.881491][ T8896] ? apparmor_capable+0x126/0x170 [ 262.881505][ T8896] vfs_get_tree+0x92/0x2a0 [ 262.881517][ T8896] do_new_mount+0x325/0xb00 [ 262.881534][ T8896] ? __pfx_do_new_mount+0x10/0x10 [ 262.881550][ T8896] ? ns_capable+0x84/0xe0 [ 262.881563][ T8896] ? path_mount+0x647/0x1050 [ 262.881578][ T8896] ? user_path_at+0xd4/0x160 [ 262.881596][ T8896] __se_sys_mount+0x31d/0x420 [ 262.881613][ T8896] ? __pfx___se_sys_mount+0x10/0x10 [ 262.881631][ T8896] ? __x64_sys_mount+0x20/0xc0 [ 262.881647][ T8896] do_syscall_64+0x166/0x520 [ 262.881662][ T8896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.881672][ T8896] ? clear_bhb_loop+0x70/0xc0 [ 262.881685][ T8896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.881696][ T8896] RIP: 0033:0x7f8fe819e559 [ 262.881707][ T8896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.881715][ T8896] RSP: 002b:00007f8fe9027028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 262.881727][ T8896] RAX: ffffffffffffffda RBX: 00007f8fe8425fa0 RCX: 00007f8fe819e559 [ 262.881735][ T8896] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 262.881742][ T8896] RBP: 00007f8fe8235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 262.881749][ T8896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.881755][ T8896] R13: 00007f8fe8426038 R14: 00007f8fe8425fa0 R15: 00007fffbbc7f3a8 [ 262.881772][ T8896] [ 262.881825][ T8896] ceph: No mds server is up or the cluster is laggy [ 263.388366][ T8902] FAULT_INJECTION: forcing a failure. [ 263.388366][ T8902] name fail_futex, interval 1, probability 0, space 0, times 1 [ 263.388387][ T8902] CPU: 0 UID: 0 PID: 8902 Comm: syz.7.712 Not tainted syzkaller #0 PREEMPT(full) [ 263.388401][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.388408][ T8902] Call Trace: [ 263.388412][ T8902] [ 263.388417][ T8902] dump_stack_lvl+0xe8/0x150 [ 263.388436][ T8902] should_fail_ex+0x3eb/0x540 [ 263.388454][ T8902] get_futex_key+0x1ab/0x1410 [ 263.388473][ T8902] ? __pfx_get_futex_key+0x10/0x10 [ 263.388489][ T8902] ? update_se+0x90/0x1080 [ 263.388506][ T8902] futex_wait_setup+0x4a/0x590 [ 263.388526][ T8902] ? __futex_wait+0xdb/0x470 [ 263.388544][ T8902] __futex_wait+0x175/0x470 [ 263.388560][ T8902] ? trace_irq_disable+0x3b/0x140 [ 263.388576][ T8902] ? __pfx___futex_wait+0x10/0x10 [ 263.388594][ T8902] ? __pfx_futex_wake_mark+0x10/0x10 [ 263.388613][ T8902] ? try_to_wake_up+0x8ce/0x14e0 [ 263.388630][ T8902] futex_wait+0x121/0x390 [ 263.388641][ T8902] ? __pfx_futex_wait+0x10/0x10 [ 263.388660][ T8902] do_futex+0x3e7/0x4e0 [ 263.388676][ T8902] ? __pfx_do_futex+0x10/0x10 [ 263.388688][ T8902] ? __fget_files+0x3a2/0x420 [ 263.388704][ T8902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.388724][ T8902] __se_sys_futex+0x3a8/0x450 [ 263.388740][ T8902] ? ksys_write+0x242/0x270 [ 263.388756][ T8902] ? __pfx___se_sys_futex+0x10/0x10 [ 263.388770][ T8902] ? __pfx_ksys_write+0x10/0x10 [ 263.388788][ T8902] ? __x64_sys_futex+0x21/0xf0 [ 263.388804][ T8902] do_syscall_64+0x166/0x520 [ 263.388819][ T8902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.388829][ T8902] ? clear_bhb_loop+0x70/0xc0 [ 263.388842][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.388852][ T8902] RIP: 0033:0x7f8fe819e559 [ 263.388863][ T8902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.388872][ T8902] RSP: 002b:00007f8fe90060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 263.388884][ T8902] RAX: ffffffffffffffda RBX: 00007f8fe8426098 RCX: 00007f8fe819e559 [ 263.388891][ T8902] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8fe8426098 [ 263.388898][ T8902] RBP: 00007f8fe8426090 R08: 0000000000000000 R09: 0000000000000000 [ 263.388904][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.388910][ T8902] R13: 00007f8fe8426128 R14: 00007fffbbc7f2c0 R15: 00007fffbbc7f3a8 [ 263.388926][ T8902] [ 263.548685][ T4923] Bluetooth: hci2: command 0x0406 tx timeout [ 263.550096][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 263.550110][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 263.615291][ T6492] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 263.746155][ T6492] usb 3-1: device descriptor read/64, error -71 [ 264.242625][ T8915] tipc: Enabled bearer , priority 0 [ 264.244576][ T6492] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 264.395257][ T6492] usb 3-1: device descriptor read/64, error -71 [ 264.505598][ T6492] usb usb3-port1: attempt power cycle [ 264.585682][ T5688] cxacru 7-1:1.0: send of cm 0x90 failed (-104) [ 264.585752][ T5688] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 264.585887][ T5688] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 264.702692][ T8909] tipc: Disabling bearer [ 264.814766][ T7158] usb 7-1: USB disconnect, device number 53 [ 264.845219][ T6492] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 264.868135][ T6492] usb 3-1: device descriptor read/8, error -71 [ 265.105218][ T6492] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 265.126542][ T6492] usb 3-1: device descriptor read/8, error -71 [ 265.237776][ T6492] usb usb3-port1: unable to enumerate USB device [ 265.316901][ T7158] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 265.473522][ T7158] usb 7-1: New USB device found: idVendor=046d, idProduct=c262, bcdDevice=0.00 [ 265.474311][ T7158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.474327][ T7158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.474339][ T7158] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.474361][ T7158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.532388][ T7158] usb 7-1: config 0 descriptor?? [ 265.555630][ T6492] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 265.706291][ T6492] usb 8-1: Using ep0 maxpacket: 16 [ 265.707538][ T6492] usb 8-1: New USB device found: idVendor=056e, idProduct=00ff, bcdDevice=0.40 [ 265.708374][ T6492] usb 8-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.708391][ T6492] usb 8-1: config 1 interface 0 has no altsetting 0 [ 265.713847][ T6492] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.713860][ T6492] usb 8-1: Product: 㐁 [ 265.713868][ T6492] usb 8-1: Manufacturer: 榰갑퐥積ц䌩龬쎣毼⨫郛깘㢨ঢꌢ凪偕⍯ㇿ聈㖊泄﹂ࠀ蘪ᣙ᜺䃢틀Ũ뽊ꐹ䲢ᢂ䮘撢鼣跓섮쏽뿐ஐ您詑숖㢢᩺딗궥劔퉓鄐慊Ⳉ [ 265.713881][ T6492] usb 8-1: SerialNumber: syz [ 265.787969][ T4923] Bluetooth: hci0: command 0x0406 tx timeout [ 265.805739][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 265.805752][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 266.057689][ T7158] logitech-hidpp-device 0003:046D:C262.0013: item fetching failed at offset 22/24 [ 266.058169][ T7158] logitech-hidpp-device 0003:046D:C262.0013: hidpp_probe:parse failed [ 266.058224][ T7158] logitech-hidpp-device 0003:046D:C262.0013: probe with driver logitech-hidpp-device failed with error -22 [ 266.228714][ T6492] usbhid 8-1:1.0: can't add hid device: -71 [ 266.228782][ T6492] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 266.235089][ T6492] usb 8-1: USB disconnect, device number 37 [ 266.288730][ T5688] usb 7-1: USB disconnect, device number 54 [ 266.518855][ T33] audit: type=1326 audit(1792293932.853:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.2.722" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6f4d9e559 code=0x0 [ 266.622431][ T8937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.499453][ T8947] CIFS: iocharset name too long [ 267.525216][ T5688] kernel read not supported for file [fscontext] (pid: 5688 comm: kworker/0:4) [ 267.862049][ T8960] input: syz0 as /devices/virtual/input/input33 [ 267.865963][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 267.873231][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 267.873245][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 267.967356][ T5688] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 268.130824][ T5688] usb 8-1: unable to get BOS descriptor or descriptor too short [ 268.130855][ T5688] usb 8-1: New USB device found: idVendor=2b53, idProduct=0024, bcdDevice=0.40 [ 268.131634][ T5688] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.131685][ T5688] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 268.131706][ T5688] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.131718][ T5688] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 268.133364][ T5688] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 268.133376][ T5688] usb 8-1: Product: syz [ 268.133384][ T5688] usb 8-1: Manufacturer: syz [ 268.133391][ T5688] usb 8-1: SerialNumber: syz [ 268.285264][ T5340] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 268.435211][ T5340] usb 9-1: Using ep0 maxpacket: 32 [ 268.437196][ T5340] usb 9-1: unable to get BOS descriptor or descriptor too short [ 268.437224][ T5340] usb 9-1: New USB device found: idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 268.439400][ T5340] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 268.439414][ T5340] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 268.439424][ T5340] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 268.439435][ T5340] usb 9-1: config 128 has no interface number 0 [ 268.439456][ T5340] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.439468][ T5340] usb 9-1: config 128 interface 127 has no altsetting 0 [ 268.527810][ T5340] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.527826][ T5340] usb 9-1: Product: syz [ 268.527833][ T5340] usb 9-1: Manufacturer: syz [ 268.527841][ T5340] usb 9-1: SerialNumber: syz [ 268.582910][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.584372][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.776791][ T5688] usb 8-1: USB disconnect, device number 38 [ 268.873690][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.216796][ T5340] usb 9-1: USB disconnect, device number 48 [ 269.260276][ T8978] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 269.286707][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.829302][ T8998] comedi comedi4: commands at RT priority not supported in this driver [ 270.026807][ T4923] Bluetooth: hci4: command 0x0406 tx timeout [ 270.026849][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 270.026859][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 270.245637][ T5688] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 270.325162][ T5340] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 270.375237][ T6492] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 270.400233][ T5688] usb 7-1: New USB device found: idVendor=065a, idProduct=0009, bcdDevice=1.00 [ 270.401101][ T5688] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.401115][ T5688] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 270.401136][ T5688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.428243][ T5688] opticon 7-1:1.0: opticon converter detected [ 270.468773][ T5688] usb 7-1: opticon converter now attached to ttyUSB0 [ 270.484785][ T5340] usb 9-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 270.496315][ T5340] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.496361][ T5340] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 270.499824][ T5340] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.499838][ T5340] usb 9-1: Product: syz [ 270.499846][ T5340] usb 9-1: Manufacturer: syz [ 270.499853][ T5340] usb 9-1: SerialNumber: syz [ 270.533822][ T5340] usb-storage 9-1:1.0: USB Mass Storage device detected [ 270.542182][ T6492] usb 8-1: Using ep0 maxpacket: 32 [ 270.542641][ T6492] usb 8-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 270.554802][ T6492] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.554830][ T6492] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.605984][ T6492] usb 8-1: config 0 descriptor?? [ 270.622361][ T6492] hub 8-1:0.0: USB hub found [ 270.664771][ T5340] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 270.686044][ T5340] scsi host1: usb-storage 9-1:1.0 [ 270.688456][ T9006] netlink: 'syz.6.742': attribute type 27 has an invalid length. [ 270.743900][ T5340] usb 7-1: USB disconnect, device number 55 [ 270.804010][ T5340] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 270.804447][ T5340] opticon 7-1:1.0: device disconnected [ 270.834153][ T6492] hub 8-1:0.0: 1 port detected [ 271.000137][ T9022] bonding: bQ% is being created... [ 271.002808][ T9022] bonding: bQ% creation failed [ 271.385282][ T5690] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 271.536727][ T5690] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 271.539239][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.539344][ T5690] usb 3-1: Product: syz [ 271.539352][ T5690] usb 3-1: Manufacturer: syz [ 271.539359][ T5690] usb 3-1: SerialNumber: syz [ 271.722810][ T6492] usb 8-1: USB disconnect, device number 39 [ 272.082114][ T5690] rtl8150 3-1:1.0: couldn't reset the device [ 272.082362][ T5690] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 272.110372][ T5690] usb 3-1: USB disconnect, device number 72 [ 272.185347][ T4923] Bluetooth: hci5: command 0x0c1a tx timeout [ 272.186219][ T9] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 272.186233][ T9] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 272.734218][ T33] audit: type=1326 audit(1792293939.063:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.753" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f4d9e559 code=0x7fc00000 [ 272.765323][ T5690] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 272.797059][ T9044] FAULT_INJECTION: forcing a failure. [ 272.797059][ T9044] name failslab, interval 1, probability 0, space 0, times 0 [ 272.797080][ T9044] CPU: 0 UID: 0 PID: 9044 Comm: syz.2.753 Not tainted syzkaller #0 PREEMPT(full) [ 272.797092][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.797099][ T9044] Call Trace: [ 272.797105][ T9044] [ 272.797111][ T9044] dump_stack_lvl+0xe8/0x150 [ 272.797129][ T9044] should_fail_ex+0x3eb/0x540 [ 272.797147][ T9044] should_failslab+0xa8/0x100 [ 272.797160][ T9044] __kmalloc_cache_noprof+0x9e/0x600 [ 272.797176][ T9044] ? __vb2_init_fileio+0x1e2/0x1040 [ 272.797194][ T9044] ? __vb2_init_fileio+0x1e2/0x1040 [ 272.797214][ T9044] __vb2_init_fileio+0x1e2/0x1040 [ 272.797237][ T9044] ? __pfx___futex_wait+0x10/0x10 [ 272.797257][ T9044] ? __pfx_aa_file_perm+0x10/0x10 [ 272.797273][ T9044] ? __pfx_futex_wake_mark+0x10/0x10 [ 272.797289][ T9044] ? vb2_fop_write+0x11a/0x340 [ 272.797307][ T9044] __vb2_perform_fileio+0x287/0x1660 [ 272.797326][ T9044] ? __lock_acquire+0x747/0x2de0 [ 272.797342][ T9044] vb2_fop_write+0x22f/0x340 [ 272.797360][ T9044] v4l2_write+0x19c/0x2c0 [ 272.797377][ T9044] ? __pfx_v4l2_write+0x10/0x10 [ 272.797392][ T9044] vfs_write+0x296/0xba0 [ 272.797413][ T9044] ? __pfx_vfs_write+0x10/0x10 [ 272.797430][ T9044] ? __fget_files+0x2a/0x420 [ 272.797444][ T9044] ? __fget_files+0x3a2/0x420 [ 272.797458][ T9044] ? __fget_files+0x2a/0x420 [ 272.797475][ T9044] ? fdget+0x1ac/0x250 [ 272.797494][ T9044] ksys_write+0x150/0x270 [ 272.797511][ T9044] ? __pfx_ksys_write+0x10/0x10 [ 272.797533][ T9044] do_syscall_64+0x166/0x520 [ 272.797548][ T9044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.797558][ T9044] ? clear_bhb_loop+0x70/0xc0 [ 272.797571][ T9044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.797582][ T9044] RIP: 0033:0x7fe6f4d9e559 [ 272.797594][ T9044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.797602][ T9044] RSP: 002b:00007fe6f5bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.797614][ T9044] RAX: ffffffffffffffda RBX: 00007fe6f5026090 RCX: 00007fe6f4d9e559 [ 272.797622][ T9044] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 272.797628][ T9044] RBP: 00007fe6f4e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 272.797635][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.797641][ T9044] R13: 00007fe6f5026128 R14: 00007fe6f5026090 R15: 00007ffdcbbf1d88 [ 272.797657][ T9044] [ 272.800052][ T9045] FAULT_INJECTION: forcing a failure. [ 272.800052][ T9045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.800067][ T9045] CPU: 0 UID: 0 PID: 9045 Comm: syz.7.754 Not tainted syzkaller #0 PREEMPT(full) [ 272.800079][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.800085][ T9045] Call Trace: [ 272.800089][ T9045] [ 272.800094][ T9045] dump_stack_lvl+0xe8/0x150 [ 272.800113][ T9045] should_fail_ex+0x3eb/0x540 [ 272.800131][ T9045] prepare_alloc_pages+0x21e/0x5f0 [ 272.800151][ T9045] __alloc_frozen_pages_noprof+0x17c/0x410 [ 272.800167][ T9045] ? __lock_acquire+0x1511/0x2de0 [ 272.800179][ T9045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.800200][ T9045] ? policy_nodemask+0x2cc/0x8e0 [ 272.800215][ T9045] alloc_pages_mpol+0x21e/0x390 [ 272.800237][ T9045] alloc_pages_noprof+0xb1/0x2b0 [ 272.800251][ T9045] get_free_pages_noprof+0xf/0x80 [ 272.800267][ T9045] __kasan_populate_vmalloc+0x38/0x1c0 [ 272.800283][ T9045] ? do_raw_spin_unlock+0xf5/0x200 [ 272.800300][ T9045] alloc_vmap_area+0xd10/0x1410 [ 272.800322][ T9045] ? __pfx_alloc_vmap_area+0x10/0x10 [ 272.800333][ T9045] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 272.800349][ T9045] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 272.800364][ T9045] ? __get_vm_area_node+0x155/0x2f0 [ 272.800378][ T9045] __get_vm_area_node+0x200/0x2f0 [ 272.800395][ T9045] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 272.800408][ T9045] ? write_ldt+0x4f7/0x930 [ 272.800437][ T9045] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.800453][ T9045] ? __kasan_kmalloc+0x93/0xb0 [ 272.800463][ T9045] ? __kmalloc_cache_noprof+0x31c/0x600 [ 272.800479][ T9045] ? write_ldt+0x4f7/0x930 [ 272.800489][ T9045] __vmalloc_noprof+0xd2/0x120 [ 272.800502][ T9045] ? write_ldt+0x4f7/0x930 [ 272.800514][ T9045] write_ldt+0x4f7/0x930 [ 272.800525][ T9045] ? __se_sys_futex+0x3a8/0x450 [ 272.800541][ T9045] ? __pfx_write_ldt+0x10/0x10 [ 272.800554][ T9045] ? rcu_is_watching+0x16/0xb0 [ 272.800571][ T9045] __se_sys_modify_ldt+0x6c/0x310 [ 272.800584][ T9045] do_syscall_64+0x166/0x520 [ 272.800598][ T9045] ? trace_irq_disable+0x3b/0x140 [ 272.800610][ T9045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.800621][ T9045] ? clear_bhb_loop+0x70/0xc0 [ 272.800635][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.800645][ T9045] RIP: 0033:0x7f8fe819e559 [ 272.800656][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.800665][ T9045] RSP: 002b:00007f8fe9006028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 272.800676][ T9045] RAX: ffffffffffffffda RBX: 00007f8fe8426090 RCX: 00007f8fe819e559 [ 272.800683][ T9045] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 0000000000000001 [ 272.800690][ T9045] RBP: 00007f8fe8235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 272.800696][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.800702][ T9045] R13: 00007f8fe8426128 R14: 00007f8fe8426090 R15: 00007fffbbc7f3a8 [ 272.800719][ T9045] [ 272.928457][ T5690] usb 7-1: device descriptor read/64, error -71 [ 273.217149][ T5690] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 273.217393][ T9045] syz.7.754: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.217446][ T9045] CPU: 0 UID: 0 PID: 9045 Comm: syz.7.754 Not tainted syzkaller #0 PREEMPT(full) [ 273.217459][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.217468][ T9045] Call Trace: [ 273.217473][ T9045] [ 273.217478][ T9045] dump_stack_lvl+0xe8/0x150 [ 273.217496][ T9045] warn_alloc+0x24d/0x270 [ 273.217513][ T9045] ? lockdep_hardirqs_on+0x7b/0x110 [ 273.217530][ T9045] ? __pfx_warn_alloc+0x10/0x10 [ 273.217544][ T9045] ? kfree+0x1c5/0x650 [ 273.217560][ T9045] ? __get_vm_area_node+0x219/0x2f0 [ 273.217578][ T9045] __vmalloc_node_range_noprof+0x396/0x16f0 [ 273.217610][ T9045] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.217626][ T9045] ? __kasan_kmalloc+0x93/0xb0 [ 273.217637][ T9045] ? __kmalloc_cache_noprof+0x31c/0x600 [ 273.217653][ T9045] ? write_ldt+0x4f7/0x930 [ 273.217664][ T9045] __vmalloc_noprof+0xd2/0x120 [ 273.217677][ T9045] ? write_ldt+0x4f7/0x930 [ 273.217690][ T9045] write_ldt+0x4f7/0x930 [ 273.217701][ T9045] ? __se_sys_futex+0x3a8/0x450 [ 273.217717][ T9045] ? __pfx_write_ldt+0x10/0x10 [ 273.217730][ T9045] ? rcu_is_watching+0x16/0xb0 [ 273.217746][ T9045] __se_sys_modify_ldt+0x6c/0x310 [ 273.217760][ T9045] do_syscall_64+0x166/0x520 [ 273.217774][ T9045] ? trace_irq_disable+0x3b/0x140 [ 273.217785][ T9045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.217795][ T9045] ? clear_bhb_loop+0x70/0xc0 [ 273.217808][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.217818][ T9045] RIP: 0033:0x7f8fe819e559 [ 273.217830][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.217838][ T9045] RSP: 002b:00007f8fe9006028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 273.217849][ T9045] RAX: ffffffffffffffda RBX: 00007f8fe8426090 RCX: 00007f8fe819e559 [ 273.217857][ T9045] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 0000000000000001 [ 273.217864][ T9045] RBP: 00007f8fe8235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 273.217870][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.217876][ T9045] R13: 00007f8fe8426128 R14: 00007f8fe8426090 R15: 00007fffbbc7f3a8 [ 273.217892][ T9045] [ 273.217913][ T9045] Mem-Info: [ 273.217919][ T9045] active_anon:11872 inactive_anon:11 isolated_anon:0 [ 273.217919][ T9045] active_file:898 inactive_file:53293 isolated_file:0 [ 273.217919][ T9045] unevictable:0 dirty:55 writeback:0 [ 273.217919][ T9045] slab_reclaimable:10188 slab_unreclaimable:108442 [ 273.217919][ T9045] mapped:38788 shmem:3489 pagetables:1722 [ 273.217919][ T9045] sec_pagetables:3 bounce:0 [ 273.217919][ T9045] kernel_misc_reclaimable:0 [ 273.217919][ T9045] free:1273250 free_pcp:14400 free_cma:0 [ 273.217948][ T9045] Node 0 active_anon:47488kB inactive_anon:44kB active_file:3592kB inactive_file:212964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155152kB dirty:220kB writeback:0kB shmem:13956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:13824kB pagetables:6752kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.217977][ T9045] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.218005][ T9045] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.218050][ T9045] lowmem_reserve[]: 0 2462 2463 2463 2463 [ 273.218070][ T9045] Node 0 DMA32 free:1161484kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47488kB inactive_anon:44kB active_file:3592kB inactive_file:212964kB unevictable:0kB writepending:220kB zspages:0kB present:3129332kB managed:2521304kB mlocked:0kB bounce:0kB free_pcp:35352kB local_pcp:35352kB free_cma:0kB [ 273.218101][ T9045] lowmem_reserve[]: 0 0 1 1 1 [ 273.218119][ T9045] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 273.395162][ T5690] usb 7-1: device descriptor read/64, error -71 [ 273.526008][ T5690] usb usb7-port1: attempt power cycle [ 273.941916][ T9045] lowmem_reserve[]: 0 0 0 0 0 [ 273.941943][ T9045] Node 1 Normal free:3916136kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:22240kB local_pcp:22240kB free_cma:0kB [ 273.941980][ T9045] lowmem_reserve[]: 0 0 0 0 0 [ 273.942015][ T9045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.942094][ T9045] Node 0 DMA32: 1599*4kB (UME) 806*8kB (UME) 200*16kB (UME) 107*32kB (UME) 296*64kB (UME) 100*128kB (ME) 83*256kB (UME) 45*512kB (ME) 23*1024kB (ME) 13*2048kB (UM) 248*4096kB (UM) = 1161484kB [ 273.942196][ T9045] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 273.942254][ T9045] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 954*4096kB (M) = 3916136kB [ 273.942356][ T9045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.942365][ T9045] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 273.942374][ T9045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.942382][ T9045] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.942391][ T9045] 57682 total pagecache pages [ 273.942395][ T9045] 6 pages in swap cache [ 273.942412][ T9045] Free swap = 124972kB [ 273.942416][ T9045] Total swap = 124996kB [ 273.942421][ T9045] 2097051 pages RAM [ 273.942425][ T9045] 0 pages HighMem/MovableOnly [ 273.942428][ T9045] 434763 pages reserved [ 273.942432][ T9045] 0 pages cma reserved [ 274.145230][ T33] audit: type=1326 audit(1792293940.483:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.753" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe6f4d9e559 code=0x7fc00000 [ 274.228634][ T5690] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 274.248971][ T5690] usb 7-1: device descriptor read/8, error -71 [ 274.271274][ T9] usb 9-1: USB disconnect, device number 49 [ 274.436075][ T7158] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 274.506956][ T5690] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 274.529196][ T5690] usb 7-1: device descriptor read/8, error -71 [ 274.595627][ T7158] usb 8-1: New USB device found: idVendor=04e8, idProduct=6889, bcdDevice=1.00 [ 274.597932][ T7158] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.597945][ T7158] usb 8-1: Product: syz [ 274.597953][ T7158] usb 8-1: Manufacturer: syz [ 274.597960][ T7158] usb 8-1: SerialNumber: syz [ 274.638070][ T5690] usb usb7-port1: unable to enumerate USB device [ 274.834293][ T7158] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 275.525252][ T9] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 275.605958][ T5690] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 275.677900][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 275.681142][ T9] usb 9-1: New USB device found: idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 275.682229][ T9] usb 9-1: config 166 has an invalid interface number: 177 but max is 1 [ 275.682243][ T9] usb 9-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 275.682253][ T9] usb 9-1: config 166 has 1 interface, different from the descriptor's value: 2 [ 275.682264][ T9] usb 9-1: config 166 has no interface number 0 [ 275.682285][ T9] usb 9-1: config 166 interface 177 altsetting 4 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 275.682299][ T9] usb 9-1: config 166 interface 177 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.682312][ T9] usb 9-1: config 166 interface 177 has no altsetting 0 [ 275.683975][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.683987][ T9] usb 9-1: Product: syz [ 275.683995][ T9] usb 9-1: Manufacturer: syz [ 275.684002][ T9] usb 9-1: SerialNumber: syz [ 275.802846][ T5690] usb 3-1: New USB device found: idVendor=04d9, idProduct=a072, bcdDevice=0.00 [ 275.816915][ T5690] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.816934][ T5690] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.816948][ T5690] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.816966][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.824689][ T5690] usb 3-1: config 0 descriptor?? [ 275.953773][ T7158] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 275.953943][ T7158] kalmia 8-1:1.0: probe with driver kalmia failed with error -71 [ 275.991759][ T7158] usb 8-1: USB disconnect, device number 40 [ 276.025786][ T9] ums-realtek 9-1:166.177: USB Mass Storage device detected [ 276.104993][ T9] usb 9-1: USB disconnect, device number 50 [ 276.311604][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311628][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311644][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311659][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311673][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311688][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311703][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311718][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311733][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311747][ T5690] holtek_mouse 0003:04D9:A072.0014: unknown main item tag 0x0 [ 276.311790][ T5690] holtek_mouse 0003:04D9:A072.0014: unbalanced collection at end of report description [ 276.312198][ T5690] holtek_mouse 0003:04D9:A072.0014: hid parse failed: -22 [ 276.312235][ T5690] holtek_mouse 0003:04D9:A072.0014: probe with driver holtek_mouse failed with error -22 [ 276.674596][ T33] audit: type=1107 audit(1792293943.003:17): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 276.724887][ T5690] usb 3-1: USB disconnect, device number 73 [ 277.043469][ T9101] svc: failed to register nfsdv3 RPC service (errno 5). [ 277.043486][ T9101] failed to unregister tcp with rpcbind [ 277.523849][ T9108] netlink: 228 bytes leftover after parsing attributes in process `syz.6.767'. [ 278.105289][ T34] INFO: task kworker/u8:6:315 blocked for more than 143 seconds. [ 278.105306][ T34] Not tainted syzkaller #0 [ 278.105313][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.105318][ T34] task:kworker/u8:6 state:D stack:22344 pid:315 tgid:315 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 278.105359][ T34] Workqueue: netns cleanup_net [ 278.105378][ T34] Call Trace: [ 278.105382][ T34] [ 278.105389][ T34] __schedule+0x17dd/0x5820 [ 278.105405][ T34] ? __lock_acquire+0x747/0x2de0 [ 278.105430][ T34] ? __pfx___schedule+0x10/0x10 [ 278.105441][ T34] ? lock_acquire+0x115/0x350 [ 278.105457][ T34] ? schedule+0x90/0x2b0 [ 278.105471][ T34] schedule+0x164/0x2b0 [ 278.105490][ T34] schedule_timeout+0xc0/0x2c0 [ 278.105503][ T34] ? __pfx_schedule_timeout+0x10/0x10 [ 278.105515][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 278.105552][ T34] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.105565][ T34] ? wait_for_completion+0x26d/0x5d0 [ 278.105579][ T34] wait_for_completion+0x2c5/0x5d0 [ 278.105600][ T34] ? __pfx_wait_for_completion+0x10/0x10 [ 278.105615][ T34] ? __pfx_find_submount+0x10/0x10 [ 278.105634][ T34] ? d_invalidate+0x214/0x260 [ 278.105652][ T34] remove_one+0x2df/0x3b0 [ 278.105666][ T34] ? __pfx_remove_one+0x10/0x10 [ 278.105677][ T34] __simple_recursive_removal+0x215/0x520 [ 278.105694][ T34] ? __pfx_remove_one+0x10/0x10 [ 278.105721][ T34] debugfs_remove+0x5b/0x70 [ 278.105732][ T34] nsim_dev_health_exit+0x41/0xc0 [ 278.105745][ T34] nsim_dev_reload_destroy+0x2bf/0x490 [ 278.105762][ T34] nsim_dev_reload_down+0x8a/0xc0 [ 278.105775][ T34] devlink_reload+0x1ed/0x7f0 [ 278.105793][ T34] ? __pfx_devlink_reload+0x10/0x10 [ 278.105812][ T34] devlink_pernet_pre_exit+0x1d9/0x560 [ 278.105830][ T34] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 278.105841][ T34] ? _raw_spin_unlock+0x28/0x50 [ 278.105853][ T34] ? iput+0xb7f/0xf00 [ 278.105873][ T34] ops_undo_list+0x17d/0x8f0 [ 278.105890][ T34] ? __pfx_ops_undo_list+0x10/0x10 [ 278.105905][ T34] ? idr_destroy+0x218/0x290 [ 278.105918][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 278.105935][ T34] cleanup_net+0x572/0x810 [ 278.105950][ T34] ? __pfx_cleanup_net+0x10/0x10 [ 278.105966][ T34] ? rcu_is_watching+0x16/0xb0 [ 278.105981][ T34] ? process_scheduled_works+0x97a/0x1630 [ 278.105994][ T34] process_scheduled_works+0xc3d/0x1630 [ 278.106023][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.106040][ T34] ? assign_work+0x3cf/0x5d0 [ 278.106055][ T34] worker_thread+0xa47/0xfb0 [ 278.106076][ T34] ? __kthread_parkme+0x71/0x1f0 [ 278.106095][ T34] kthread+0x38b/0x480 [ 278.106111][ T34] ? __pfx_worker_thread+0x10/0x10 [ 278.106136][ T34] ? __pfx_kthread+0x10/0x10 [ 278.106153][ T34] ret_from_fork+0x514/0xb70 [ 278.106172][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 278.106187][ T34] ? __switch_to+0xc78/0x1410 [ 278.106203][ T34] ? __pfx_kthread+0x10/0x10 [ 278.106219][ T34] ret_from_fork_asm+0x1a/0x30 [ 278.106243][ T34] [ 278.106312][ T34] INFO: task syz.4.134:6511 blocked for more than 143 seconds. [ 278.106321][ T34] Not tainted syzkaller #0 [ 278.106326][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.106331][ T34] task:syz.4.134 state:D stack:26720 pid:6511 tgid:6510 ppid:5952 task_flags:0x400140 flags:0x00080002 [ 278.106360][ T34] Call Trace: [ 278.106364][ T34] [ 278.106370][ T34] __schedule+0x17dd/0x5820 [ 278.106398][ T34] ? __pfx___schedule+0x10/0x10 [ 278.106416][ T34] ? schedule+0x90/0x2b0 [ 278.106431][ T34] schedule+0x164/0x2b0 [ 278.106446][ T34] schedule_preempt_disabled+0x13/0x30 [ 278.106459][ T34] __mutex_lock+0x7c4/0x15a0 [ 278.106476][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 278.106493][ T34] ? devlink_health_report+0x305/0xb20 [ 278.106511][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 278.106526][ T34] ? __pfx_devlink_recover_notify+0x10/0x10 [ 278.106541][ T34] ? lock_acquire+0x115/0x350 [ 278.106560][ T34] devlink_health_report+0x305/0xb20 [ 278.106585][ T34] nsim_dev_health_break_write+0x194/0x240 [ 278.106601][ T34] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 278.106619][ T34] full_proxy_write+0x127/0x1f0 [ 278.106634][ T34] ? __pfx_full_proxy_write+0x10/0x10 [ 278.106647][ T34] vfs_write+0x296/0xba0 [ 278.106668][ T34] ? __pfx_vfs_write+0x10/0x10 [ 278.106685][ T34] ? __fget_files+0x2a/0x420 [ 278.107929][ T34] ? __fget_files+0x3a2/0x420 [ 278.107950][ T34] ? __fget_files+0x2a/0x420 [ 278.107972][ T34] ? fdget+0x1ac/0x250 [ 278.107991][ T34] ksys_write+0x150/0x270 [ 278.108010][ T34] ? __pfx_ksys_write+0x10/0x10 [ 278.109250][ T34] do_syscall_64+0x166/0x520 [ 278.109270][ T34] ? trace_irq_disable+0x3b/0x140 [ 278.109282][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.109293][ T34] ? clear_bhb_loop+0x70/0xc0 [ 278.109307][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.109318][ T34] RIP: 0033:0x7f7fb6f9e559 [ 278.109328][ T34] RSP: 002b:00007f7fb7e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.109340][ T34] RAX: ffffffffffffffda RBX: 00007f7fb7225fa0 RCX: 00007f7fb6f9e559 [ 278.109349][ T34] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 278.109356][ T34] RBP: 00007f7fb7035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 278.109362][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.109368][ T34] R13: 00007f7fb7226038 R14: 00007f7fb7225fa0 R15: 00007ffe237043d8 [ 278.109385][ T34] [ 278.109413][ T34] [ 278.109413][ T34] Showing all locks held in the system: [ 278.109418][ T34] locks held by kworker/0:0/9: 6, on CPU#0: [ 278.109426][ T34] #0: ffff88801fed5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 278.109456][ T34] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 278.109482][ T34] #2: ffff88802b2771d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 278.109509][ T34] #3: ffff88802b2c3568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 278.109534][ T34] #4: ffff88802b21af60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 278.109559][ T34] #5: ffffffff90f27408 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 278.109588][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 278.109595][ T34] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 278.109625][ T34] locks held by kworker/u8:6/315: 6, on CPU#0: [ 278.109632][ T34] #0: ffff88801d68e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 278.109658][ T34] #1: ffffc90003017c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 278.109684][ T34] #2: ffffffff9167e328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 278.109711][ T34] #3: ffff88807c8ab128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x122/0x560 [ 278.109735][ T34] #4: ffff88807ca99258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x138/0x560 [ 278.109762][ T34] #5: ffff88805cc68140 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 [ 278.109829][ T34] locks held by getty/5363: 2, on CPU#0: [ 278.109836][ T34] #0: ffff8880346730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 278.109866][ T34] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 278.109899][ T34] locks held by syz.4.134/6511: 3, on CPU#0: [ 278.109906][ T34] #0: ffff88807a99aef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 278.109935][ T34] #1: ffff8880212fa460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 278.109966][ T34] #2: ffff88807ca99258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x305/0xb20 [ 278.110000][ T34] locks held by syz.5.178/6777: 4, last CPU#0: [ 278.110008][ T34] #0: ffff888034ee97b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 278.111614][ T34] #1: ffff88807c7d0460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 278.111651][ T34] #2: ffff888067cfa9c0 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: fuse_file_write_iter+0x382/0x11f0 [ 278.111680][ T34] #3: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 278.111708][ T34] locks held by syz.6.771/9120: 4, last CPU#0: [ 278.111716][ T34] #0: ffff88802c7140f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 278.111744][ T34] #1: ffff88807fcaa460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 278.111775][ T34] #2: ffff88802a513880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 278.111803][ T34] #3: ffff8880600124b8 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 278.111840][ T34] locks held by syz.7.772/9121: 1, on CPU#0: [ 278.111848][ T34] #0: ffff88813fe43440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 278.111882][ T34] locks held by syz.7.772/9126: 2, last CPU#0: [ 278.111889][ T34] #0: ffff88813fe43440 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 278.111919][ T34] #1: ffffffff90293d00 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x5f0 [ 278.111949][ T34] locks held by syz.8.775/9129: 1, on CPU#0: [ 278.111956][ T34] #0: ffff88805b9dc0a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_memory_region+0x64/0xa0 [ 278.111987][ T34] [ 278.111991][ T34] ============================================= [ 278.111991][ T34] [ 278.112005][ T34] NMI backtrace for cpu 0 [ 278.112015][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 278.112027][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.112033][ T34] Call Trace: [ 278.112037][ T34] [ 278.112042][ T34] dump_stack_lvl+0xe8/0x150 [ 278.112057][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 278.112069][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 278.112087][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 278.112100][ T34] sys_info+0x135/0x170 [ 278.112110][ T34] watchdog+0x1073/0x10f0 [ 278.112125][ T34] ? watchdog+0x209/0x10f0 [ 278.112138][ T34] kthread+0x38b/0x480 [ 278.112154][ T34] ? __pfx_watchdog+0x10/0x10 [ 278.112164][ T34] ? __pfx_kthread+0x10/0x10 [ 278.112180][ T34] ret_from_fork+0x514/0xb70 [ 278.112196][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 278.112212][ T34] ? __switch_to+0xc78/0x1410 [ 278.112229][ T34] ? __pfx_kthread+0x10/0x10 [ 278.112245][ T34] ret_from_fork_asm+0x1a/0x30 [ 278.112267][ T34] [ 278.114831][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 279.129678][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 279.138770][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 279.148821][ T34] Call Trace: [ 279.152084][ T34] [ 279.155009][ T34] vpanic+0x26f/0x710 [ 279.158979][ T34] panic+0xc5/0xd0 [ 279.162683][ T34] ? __pfx_panic+0x10/0x10 [ 279.167081][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 279.172521][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 279.177872][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 279.184009][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 279.190157][ T34] watchdog+0x10e7/0x10f0 [ 279.194470][ T34] ? watchdog+0x209/0x10f0 [ 279.198883][ T34] kthread+0x38b/0x480 [ 279.202934][ T34] ? __pfx_watchdog+0x10/0x10 [ 279.207590][ T34] ? __pfx_kthread+0x10/0x10 [ 279.212177][ T34] ret_from_fork+0x514/0xb70 [ 279.216752][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 279.221847][ T34] ? __switch_to+0xc78/0x1410 [ 279.226503][ T34] ? __pfx_kthread+0x10/0x10 [ 279.231074][ T34] ret_from_fork_asm+0x1a/0x30 [ 279.235829][ T34] [ 279.238898][ T34] Kernel Offset: disabled [ 279.243208][ T34] Rebooting in 86400 seconds..