last executing test programs: 22m15.839265614s ago: executing program 2 (id=40): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0xfffffde5, &(0x7f00000000c0)={0x0, 0x14, 0x11, "023b9dbb3f08007a37a7056822405954bb65"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 22m14.57650799s ago: executing program 2 (id=50): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x9b56018407ef4514, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) (async) close(r0) 22m14.508036204s ago: executing program 2 (id=51): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@s={0x5, @generic}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c9"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x8402, 0x42) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:* 1'], 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x16a) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="0b036812e0ff64000200", 0xa, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) open(&(0x7f0000000480)='./bus\x00', 0xea000, 0x718bb647156ec3be) chdir(&(0x7f0000000140)='./bus\x00') linkat(r5, &(0x7f0000000000)='./file1\x00', r5, &(0x7f00000001c0)='./bus\x00', 0x400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22m13.209009892s ago: executing program 2 (id=59): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="4da237a456087290", 0x8}], 0x1}}], 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10800000, {0x40, 0xd08, 0x3, 0x100, 0x0, 0x0, 0x6, 0x1000, 0x122, 0x6000, 0x10000, 0x0, r4, 0x90a}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x1, 0xffffffff80000000, 0xfffc, 0x2, 0x7ff, 0x402, 0x0, 0x0, 0x0, 0x933}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r6 = ioctl$TIOCGPTPEER(r5, 0x933, 0x200000000005) r7 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="0209f47f0000000080000000f59db31fe901000000b20000"], 0x10}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='devices.list\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000000400)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3e, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x5, r9, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x1, r10}]) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$setregs(0xd, r13, 0x5, 0xfffffffffffffffe) r14 = eventfd2(0x1000, 0x1) io_submit(r8, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3c, r6, &(0x7f0000000080)="b8d7d665e1b6fafe14c73ad8d09c049aa174e044", 0x14, 0x7, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7d9b, 0xffffffffffffffff, &(0x7f0000000140)="0a6e2108bfbe324a7269f31442ca7a4aad02882b440784d7e12aaf0de9ce7386a955012702627f6c3cb227a70f9a8f1976ee34ad5eeebf413d8bbc5a49a4a1443f5c04ef9cb7d84b69dfac30400d3a9f4a8dcb990866215679ffee0a348b4bb707d49619ff7864b499", 0x69, 0x8000000000000001, 0x0, 0x3, r11}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x6, r12, &(0x7f0000000440)="7ff019ad3a16a71777f03051cb78d058ef0d5b450c52b8137bd1ddfe8ae26b4aa3dafed5ba1c0843e436b9b974b98a3f0ac3fe2229bda913aaf5756d127c0cccb8284090b961f993b655e7b7d1c26780e28435c22e846bab6e5fd7a79b11536700fdb87a93c2e2f3b8101abae13479d79d71de", 0x73, 0x546, 0x0, 0x0, r14}]) socket$nl_route(0x10, 0x3, 0x0) 22m12.855314774s ago: executing program 2 (id=61): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0x2}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b00f4ffffff00ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000fdff00"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 22m12.722806184s ago: executing program 2 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) (async) sendto(r2, 0x0, 0x0, 0x4008044, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2400000021002551241c0165ff00fc020200000003180f000ee1000c08000f0000080000", 0x24) (async) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c) (async) listen(r7, 0x8000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffff80}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc024}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40095}, 0x200488c0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async, rerun: 64) r10 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async, rerun: 32) sendto$packet(r10, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) (async) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f00000021c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8, @remote, 0x3e20}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="ba6a", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="ba", 0x1}], 0x1}}], 0x2, 0xc840) 22m12.324074171s ago: executing program 32 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) (async) sendto(r2, 0x0, 0x0, 0x4008044, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2400000021002551241c0165ff00fc020200000003180f000ee1000c08000f0000080000", 0x24) (async) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c) (async) listen(r7, 0x8000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffff80}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc024}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40095}, 0x200488c0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async, rerun: 64) r10 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async, rerun: 32) sendto$packet(r10, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) (async) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f00000021c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8, @remote, 0x3e20}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="ba6a", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="ba", 0x1}], 0x1}}], 0x2, 0xc840) 19m40.607384206s ago: executing program 3 (id=792): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) sendto$inet(r0, &(0x7f0000000000)="7f37", 0x2, 0xb, 0x0, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') (rerun: 64) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async, rerun: 64) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_TMR_STOP(r5, 0x5403) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0300000000000000264d7162000000000000", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006680)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}, &(0x7f00000066c0)=0x40) 19m40.587726262s ago: executing program 3 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x16a) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000480)='./bus\x00', 0xea000, 0x718bb647156ec3be) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1000) linkat(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000001c0)='./bus\x00', 0x400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19m40.541487604s ago: executing program 3 (id=794): r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='sync\x00', 0x0, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) 19m40.326987929s ago: executing program 3 (id=795): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x0, 0x2, @scatter={0x0, 0xf5ff, 0x0}, 0x0, 0x0, 0x1, 0x6, 0x2, 0x0}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x40000000, 0x0, 0xb5315258, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) syz_open_dev$hiddev(0x0, 0x6, 0x101000) r3 = socket(0x1a, 0x3, 0x7ff) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_usb_connect$uac1(0x0, 0xf6, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x3, 0x58, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xd}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x5, 0x3, 0x5}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x5, 0xd9, "e1"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x1, 0x1, "9b02"}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x3, 0x5, "74b3d2"}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x3, 0x3, [0xa, 0x2, 0x4], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0xf, "907f80d0c8f5"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x10, 0x2, 0x5, 0x7, "e263c3"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x3, 0x75, 0x5, "37c392604ec0"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x8, 0x7, "e8"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x8, "407aec6f7499fa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xc, 0x1, 0x6, {0x7, 0x25, 0x1, 0x2, 0x3, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x8}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x200, 0x80, "b5cb312d1d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x4, 0x40, {0x7, 0x25, 0x1, 0x0, 0x1, 0x1}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x0, 0x1, 0xff, 0x48, 0x11}, 0x16, &(0x7f0000000200)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x2, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xb0, 0x2f1b}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000300)={0x14, &(0x7f0000000540)={0x40, 0x0, 0xb7, {0xb7, 0x21, "8fddbeb8e71a5967575eae0fd123178e4b9ad78b4b6d02683a7796b526763f42108cc6b46cae04cd4aa4a148115f11172457878bd528d66228d9e1f0be60ba8d5721a90124ec3d857a29dcc9ceb3049ebf41071a08adbd814b1c24bb8abc2bd7e99e9671fb336f8304d61931f3ee99dcd0d202bde29954d16f5f09843ec3e7b17b6010f0e0c6993f14c25dfd021a46ca6bba4e0ee69518d33efb18fa2f698a8ac948138d3befdc0340676029da87e23e3a719037fa"}}, &(0x7f0000000600)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "e3a4e7b61c88074d83734164fe45ef8d44467447305c624c1dea4ed6f4738a661d825748ca61e5cd1b1dc1198e5a33b7a1a1cb03b70c8dc07da0b6352ec3e4ca0ff020ce09ffdf079632a225334aeee47c25c9c619b46b6d3992240bed5f0ce05bfefae1ef53c50f2d37d90b6ac96e329d557311028ec324b02fcb71cec82fa0395231f2f73dc1a5dc2823bc2275538d46475e1bbf59e5c0524a321acbf2b3b16a56b63d289e99cfba643e38efeb48c0be317d66b6cd41b8eb5416c0bf25ae3b4095ae9bfb209a0b10"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000700)={0x20, 0x14, 0xb8, "9667b4deffa784f89004ae960f434faf789349f8aaef30114a666c7c6b6bd6f6339257f734b36bc3fac38cd4ebafca9989e058f45a80621a9c00d43a568d37de31b21094d25436bd5f77f7a0407718d57b7a721f82d0d631382a4ff3c04059a4f3b0063212140844cefb9ee869b79d3c08fb23180e33e898269c3836bf54685d16644ff55a707d182a8650ec406bb30f18cc8dca473c9e1adc63ce59ce3a4edcf87ae1d56266850b44e8add729a54e6c2023f4aab004fa91"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "37a4"}, &(0x7f0000000800)={0x20, 0x82, 0x1, "82"}, &(0x7f0000000840)={0x20, 0x83, 0x1, ';'}, &(0x7f0000000880)={0x20, 0x84, 0x1, '8'}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "40a029"}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'gretap0\x00'}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0x2a, 0x7, {0x7, 0x7, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 19m39.475712665s ago: executing program 3 (id=797): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x86c}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000580)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$inet6(r2, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="a7", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}], 0x1, 0x41) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @str='/dev/dri/card#\x00'}]}]}, 0x28}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r5 = syz_clone(0x40000491, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) setpgid(r5, r5) setpgid(0x0, r5) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000100)={{r7}, 0x3, 0x1, 0x4}) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', 0x0, 0x0, 0x0) mknodat(r4, &(0x7f0000000140)='./file0\x00', 0x4, 0x4) 19m38.832177519s ago: executing program 3 (id=807): socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000101ff00941e563d5e09ff5bffff00c700"/72, 0x48}], 0x1) 19m23.709442619s ago: executing program 33 (id=807): socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000101ff00941e563d5e09ff5bffff00c700"/72, 0x48}], 0x1) 17m31.039615933s ago: executing program 4 (id=1383): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x60aa, &(0x7f0000000200)={0x0, 0x989680}) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/(\\}.}('}, {0x20, ':@^,'}, {0x20, '.-}+('}, {0x20, ','}, {0x20, '#&['}, {0x20, '$-^&'}], 0xa, "652d36c108ac640974ec4107b1f983beea1048137c26bc6d0df40cca3a0f84efe3a939dd1999f22c54e2b67599acf5ec45ea1db71f0d505ad8e90a9c59cc2678c6498d947d395949ad10f93806e8a342ddaabb5dc9e473eea64f0e3401fb5c632d23021126cf49e8861148b0436c39d466716ced216c7117cc84dccad8ce3b67df2450905c12e51fadb567fc4dc8"}, 0xb7) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000200e0bffff400001020301090224000101dd3002090400080103010508092103000801229206090581030800036df5913d19d0a6c47d62670c39fc4e760701"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 17m29.828398599s ago: executing program 4 (id=1392): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="18e65c6199c41a455c0a6dbe03a509163e641fa90f051925803c35c6bb747b75eaad9040bc66f7", 0x27}, {&(0x7f00000000c0)="6699bb05468ddc14875152131b1e57bba64ec83e23511ad830cadc95bd2c5980aeed94806763f9add5a4827ca80782dae9", 0x31}, {&(0x7f0000000280)="3d9d793a6f4947cb94aa18db6d013c2c96214447218d9625bbc6ef4b8d9bf35b8c105d475587aac611d986a28252f0f6f7481607985b2634b649f12f8be18ca2d094cba60eb5f98e6e06f1b1dbb3432612b427c21244b3956f150e6e203fe33d3b411d6ee00038f505840915b4d1b9f8b4bf3ff8e5c8fa9e4056efcbfabe827043f2a62ccad26baa40a5d66c3b41d9861bacc64df623c30a4e03e99479c4ab70d0c897666f6a8c6644cbc87a4db1c54806b43e2c03160f876f3d167e43faa809", 0xc0}, {&(0x7f0000000340)="7427b981108247a65e0a28268b9ff970688ba78b44d85f70f2df5435f04154ded1d2939e141b49a89700c6d2ed657eb7e6ccb6db3b990b9bd058cee64736a26e122097e97890088518f5be64317f56acd9ffc2de1664690cd11129476dd9e1e497dc9f1610077d5ef961", 0x6a}, {&(0x7f0000000100)="2f4f2d8f5084b875e9437d766b5a7a07b6f39d609910cc0c1472248b", 0x1c}, {&(0x7f00000003c0)="ec99cc6457ca2e3d5e45929161af095766946268ce1feb13f4cce61d32b83b7dc8f8836ca3e443d3c4f4872039d6c2749c5ea3df4a98ea657e6ec1aafdb471e90476eb497f66efef7c7f70fbfab941bc9eed5fcfbbe62244d6bb7848c3de4b7465e6cf3d3e5566658e8ce831126d933bb398f2b6b38d", 0x76}, {&(0x7f0000000440)="08ac2ad6339dbde19e6ebfcdfce021b3017f4817dee747c51c914b3ea93afa7690aeede5455452a3bce859ab5f883c5774183c18e8cd30b5147d641347657af681f516088f5c74f05d74078dbb2f9c039e1044badfb133dfa76a043c1abc28d55fc19b726acd2f8dfbb5f56be92fb3322e5e3904472a55786e4a275e592d1975a243c42c64ffdbe26ab0a072041b8c7414964d0d93c27bb4891307d3a111f9d2095d6dfe63eb35ed87d8aa895cb610cebbbb31aaceab9709d856cbc12a8f09e49e7b29a38bc6b96be574ab78a6bf1e1bc85ff036df4113ba9941925734607e5d837121d7adfd68cf521422e1009ab8", 0xef}], 0x7, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0x18}, 0x80) fspick(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) 17m26.41995317s ago: executing program 4 (id=1403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(essiv(pcrypt(gcm_base(cfb(cast5),blake2b-512-generic)),c'}, 0x58) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe4, 0x68, 0xce, 0x8, 0x2013, 0x1faa, 0xcaf7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0x8b, 0x87, 0x62}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0xd18bfb4495ef1448, 0xe, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4(r2, 0x0, 0x0, 0x0) (async) accept(r2, &(0x7f0000000380), 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) 17m25.642738084s ago: executing program 4 (id=1407): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x1, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x404c0c4}, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r4 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x81900) mount_setattr(0xffffffffffffffff, &(0x7f0000000500)='./file0/../file0\x00', 0x8800, &(0x7f0000001dc0)={0x1, 0x80, 0x100000}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000101001000005e1affd5020000000900010073797a300000000008000240000000032c000000030a06000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYBLOB="16cccd045906a5e2fb7a05d16177f23fb867a432a53aa662240c90ce9b229cf3f3eb1754560be5400922c276c8845a359b10cba02bb8c456df4618be1001af7ebd227fe4419081d2ce9163c52ded123a5ae6e4e957c99632b426ab897d34710af8c433c57d564593f509c2f3e8ba53ca4d3a0c9c4d9dceaf44d2fc6a089e6e98a132b36ad475ba5cbb2aa7f0e0dafbdac13e03170c8e5aa340f81150a2ac91d1c4483660769105bfa7a51fea8dbc581661f4cdcd0125c727297776a65c46ba40c04354aef3ea7960a1e816401a6fdf459152f743e3d1bbd399f504feb9927f17debfd65b93bb75d0e2d379596b371290ac1f6d4e", @ANYRES64=r3, @ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1], 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x210c00, 0x0) writev(r0, &(0x7f0000001080)=[{&(0x7f0000000000)="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", 0x112}], 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x2000000000, 0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) fremovexattr(r4, &(0x7f00000004c0)=@known='com.apple.FinderInfo\x00') r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000600)=0xb0000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000580)={@any, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000003}) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000000e06050000008000000000000300000905000100070000000900020073797a32000000000500010007c715ab83fe1b0fcd0b5b0000000900020073797a32000000000500010007000000050000020073797a320000000005000100070000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40000081}, 0x4000048) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f0000000180)={{@local, 0xb}, 0x0, 0x6, 0x1, 0x9}) 17m25.408331384s ago: executing program 34 (id=1407): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x1, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x404c0c4}, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r4 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x81900) mount_setattr(0xffffffffffffffff, &(0x7f0000000500)='./file0/../file0\x00', 0x8800, &(0x7f0000001dc0)={0x1, 0x80, 0x100000}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000101001000005e1affd5020000000900010073797a300000000008000240000000032c000000030a06000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYBLOB="16cccd045906a5e2fb7a05d16177f23fb867a432a53aa662240c90ce9b229cf3f3eb1754560be5400922c276c8845a359b10cba02bb8c456df4618be1001af7ebd227fe4419081d2ce9163c52ded123a5ae6e4e957c99632b426ab897d34710af8c433c57d564593f509c2f3e8ba53ca4d3a0c9c4d9dceaf44d2fc6a089e6e98a132b36ad475ba5cbb2aa7f0e0dafbdac13e03170c8e5aa340f81150a2ac91d1c4483660769105bfa7a51fea8dbc581661f4cdcd0125c727297776a65c46ba40c04354aef3ea7960a1e816401a6fdf459152f743e3d1bbd399f504feb9927f17debfd65b93bb75d0e2d379596b371290ac1f6d4e", @ANYRES64=r3, @ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1], 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x210c00, 0x0) writev(r0, &(0x7f0000001080)=[{&(0x7f0000000000)="da5b870c723ad5336d9a0241b07cc2dafeb9307afe6e2cbc4f443665067123c6bc2b30f2f5be5213493440e551243c67f1a2603dc62bef1b3e35cdd6ee84d8ac4ea84929d82a84eadeb551ba98fcb3d157824a91d211810979411f953f184f4d030b0b3dc442d1981dbefd25c15415012ef342723285fbb26c271d7fc7ae42605fe6354c5a12602172c265569b498ad84f00434ee9e5660bc1ecce870c491c00864b76f403ae6ea7421f48fb69b39ed42c905222191190464485ab63e165edd0c272e68127d21a796ca2e0c086f1b926a6ceb37fcaf2305da289990843d14259952cdf5c820aadb56c06110b713bfc2ebf15dbac9ead45d0ac8a0516cf8023eb22ca3f030e5a21bce2bc78970ecdde9b376d", 0x112}], 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x2000000000, 0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) fremovexattr(r4, &(0x7f00000004c0)=@known='com.apple.FinderInfo\x00') r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000600)=0xb0000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000580)={@any, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000003}) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000000e06050000008000000000000300000905000100070000000900020073797a32000000000500010007c715ab83fe1b0fcd0b5b0000000900020073797a32000000000500010007000000050000020073797a320000000005000100070000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40000081}, 0x4000048) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f0000000180)={{@local, 0xb}, 0x0, 0x6, 0x1, 0x9}) 9m50.883367618s ago: executing program 0 (id=3279): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000340), 0x2041010, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x560f, &(0x7f00000000c0)={0x1, 0x3e, 0x15, 0x5, 0x12d, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x1405, 0x1, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xc, 0x5, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x7, 0x7, 0x1, 0x3], 0x8000000, 0x49340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) connect$vsock_stream(r7, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r7, 0x0, 0x0) connect$vsock_stream(r7, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 9m50.587161966s ago: executing program 0 (id=3280): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, &(0x7f0000000200)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) 9m50.408078123s ago: executing program 0 (id=3281): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000dc0), r2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0xa1bbca2dce4d8dc5, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xffffffffffffffb4, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_INDEX={0x0, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 9m50.162804369s ago: executing program 0 (id=3284): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000440)="36d9", 0x2, 0x800, 0x0, 0x0) (async) sendto$unix(r2, &(0x7f0000000440)="36d9", 0x2, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40814}, 0x20000000) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40814}, 0x20000000) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)='\x00'/16, 0x10) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$inet6(r5, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="a7", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}], 0x1, 0x41) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x321200, 0x0) (async) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x321200, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r7, 0x40043311, &(0x7f00000000c0)) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x28}, @hci_ev_le_advertising_info={{}, {0x2, [{0x0, 0x0, @none, 0xe, "ca8371fc96bd169ce019af133294", 0xe}, {0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, "5502f548", 0x61}]}}}}, 0x2b) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0xa, 0x8, 0xfffffffe}) r11 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x8, 0x22600) getresgid(0x0, 0x0, 0x0) (async) getresgid(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000240), 0x4) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 9m50.022851266s ago: executing program 0 (id=3286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x3}, &(0x7f0000000100)=0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtaction={0x3e4, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0x3d0, 0x1, [@m_ipt={0x2b0, 0x14, 0x0, 0x0, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x5a, 0x6, {0xe, 'nat\x00', 0x8, 0xe, "435edcf56202039a3d67007f4f9ed375bd1872ae701e62660a9b33e54cfa56c0a608e5e2a91159afbfa8ee471d45ca64"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xffd, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x11c, 0x11, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x89, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1decc"}}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x3e4}}, 0x4000) recvmsg$can_raw(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000b00)=""/76, 0x4c}, {&(0x7f0000000b80)=""/145, 0x91}], 0x2}, 0x40020001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={r4, 0xf0, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x896a}, @in6={0xa, 0x4e21, 0x1, @local, 0x6}, @in6={0xa, 0x4e23, 0xfffff801, @rand_addr=' \x01\x00', 0x1000}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0x2, @loopback}, @in6={0xa, 0x4e21, 0x5, @private2, 0x1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3e}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0xfff}]}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r8 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x5d11], [0x10000, 0x0, 0x0, 0x0, 0x3a3], [0x7]], '\x00', [{}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0xbcf}, {0x0, 0x2}], '\x00', 0x1000}) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0xa, 0x34324152, 0x3, 0xc, [{0x6, 0xfffffff8}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0xfffffff9}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000002, 0x0, 0x3}]}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) 9m49.763562032s ago: executing program 0 (id=3288): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000e, 0x11, r1, 0x180000000) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0xfffffffb, 0x2, 0x1, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r6 = syz_usb_connect(0x0, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x0, 0xdd, 0xff, 0x2001, 0x3c15, 0x7386, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$uac1(0x4, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000086b1d01014000010203010902a10003010302090904000000010100000a240109000202010208240403027ecd1208240701000002070904010000010200000904010101010200000724010508040009050109080007057f07250101010000090402000001020000090402010101020000072401060500000b2402010903fc81531e3d0b2402027b0a0700fad187072401060204000724010607030009058209000403062f07250101030400"], &(0x7f0000000880)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xf, 0x8, 0x6, 0x3514505a636897e1, 0x40}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x6, 0x5, 0xa}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "e6d12f4c9c3576a792e78528189a57d293af873affde247e56659a2fd84b7db30c9907821590d812e6697fdc69df12de434cdf68b64d2f93a3"}}, {0xfffffffffffffe0c, &(0x7f0000000240)=@string={0xae, 0x3, "977cc510cfb42c2708f9caae140b393b284dd68d6d77f75d808a85007f1155023bca21058987516f42e111a72c7c08fe57fd1a6cec597991b404ce6bcaadffa30928c04164c5ec39ac69549bc472114c78e3e5a1fdb37d82818424aa46a50e00000000000000ffe95a9bba6ec34559ffbc2f89f0309e1a026c702d966e8a9d2729f9b17e87b4d3206fe07c8722f466469ce8e2297967075b7c9ab17484ed8577a485461c863d71f04c48b3af"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000540)={0x14, &(0x7f0000000340)={0x20, 0x22, 0x58, {0xfffffdf0, 0x8, "027e0a07d9c9025f308094dd34abfad0f39c94213b1bd7be5f84a4befc294e1791e9c732e784c3f68c3d2b14a34b6847b266ed42ebcff3d9ff05c53a7f00ecfd43e3eac4a08d9ec4c56d58018fb1486426d343dc2428"}}, &(0x7f00000008c0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "a101806cc38e7167d932e5a12edaa9731c53341a891f52427e5f9c97b566a3669504b6b7a0b5262a8484bb895e82df158faf761391dc759793f6fef1def132eed61754859ef632ca23633dcdca2b9517dbb54b3d6bc19d9d415eab15189ba0ce52e60fc0524f5ff89d5c8b43ca3edc21aa87937e404417d053ce37c33e9c46fbe2356ebd3fc5ee4f6a3e81470f394bab7890e8b1b1342ee448b137c9c7f77100a51d77488aebb39c671d990500e993e59c8c4ff685d402f3f976732d2d1bf6bcd845899cc96566e118b4ec2255ebd57344bbd51e7ef8caee855f18451d037007e4392a3209b589e01e2e011ae5803c1cbc6ba93f4df4e255533689a5ed6a9ee2"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000600)={0x40, 0x6, 0x4, "29c93a6c"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)=ANY=[@ANYBLOB="208102000002000000ea6cbcc1f54fe3e616cd52f1c8fddf9c1bdedea4e780cb58aa26f2f5490308a9aab487d77e637d09b5bc1675d85b1bdd2bde8963"], &(0x7f0000000700)={0x20, 0x82, 0x1, "f7"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="20830300000036940afbf52d17ac4f0cc40a1326192e7391f2a0d8db8865d1d4bf357e2d5fbe9791c1e690d468ad5a08abaf894dc4dede60b9e3a2dc52177a43603706b8ca54d90b2e2183d27593dad6de3368e52515b1775f650fede9ca3e52fd618128aaabdf37b2db9fb80b3017fe1f70e544112c8b193320406b0a708c1347828cc4df5f2fc65cf9f34b1875c7001b1dddd99143603daa81a58843f98ea18cb9a0f8c94df45349ca71f829256c078dcc1cb75742b4a589003ea949761a1cd61585edf4b15c3546402aadeb3a1f48247cc441f9dcf96a95e62bc73d1a1e9d5ec6d2a259e05db85f47ea3d836ecf99263e32bbe5ef9e4f03000000be0fb5b1c215c9ac298faa0ea21703e76b9be02eb983f0368b2e8be877f3c1cc2d3c112c01e522591d59bf6ab1507eaf31bb89865163692f4bf0b633a4be2841ff4e7dcda42d93d0cbd2126230d307e5380c7c2cc6ae829a86904a49ba2da9f26efb4b745be6ba293b2ebf2503424422759de727517036749a187d6eac005ab58b030be6108a71a5eaf8447ae14faea7f6ced59e4b53edcda77f4359df60db0d8536c46ebc65e5f97c8e4f2e669fb254bb9cc6bc604100372478bb24c51697dae3f56a87cdfb57f902e23f4e0c957184be96"], &(0x7f0000000780)={0x20, 0x84, 0x1, "d1"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "0fa833"}}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000179090001006d617371000000000c00028008000140000000050900010073797a30000000000900020073797a32"], 0x74}}, 0x0) syz_usb_control_io$printer(r6, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) read$FUSE(r10, &(0x7f0000001240)={0x2020}, 0x2020) 9m36.283545016s ago: executing program 5 (id=3336): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000700), 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7}]}}, 0x0}, 0x0) 9m34.645648613s ago: executing program 35 (id=3288): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000e, 0x11, r1, 0x180000000) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0xfffffffb, 0x2, 0x1, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r6 = syz_usb_connect(0x0, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x0, 0xdd, 0xff, 0x2001, 0x3c15, 0x7386, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$uac1(0x4, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000086b1d01014000010203010902a10003010302090904000000010100000a240109000202010208240403027ecd1208240701000002070904010000010200000904010101010200000724010508040009050109080007057f07250101010000090402000001020000090402010101020000072401060500000b2402010903fc81531e3d0b2402027b0a0700fad187072401060204000724010607030009058209000403062f07250101030400"], &(0x7f0000000880)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xf, 0x8, 0x6, 0x3514505a636897e1, 0x40}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x6, 0x5, 0xa}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "e6d12f4c9c3576a792e78528189a57d293af873affde247e56659a2fd84b7db30c9907821590d812e6697fdc69df12de434cdf68b64d2f93a3"}}, {0xfffffffffffffe0c, &(0x7f0000000240)=@string={0xae, 0x3, "977cc510cfb42c2708f9caae140b393b284dd68d6d77f75d808a85007f1155023bca21058987516f42e111a72c7c08fe57fd1a6cec597991b404ce6bcaadffa30928c04164c5ec39ac69549bc472114c78e3e5a1fdb37d82818424aa46a50e00000000000000ffe95a9bba6ec34559ffbc2f89f0309e1a026c702d966e8a9d2729f9b17e87b4d3206fe07c8722f466469ce8e2297967075b7c9ab17484ed8577a485461c863d71f04c48b3af"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000540)={0x14, &(0x7f0000000340)={0x20, 0x22, 0x58, {0xfffffdf0, 0x8, "027e0a07d9c9025f308094dd34abfad0f39c94213b1bd7be5f84a4befc294e1791e9c732e784c3f68c3d2b14a34b6847b266ed42ebcff3d9ff05c53a7f00ecfd43e3eac4a08d9ec4c56d58018fb1486426d343dc2428"}}, &(0x7f00000008c0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000600)={0x40, 0x6, 0x4, "29c93a6c"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)=ANY=[@ANYBLOB="208102000002000000ea6cbcc1f54fe3e616cd52f1c8fddf9c1bdedea4e780cb58aa26f2f5490308a9aab487d77e637d09b5bc1675d85b1bdd2bde8963"], &(0x7f0000000700)={0x20, 0x82, 0x1, "f7"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)={0x20, 0x84, 0x1, "d1"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "0fa833"}}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000179090001006d617371000000000c00028008000140000000050900010073797a30000000000900020073797a32"], 0x74}}, 0x0) syz_usb_control_io$printer(r6, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) read$FUSE(r10, &(0x7f0000001240)={0x2020}, 0x2020) 9m34.603158245s ago: executing program 5 (id=3340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) rseq(0xfffffffffffffffd, 0xfffffffffffffeeb, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'xfrm0\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x152) 9m34.463718022s ago: executing program 5 (id=3341): r0 = syz_open_dev$video4linux(&(0x7f0000001000), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001480)={0x980001}) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 9m34.278499761s ago: executing program 5 (id=3342): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000030c0)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c003500000000000000000008001d"], 0x28}], 0x1}, 0x0) (async) getrlimit(0xd, &(0x7f0000000000)) 9m34.143971537s ago: executing program 5 (id=3343): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904", @ANYRES32], 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f0000000100)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="4005"], 0xdd12}], 0x1}, 0x20040051) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000080)={@any, 0x7fffffff}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x0, 0x1c, 0x5, 0x0}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0xfffa, 0x4000, 0xb8, &(0x7f0000000140)="5e384713b3aab0afe1c4dedd6c36de715514fc0e604a9dedee7a600212b7faba79484e7ccee0124bee0acf77fe000cd0f9baa71472c8732caf860c8c474821cff7b9d2a143e96bf11669000f25e41e5543a03c59fe255c75244166c7b6a8bccd4a4820c765b766a50dc9cbf79c11b4e3f5895957a3c44c4d4cfef0651c69b9589c4ef04d43610b7b0491b5824ded49010441d25082a8b666282bdea1f9264ee8ebe87c84c975d112b623d8e5012f4cff562115938321e115"}, {0x3, 0x810, 0x3b, &(0x7f0000000200)="237c3432517d81ad95ace9a87f87753f885102f8336dafd37b8836b9a3d76146ea52b8b1e98916a9d6d0bcda44ddaeec45b11177f22fca943d7fc0"}, {0x9, 0x1000, 0x0, 0x0}], 0x3}) 9m32.545928101s ago: executing program 5 (id=3347): r0 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES16], 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000300", @ANYRES8=r2], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xc7a, 0x9, 0x33524742, 0x3, 0x2, [{0x1, 0x3ff}, {0x0, 0xffffffff}, {0x816}, {0x8, 0xffffff49}, {0xe, 0x6}, {0xb3, 0x2}, {0x6, 0x401}, {0x9, 0xe}], 0x1, 0x1, 0x3, 0x2, 0x6}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r7, &(0x7f0000000180)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, 0x0, &(0x7f00000004c0)=0x2a) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x6, 0x5, [{0x1, 0x1}, {0x3, 0xa}, {0x4, 0x4000200}, {0xc061, 0x5}, {0xfffffff8, 0x1}, {0x1}, {0x4, 0x8}, {0xffffffff, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010860500972e0102030109022400010000000009040000060abf4000ba594381046098f3d6a14a09050b010500ffee0009050a02000000000000"], 0x0) 9m17.37986308s ago: executing program 36 (id=3347): r0 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES16], 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000300", @ANYRES8=r2], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xc7a, 0x9, 0x33524742, 0x3, 0x2, [{0x1, 0x3ff}, {0x0, 0xffffffff}, {0x816}, {0x8, 0xffffff49}, {0xe, 0x6}, {0xb3, 0x2}, {0x6, 0x401}, {0x9, 0xe}], 0x1, 0x1, 0x3, 0x2, 0x6}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r7, &(0x7f0000000180)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, 0x0, &(0x7f00000004c0)=0x2a) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x6, 0x5, [{0x1, 0x1}, {0x3, 0xa}, {0x4, 0x4000200}, {0xc061, 0x5}, {0xfffffff8, 0x1}, {0x1}, {0x4, 0x8}, {0xffffffff, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010860500972e0102030109022400010000000009040000060abf4000ba594381046098f3d6a14a09050b010500ffee0009050a02000000000000"], 0x0) 5m17.218707652s ago: executing program 1 (id=4249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e24, 0x74, @private0, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xe6b2}], 0x1) 5m17.1522253s ago: executing program 1 (id=4250): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, 0x0, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5m15.531838681s ago: executing program 1 (id=4256): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25DELUID(r1, 0x89e2, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) (async) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="000903000000826604"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5m14.123703308s ago: executing program 1 (id=4259): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x8000003d) (async) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000140)={0x3, @null, 0xffffffffffffffff}) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x80000000, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) (async) chdir(&(0x7f0000000100)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) (async) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) (async) syz_usb_connect(0x7, 0x8a, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xa2, 0x21, 0x5c, 0x20, 0x10b8, 0x1f98, 0x2a67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x8, 0x10, 0x20, 0x8, [{{0x9, 0x4, 0xf0, 0xf7, 0x0, 0x11, 0xe, 0x78, 0x4, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x800, 0x9, 0x7, "e49b79a46b"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x2, 0x9, "111a641cb6"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0x11, 0x41, "bd"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x4, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x1, 0x8, "c83e", '\f#`'}, @as_header={0x7, 0x24, 0x1, 0x3d, 0x5, 0xa5131f16ce201834}]}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x2}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0x0, "052a60"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x3, 0x5f, 0x0, 0x81, 0xd9}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x1, '0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="4005"], 0xdd12}], 0x1}, 0x20040051) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000080)={@any, 0x7fffffff}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x0, 0x1c, 0x5, 0x0}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0xfffa, 0x4000, 0xa1, &(0x7f0000000140)="5e384713b3aab0afe1c4dedd6c36de715514fc0e604a9dedee7a600212b7faba79484e7ccee0124bee0acf77fe000cd0f9baa71472c8732caf860c8c474821cff7b9d2a143e96bf11669000f25e41e5543a03c59fe255c75244166c7b6a8bccd4a4820c765b766a50dc9cbf79c11b4e3f5895957a3c44c4d4cfef0651c69b9589c4ef04d43610b7b0491b5824ded49010441d25082a8b666282bdea1f9264ee8eb"}, {0x3, 0x810, 0x76, &(0x7f0000000200)="237c3432517d81ad95ace9a87f87753f885102f8336dafd37b8836b9a3d76146ea52b8b1e98916a9d6d0bcda44ddaeec45b11177f22fca943d7fc075723edccf99726caba560961e38c719ac4f8323b0c0325c97af07661f5d0498be8d0008526c78cb999cb6b1235c8fba035c115f2d5e0ab0510fa9"}, {0x9, 0x1000, 0x0, 0x0}], 0x3}) 5m13.380756852s ago: executing program 1 (id=4261): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="ad95507111d4403c6f6bde362f8b1bf89b0cbf636fe3055a1325f6fa10cb06a24243ee12dd86dcb4d2a27e026369b4b9d48abb245844d754884befad551064d7aafbd8152af578d701dd5f6bd3ef", 0x4e, r0) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="ad95507111d4403c6f6bde362f8b1bf89b0cbf636fe3055a1325f6fa10cb06a24243ee12dd86dcb4d2a27e026369b4b9d48abb245844d754884befad551064d7aafbd8152af578d701dd5f6bd3ef", 0x4e, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@arm64={0xa, 0x8, 0xa, '\x00', 0x4}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@arm64={0xa, 0x8, 0xa, '\x00', 0x4}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xa3) fcntl$addseals(r2, 0x409, 0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x180081, 0x0) r4 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000240)={0x20080522, r4}, &(0x7f0000000280)={0x9, 0x3ff, 0x3ff, 0xf6, 0xfffffffc, 0x4}) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x12, 0x1, @tid=r4}, &(0x7f0000000300)) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000340)) (async) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000, 0x63b, 0x5, 0x7, 0x400000, 0x0, 0x8, 0x92, 0x7d10c520, 0x400, 0xed9, 0x1, 0x100, 0x7ff, 0x3, 0x9], 0x10000, 0x200200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) capset(&(0x7f0000000440)={0x19980330, r4}, &(0x7f0000000480)={0x8, 0x0, 0xffff, 0xfff, 0x8000, 0x7c}) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000004c0)='[\x00', &(0x7f0000000500)) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000004c0)='[\x00', &(0x7f0000000500)) capget(&(0x7f0000000540)={0x20071026, r4}, &(0x7f0000000580)={0xe, 0x7, 0x9, 0x0, 0x2, 0x10}) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) keyctl$read(0xb, r1, &(0x7f00000005c0)=""/19, 0x13) timer_create(0x0, &(0x7f0000000600)={0x0, 0x3, 0x0, @tid=r4}, &(0x7f0000000640)) (async) timer_create(0x0, &(0x7f0000000600)={0x0, 0x3, 0x0, @tid=r4}, &(0x7f0000000640)) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000680)={@private0}, &(0x7f00000006c0)=0x14) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000700)=0x9, 0x20, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000780)={0x80, 0xd971e8be2909e64c, 0x0, 0xfffffff9, 0x1, 0x4, 0x800}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000007c0)={0x1, 0x2, [{r2, 0x0, 0x4000, 0x100000000}, {r2, 0x0, 0x1000000000000, 0x8000}]}) (async) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000007c0)={0x1, 0x2, [{r2, 0x0, 0x4000, 0x100000000}, {r2, 0x0, 0x1000000000000, 0x8000}]}) recvmsg$unix(r2, &(0x7f0000001d40)={&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/244, 0xf4}, {&(0x7f0000001a00)=""/165, 0xa5}, {&(0x7f0000001ac0)=""/55, 0x37}, {&(0x7f0000001b00)=""/192, 0xc0}, {&(0x7f0000001bc0)=""/18, 0x12}], 0x7, &(0x7f0000001c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x0) r7 = syz_open_pts(r6, 0x412000) ioctl$TIOCCONS(r7, 0x541d) mknod$loop(&(0x7f0000001d80)='./file0\x00', 0x100, 0x1) 5m13.173687363s ago: executing program 37 (id=4261): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="ad95507111d4403c6f6bde362f8b1bf89b0cbf636fe3055a1325f6fa10cb06a24243ee12dd86dcb4d2a27e026369b4b9d48abb245844d754884befad551064d7aafbd8152af578d701dd5f6bd3ef", 0x4e, r0) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="ad95507111d4403c6f6bde362f8b1bf89b0cbf636fe3055a1325f6fa10cb06a24243ee12dd86dcb4d2a27e026369b4b9d48abb245844d754884befad551064d7aafbd8152af578d701dd5f6bd3ef", 0x4e, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@arm64={0xa, 0x8, 0xa, '\x00', 0x4}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@arm64={0xa, 0x8, 0xa, '\x00', 0x4}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xa3) fcntl$addseals(r2, 0x409, 0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x180081, 0x0) r4 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000240)={0x20080522, r4}, &(0x7f0000000280)={0x9, 0x3ff, 0x3ff, 0xf6, 0xfffffffc, 0x4}) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x12, 0x1, @tid=r4}, &(0x7f0000000300)) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000340)) (async) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000, 0x63b, 0x5, 0x7, 0x400000, 0x0, 0x8, 0x92, 0x7d10c520, 0x400, 0xed9, 0x1, 0x100, 0x7ff, 0x3, 0x9], 0x10000, 0x200200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) capset(&(0x7f0000000440)={0x19980330, r4}, &(0x7f0000000480)={0x8, 0x0, 0xffff, 0xfff, 0x8000, 0x7c}) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000004c0)='[\x00', &(0x7f0000000500)) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000004c0)='[\x00', &(0x7f0000000500)) capget(&(0x7f0000000540)={0x20071026, r4}, &(0x7f0000000580)={0xe, 0x7, 0x9, 0x0, 0x2, 0x10}) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) keyctl$read(0xb, r1, &(0x7f00000005c0)=""/19, 0x13) timer_create(0x0, &(0x7f0000000600)={0x0, 0x3, 0x0, @tid=r4}, &(0x7f0000000640)) (async) timer_create(0x0, &(0x7f0000000600)={0x0, 0x3, 0x0, @tid=r4}, &(0x7f0000000640)) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000680)={@private0}, &(0x7f00000006c0)=0x14) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000700)=0x9, 0x20, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000780)={0x80, 0xd971e8be2909e64c, 0x0, 0xfffffff9, 0x1, 0x4, 0x800}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000007c0)={0x1, 0x2, [{r2, 0x0, 0x4000, 0x100000000}, {r2, 0x0, 0x1000000000000, 0x8000}]}) (async) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000007c0)={0x1, 0x2, [{r2, 0x0, 0x4000, 0x100000000}, {r2, 0x0, 0x1000000000000, 0x8000}]}) recvmsg$unix(r2, &(0x7f0000001d40)={&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/244, 0xf4}, {&(0x7f0000001a00)=""/165, 0xa5}, {&(0x7f0000001ac0)=""/55, 0x37}, {&(0x7f0000001b00)=""/192, 0xc0}, {&(0x7f0000001bc0)=""/18, 0x12}], 0x7, &(0x7f0000001c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x0) r7 = syz_open_pts(r6, 0x412000) ioctl$TIOCCONS(r7, 0x541d) mknod$loop(&(0x7f0000001d80)='./file0\x00', 0x100, 0x1) 10.447665035s ago: executing program 6 (id=5633): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000ffdbdf250600000008000700ffffffff08000700ac1414b4c6bb34000200000008000800e00000020800040001000000080007000a010100"], 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x4000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x40000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008885}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000400)={{@host, 0xe}, 0xa4af, 0x5, 0x5, 0x9}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4a1}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x77}, @NFC_ATTR_LLC_PARAM_LTO={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x262}]}, 0x54}, 0x1, 0x0, 0x0, 0x811}, 0x40010) 9.963391744s ago: executing program 6 (id=5635): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000000400000014257a255d5f74756e00000000000000000014000300fe839242de1eb062e1afed8f44688000000000000000000000000000aa14000200200100"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000000400000014257a255d5f74756e00000000000000000014000300fe839242de1eb062e1afed8f44688000000000000000000000000000aa14000200200100"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9.961723087s ago: executing program 6 (id=5637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000040b2100"], 0x0}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x224, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x124, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6262dac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad3d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a4652e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bb9316}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62aa7351}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3999b132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3b0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd64b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23058b72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c920463}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29466162}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69990ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3530111f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1000}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12cd919}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e3aa514}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37e94ac2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9034}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd166deb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8836}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2862}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2749188e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a29a35c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75413b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25aa7e93}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18a7caf6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65a6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x500a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58cd5b6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4645}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63e2902d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63122a3b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x501da654}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10fde891}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23c46a2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfe650f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bce3c15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x224}}, 0x40) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0xc6280) 7.163633281s ago: executing program 9 (id=5657): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="06c9a2768592"], 0x0) 7.116236747s ago: executing program 6 (id=5658): fsopen(&(0x7f0000000280)='configfs\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x20000400) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="200b1b00000005ebb76a6d485a3dfcd35f87aa4f2d63fc7840266f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) unshare(0x200) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x18, 0x923, 0x0, 0x0, {0xa}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x20010000) ioctl$USBDEVFS_FORBID_SUSPEND(r7, 0x5521) open_by_handle_at(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000f10000000100000000000000000000000000000005010000f8ffffff3d0000000000000027bd888cf253cbcc73fb0cb793f30d612fbb4f6d4618c6f6d1358aaa17be9583e228eb09adc75ca93447d904d092298b861480302cce5660604c4cbcdf580788f55c61c2b549b809a6a481afcac2da5a1117c3070d20adedad1a9e236c2ab13b8dbb95586a818aeccaff84f26aab67e5c772fdd994b1684b0161d600a9e075f8ad603eca43607d5b2b43223504eb9427ecf579fd03a77d9d6685fdbce172a05ba42b27e1d80c1857cf6b74916f68516764b3c00ca61fd8b62c6b309698a98b9d7c08b7990c5f"], 0x0) 5.913620134s ago: executing program 9 (id=5659): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120102000ce82308c2154300c902010203011602ff5d09b4654e00d5051b897040e7c90c24000100000000090400000257e56f0009050300000007ff0209050801ff4183c2d756e1030600084e852fb6a6b37018904bf62e37ea72fba17dea8ed44b8f970860f011fedcbce888140bfe92fb8a"], 0x0) 5.16199519s ago: executing program 7 (id=5662): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000006200)={0xaf5, 0x1bbe, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 5.03539079s ago: executing program 7 (id=5663): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000400)=0xffffff63) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffe, 0x6, 0xff, @scatter={0x0, 0x1200, 0x0}, &(0x7f00000000c0)='\b\x00\fj\bH', 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file3\x00', &(0x7f0000000200)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') 5.035095772s ago: executing program 7 (id=5664): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x101, 0x12cd}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x4, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf250300000008000600ac1414bb08000b00", @ANYRES32=0x0, @ANYBLOB="060001004e23000006ba3541927f700c86c08eb2ffaa"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000002340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c1e5a322ea9614f}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f0000000080)='1', 0x1) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRESOCT=r3, @ANYRES16=r3, @ANYRES16], 0x0) (async) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 4.588203602s ago: executing program 9 (id=5665): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x8, 0x2, 0xffff, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x44a040, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202209a}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) (async) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x80, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000001c0)=@other={0x20000002fffffffc, 0x0}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="28c0d8c36010688c2476297d809b30821fa6f544f670d721c0d5bd18593e2cdda89b0ebb6ded8d"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) (async) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$RTC_EPOCH_SET(r8, 0x4008700e, 0x4) 3.975054481s ago: executing program 6 (id=5668): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x408) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x4000000000000b) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x20042) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000500)=""/92, 0x5c}], 0x1, 0x0, 0xffffffff) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r6 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x0, 0x24, 0xe7, {0xe7, 0x24, "8ad38b7471c9954fec74b008404528806793d82d3d966a1dba91a3c62dd3a93c753f88abf9d546168935399af5feac349a3bd552daec31688d38ce338d2c6437c126fd918bae1e2d0405cf7e107d1966abf57ec2228d84144a60685662a0e3e542b6109f36feb7c78f3d6941721112159e4610ff466a976f7149c0d270f1e653442e2badf5af5c58a50f41bb013e55fd92a6d4ba8942edf0bf86ad2b3aaaeb42040499781101464172f823bb4d46fdb500183e9126d229226688b5948e72af9e73f5bfc1a9a9136ed823486682538c722e2d7241591815720d52e188111a63bd3ef9ea3bea"}}, &(0x7f0000000180)={0x0, 0x3, 0x99, @string={0x99, 0x3, "5947c43d3df0b047f792cfd3210c60c8c2b77df35f48815ca5a486e71da20b997a463f2bbe1d4aae8a8ab9d83468a3e74c08e4b99df50f44f1b9cb7c0e04203d54564fe7afe51f57dcbc571722893ae59aa5852536151947a3f51fb409d7e8c39b213939dec34ce16abce2adf7ceb4e525468397bed4479d8d7cb2fa2497a37296e3aab9b68f9e7fccda9fdc8bdbf824700ef83ee2ae77"}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x0, 0x15, 0x10, "59267f7f4253e222ee8f412dc915a468"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0xc0, 0x5, 0x1, "a9"}, &(0x7f0000000380)={0x40, 0x5, 0x5, "fab2d88bb9"}}) syz_usb_control_io(r0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x204, 0x0, 0xa, 0x307, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x102, 0x6, "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"}, @NFTA_TABLE_USERDATA={0x60, 0x6, "6b59d997472121391c7e9d87ab67381582ace282ddd26e2cfaabd7448c43ba8cc48d42d8b1d14a3b96b4c156a60ed40cfcb739f37bfacf04d8ba562f70519315a52fb1d61756c389ec29b03e3896802de6a428aa0d3c6c4b6d511eae"}, @NFTA_TABLE_USERDATA={0x52, 0x6, "fe3631446d81b7f079faa9ff9acc4e0a4e5e1aac052de6e65713c424f401e55d19452f556cdf08144af3f4b3aa3bebef3f78900a469dc32db731b2506802ae64793ac498bc90f6c354b72cb6d2e4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x75c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x734, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}]}, {0x6fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x46c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x77, 0x1, "87f53c825a8cf8461ca0cfccd9eb57544d06994531fc48befa50dcd65c70a95c67142dd279c28950f7045fc44721181dac528c51c8353e1b08320f3f22cf8395c3ae94b927d1e13ac50c9178fade9b57b3720f3497ecf6b056660c84e833620ade69e4a8cb59ac9e57872d882d20e7dcc8723c"}, @NFTA_DATA_VALUE={0xfb, 0x1, "424eaa343b6fd0028ff318ae2978fe78cdec68421fee5eca5cc475cbe33dc5c21a63103125d338f0984464bd97c18f4fe15494698def6f6d6408086a8e8c4761487a4a19aba1d79a3f0b7bb0e2540e0742e61568526b6eab99ceca4444fc369347aafe2c4c295471446e0ec8fc071b767d53bbc59a12cff4cc2f5fc7c00351d196081eb4e6fb6d0830caa8f870f4d9fc19e508b69512e9b1c08bbdb0403121f02adc3b17473d750316c129d016cb02bc31822143de289ad561bd2d6d4510949e551e0cca7508fe74c017b046ca1a9b344e6264ab02d798e0b6a2486362bdd07a3e9d9cbf97a1c80ee525609d999a5b29902ba540782a26"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "7ff5c8569e423e8383d13221a92e7904c2cbd85c85361b78fc89d5952fa7cbac1297113b0fe7f586ba005042ef4d0d04519bf9802a2eb99474f5a05652faa3a9b497852dbb867f517d4dbb601c817984232ca2ee052c4de14ec7788aa2e2766eef1c29797a0c4ce5755f8d1d39fdd55ca8d971490a768716ecefcea82a565ce55894ac06678816ead4913a8c690f5d04000b89411c1752e7b7cd247d2b63bb9e68c441326ce503db2277fb67080fa59fbdc7bab9ca9aff39075301939b46f3807f846dd43b54d56fe3f38228fa07836276b1e3f2aac83ea2000000000000"}, @NFTA_DATA_VALUE={0xbe, 0x1, "ad4c1e6074642e6987705e8b33c9cab5600aa556d267e4848bdff02d164427483446ad42102c66d06711bb7469778666c53b9312ac2cf0efc30ae86aeedd9d993657f473df8b862892d1f5485b5a5f6924f83de8318506b16d61f465991f0d3392093be4e3a47f577be2e9e63a0f651af6abc52b14d8e981209220721aeabfe3427dd6f4c3aa0db913494e57f842339b536b48ec350f8130a25fce261f19daea3d067e99044d8522bec58cef0690d1fa6c28e815c52e28aa673e"}, @NFTA_DATA_VALUE={0xda, 0x1, "546e989f61a74de68c5ae62c8e3b2e712ed53a9d12a49617e7db74022e9eb06c716370380657568932a102163826f338e08ddba915987a7cccff95428a19c474b798e75808b2237a615f7424275469e308695a418d379887f63bbd31db1a9d883862b8cea8728882342b6e7394c54ab117614c75fa7cce74aa7c2affc5a6a13b3f20975933464aac4548508f1204630d819f880af715d887b61b75cafa6392f21003fdb76473f1f842d11b74171570171b12ff043a82e6bddaffb31c07e43dde1fb9769d879a0f04f91d1cf60749918a905414e730d2"}]}, @NFTA_SET_ELEM_DATA={0x28c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "981a666931c1eb0ba622791738b16a7795bec31d8d0e21f624f1a7ffd9205085cb462f742a5e02d17b51f0c7a2cb78f7407b135f01c730760f4568af6ecccb2af834ae7150e3d8e16b4eac91dafdbf5a2c98cf1f2e513775576af2f2adeea22f66ca01f759e503200c647cd3f4f3939df73f66a621cf0950f9426ece1221f4b9b032d1e064ed7697be2ad4eb5180034a9c6788d6c8d2523c6adef9abbe453c255f72810637276b7a795edd0454ff3479d1614000eecf1ee16aa172d92add1dbdc1426a3994add21753c880a7a80d88f87bab7eaccd"}, @NFTA_DATA_VALUE={0xb7, 0x1, "b998e32a4327f62a7388720d87bc3c7f6f062f0b3e3297e6ba4a35d0a3e38d6fad28bfad259eb6d17a4cde0f884e7896097295bf105aa000fd6f267f5ff714a7a893c518f3fdb65acf1e48f77dd832ff31b83f5da55dc8551030a1524ecf96731d948d4b0319b2cb23ca7889d20fe2870ad3a4e3c7e185c7f473b7fb230fcd09c0f89a1aa9cf061d8c6ce32f98d8acc2f93f7742f9f12973851c9985f720a019f53cab738020694dd4462c01d43a1d57a52bc9"}, @NFTA_DATA_VALUE={0x61, 0x1, "e59a21e7e316321aa1eacc710f290a267398bd5343cb835a1bf951d88b47b4412e07338da32c0d9760905dea78064ee7b5d82788cfec4b84c888ca7d8f12560618e70c56d14845bbd3d0c4e6fabd0e40400a110576d61ae15749509ca6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000600)={0x18, 0x2, {0x3, @local}}, 0x1e) 3.676346798s ago: executing program 8 (id=5669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3", 0x2}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/74, 0x4a}], 0x1}, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x440d00, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000002c0)) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = userfaultfd(0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xffffff8b, 0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r5, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c) 3.599975308s ago: executing program 8 (id=5670): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x4000000000, {0x7, 0x28, 0x3894, 0xb235333, 0x2, 0x1, 0x4000000, 0xfffffffe, 0x0, 0x0, 0x0, 0xb2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.553624875s ago: executing program 8 (id=5671): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) r1 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0xfffffffffffffd54, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x6, @string={0x6}}}, 0x0) 2.906963041s ago: executing program 8 (id=5672): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0403d11, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) sendto$packet(r6, &(0x7f0000000480)="330320000c00140000007ef500005f530c0900000000000000f786dd3baa4b1f", 0x20, 0x40008c5, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x140300, r5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r7, 0xf518, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r5}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000600)={'ip6gre0\x00'}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/44, &(0x7f00000000c0)=0x2c) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x4}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="28cf80d7dcc6ff2d9233834c81a4d73b67d127da33e08fea638099af9101c20b7af9827446fb6c7a3bbac05e1d5412", 0x2f}, {&(0x7f0000000380)="48e30575cd6e9f724c7bc2b4fd9c4b492088adc36caf7746a485e48341f6126ec9549c359b989266fac4a9f89074f5daef146eb7af62d402de6f59da93fe606f7124e8b6ad27b7c827d695639ba0bd92d86e102b826371a17861312d6e757c1f61919a53200b09ebfcfab14b4d906e1a5b4e5502f1495411f23e7be14e4b5f4e65e281667d116be2d9bfb8f9b2831c3c61", 0x91}, {&(0x7f00000004c0)="eee80f93eac77142719cc97e151def05c3d6da8f9fb261f1a3bf67212c0fef039bb8bf954b1e886adada52c850f53c832243697a748c45620106809d23a606dae8f9b692f9ec749309fca49163a0df4c620b3d3e2be7c6898aa90ca167ebafd8bf81bd097fb80a9880577d0d87f2a0b8ec5a7599016abb4e82ffd6fa296fe78580df4825389db077c6c10403c2ccb08c3e4b7dd62dc0d59a89c15ed82e51", 0x9e}], 0x3}, 0x20004000) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9}) 2.787558535s ago: executing program 8 (id=5673): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000180)=[{0x1, 0x1, 0x0, 0x0}], 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f00000002c0)=0xffffffffffffff50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x80, 0xc3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x1d, 0x3, 0x208, 0x3, 0x1, 0x2, 0x1c, 0x4, r5}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x14b4}, 0x1, 0x0, 0x0, 0x4040094}, 0xc885) 2.192806324s ago: executing program 8 (id=5674): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x4207, r1) ptrace$pokeuser(0x6, r1, 0x1, 0x5) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xfffc, [0x5, 0x6], 0x4}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @long}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) ioctl$TCFLSH(r3, 0x400455c8, 0x1) 1.99203892s ago: executing program 7 (id=5675): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x68c6f406, 0x4020, 0x3}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x800) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x2004c000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x84, 0x40, 0x107, 0x70bd2d, 0x25dfdbfb, {0x4, 0x7c}, [@typed={0x4}, @typed={0x69, 0x2b, 0x0, 0x0, @binary="2702817f2c4603d1939cfd361f6b7c5365720e2b996b6361cd643b5494227f2ce5cba495880958eb65d045f75ee5bbccf7dcfdb9c01fb546dc029f6e32ad3bfddb23c12b9d9bf98394be76f88b9df2fbe67772b2f77a89fac636b2c2f9e6e13d6d3a032531"}]}, 0x84}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000600)={'\x00', 0x1000, 0x2800, 0x2, 0x1, 0x7fffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xc, 0x2, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) kcmp(0x0, r4, 0x6, r1, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000000)={0xdddd0000, 0x100000}) sendmmsg$inet6(r9, &(0x7f0000000900)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 1.40736176s ago: executing program 9 (id=5676): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x7ffffffe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000) 949.817943ms ago: executing program 9 (id=5677): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}, {0x0}], 0x2}, 0x4840) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}, {0x0}], 0x2}, 0x4840) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x3}]}, &(0x7f0000000440)=0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) socket$kcm(0x10, 0x2, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'nicvf0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'nicvf0\x00'}}, 0x1e) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xe1, 0x0, 0xffffffffffffffff}]}) close_range(r0, r4, 0x0) 936.698647ms ago: executing program 7 (id=5678): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) io_setup(0x222, &(0x7f0000000180)=0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) r7 = eventfd(0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000000240)="8981c217bc330cdd7b24686ecd56d369a7d2e1124364c9121230f8989681ac470d09a0488ae5659c09774c2eaa289c9eb60c4802f4ac6f94d5b49484676aa44e541899", 0x43, 0x9, 0x0, 0x2, r7}, &(0x7f00000001c0)) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="893eedffffffffff0f003500004008000300278712dbbf45654c9dd0daee22820dc257a486b236a999af578ec7971b634a7e839855bfc7c801000000a9bacee1166d5804803733e566b7e3f25861bf51b57751f6260399aa3fbe392d3269bb44bf3686aef795a18d540f96eba8ee66286a3cd106b9171b000000000000", @ANYRES32=r6, @ANYBLOB="0a0034000101010101010000"], 0x28}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) io_submit(r2, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000380)=0x3) r9 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r9, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @tick=0xffffff00, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@local, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000540)={'syztnl2\x00', r10, 0x8000, 0x700, 0x7fffffff, 0x6, {{0x36, 0x4, 0x2, 0x21, 0xd8, 0x64, 0x0, 0x1, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x31, 0x3, [{0x5, 0x6, "02ddfa44"}, {0x7, 0x3, ';'}, {0x6, 0x2}, {0x1, 0xd, "c2b12878200d3d2078a983"}, {0x5, 0x5, "1d4647"}, {0x1, 0x8, "167bb252a1aa"}, {0x0, 0x6, "b6858ac5"}]}, @timestamp_prespec={0x44, 0x34, 0x68, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x75f80000}, {@local, 0x10}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x3}, {@multicast2, 0x1}]}, @cipso={0x86, 0x5d, 0x3, [{0x5, 0x4, "8559"}, {0x1, 0xe, "bc6b4e0e5a1cb3aa6ddfc832"}, {0x0, 0xd, "339c3751c2fbf885060981"}, {0x7, 0x8, "0c18f62a2fd8"}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0xe, "fce55e5f0c8b99beaf2f86ee"}, {0x1, 0xd, "685ec9b6e1f31748557519"}, {0x7, 0x4, '+`'}, {0x7, 0x2}, {0x0, 0xb, "4fe5967d98cb8323aa"}]}]}}}}}) 803.979609ms ago: executing program 6 (id=5679): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x20, 0xc, 0xc5, {0xc5, 0x6, "64373db138f055733c02a077846aaee9f87619d6403d02b42769eadc488e0c8c43b7e90997a8f500f07be783c2365771ec500131aa86dfb5f97086e9396d1a9ea636994ea3f783fd2ac143c10226370e154be93c62c2275d13ba921f2587a3c92da983c7d039aae7e23777868d6ad23c3e444d05cbfb4643f66700697838c0d61c615939973cc8141dbcc8a186235e662d4ae15fcc1d6a29806e3f74e1aa166ded5610e3cc498bf2100ab382daafa2490454463501e1cfb1685a5815eb7054aeea4598"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000d80)={0x0, 0x5, 0x17, "43ff85a9b6968b3950b0cb0a4c925dd4b80924b4e65d84"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000e40)={0x20, 0x81, 0x2, "b739"}, &(0x7f0000000e80)={0x20, 0x82, 0x2, "e306"}, &(0x7f0000000ec0)={0x20, 0x83, 0x3, "4f1eda"}, &(0x7f0000000f00)={0x20, 0x84, 0x4, "9cdeee41"}, &(0x7f0000000f40)={0x20, 0x85, 0x3, "16e84c"}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x6f, {0x6f, 0xd, "f7e96f6425e7eaf5d37bf95442b68ed454508d9b2c7a07997650f4a210a212a1c988d6159ec5b858eb404f60e21fdae2a94bb228d4d83be3ae48b5ea635626cee113dbbaf0fcf3261a605756c1e9ef1ceb880a9cd8e3968862537a325421cbab54a8df72d3a6b872cdcef8ed18"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000000100)={0x0, 0xf, 0x79, {0x5, 0xf, 0x79, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "f137a2e9a3c2dd4b7fd1660cb7678f9f"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x9, 0xf00, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x3, 0x0, 0x9, [0xff003f, 0xffc000, 0xff3f, 0xc000, 0x0, 0xffc1bf]}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x60a, 0xf000, 0xeec7, [0xff, 0x3f00, 0xc030]}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x10001, 0xf78f, 0x3, [0xc000, 0x0, 0x4100]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xfd, 0x2, "31f2b4f0", "e7229278"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0xfc, 0x3, 0x1, 0x7, 0x5}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x0, 0x5, 0xf7, "8e0968124695d62b27630f695450ac36b3b18522c215efb45f3caa5abf999a3493c548e0f1e2ca4818817dedb3c2c3c1e572b5a8a6a7e513bb1305bd86d84895eed330c70ef00c6ea47792f89c7def516a780146d8513d629c2809548af3e38e4f229e0f04ed695a00d18e744b306d3d355aa145b9d5da60973143bd9b6b3446331ef375c9a2a6775308a18718be5db2d88628c27111b03021fc7aadb30334abbba7bf03f040d7600b6a6043d3f86e90781018e7c51faa9b0f21e9852952f9fb059b3b7d905fc5ed4febfab275fd950055e7a15bd4408e95f02de5da0af6d28aa90b82942a079869dca774f5605e0749192ca88a156036"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x7}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x60, 0x40}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x66}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "9387"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "57dd"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xd0}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x10}}) syz_usb_control_io$uac1(r0, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)={0x40, 0x30, 0x45, {0x45, 0x5, "1d84174911273f4228b866746691eb9febfd7d3ca52fb1cba1a43084c771962b1a4e75fccde31aadabfd0b778ebe1d08ef7bea269f2899c8723e8cc0c3ae7c4346d52c"}}, &(0x7f0000000840)={0x0, 0x3, 0x70, @string={0x70, 0x3, "07f034eb944a44d86d60317f2065d3f03061c99ca03ca325a80d6d15626fc3bcd8a871dfefe687c286051c6f4fc675505f283f5e9bd09269a7b4060a7d6df8c63180329cfee57cdb3b653844236476d76b736dbfd7e989a62a98caf0aaf3d9cd4d6b5522f1333252220dbb12a9e7"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x40, 0x6, 0x86, "7309dab976b2de720e4629f7cde328415f33801872656923849761be09c86faa3bb0174de8f310f64ee2865fbb2e105ed728292982238ef2e9f5f24fc272dbeaf0aa3925e85f5e892c47cba318d3db0aef92a7161372f0c75681d4356332e499fb2cf79929cce87d81c12a0ebe346fd968df5c333d4bbb01f9e0e9beee9663c71b93dd5ef46a"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a40)={0x20, 0x81, 0x2, "8c49"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, '\v'}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, 'y'}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "5919f2"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "5d9fa0"}}) 700.550176ms ago: executing program 7 (id=5680): mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, r1, {0x7}}, 0x18) syz_usb_connect_ath9k(0x3, 0x14, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 0s ago: executing program 9 (id=5681): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) (async) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ss `syz.9.5110'. [ 1313.291580][ T5944] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 1313.379863][T23154] Bluetooth: hci3: command 0x0419 tx timeout [ 1313.460987][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.472405][ T5944] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1313.481574][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.491790][ T5944] usb 10-1: config 0 descriptor?? [ 1313.901653][ T5944] keytouch 0003:0926:3333.0052: fixing up Keytouch IEC report descriptor [ 1313.913009][ T5944] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0052/input/input225 [ 1314.002715][ T5944] keytouch 0003:0926:3333.0052: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1314.015577][ T4573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1314.026863][T13391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1314.403480][T23545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.414063][T23545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.435044][ T5944] usb 10-1: USB disconnect, device number 123 [ 1314.493239][T23572] tc_dump_action: action bad kind [ 1314.701937][T23582] __nla_validate_parse: 28 callbacks suppressed [ 1314.701955][T23582] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5123'. [ 1314.821102][T23590] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5126'. [ 1315.227643][T23612] block nbd9: NBD_DISCONNECT [ 1315.232406][T23612] block nbd9: Disconnected due to user request. [ 1315.240881][T23612] block nbd9: shutting down sockets [ 1315.301506][ T30] audit: type=1326 audit(1764898560.853:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23613 comm="syz.9.5135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff345f8f749 code=0x0 [ 1315.354233][T23619] binder: 23618:23619 ioctl c0306201 200000000040 returned -11 [ 1315.393087][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5137'. [ 1315.403181][T23621] netlink: 'syz.9.5137': attribute type 1 has an invalid length. [ 1315.411563][T23621] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5137'. [ 1315.445436][T23154] Bluetooth: hci3: command 0x0419 tx timeout [ 1315.630650][T23638] netlink: 176 bytes leftover after parsing attributes in process `syz.9.5140'. [ 1315.649391][T23638] syz.9.5140 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1316.323915][T16643] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 1316.474511][T16643] usb 10-1: device descriptor read/64, error -71 [ 1316.622065][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5150'. [ 1316.646209][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5150'. [ 1316.661695][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5150'. [ 1316.725815][T16643] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 1316.759389][T23703] pim6reg: entered allmulticast mode [ 1316.800056][T23708] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1316.807694][T23708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1316.875980][T16643] usb 10-1: device descriptor read/64, error -71 [ 1316.879100][T23711] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5153'. [ 1317.002572][T16643] usb usb10-port1: attempt power cycle [ 1317.371639][T16643] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 1317.405199][T16643] usb 10-1: device descriptor read/8, error -71 [ 1317.663830][T16643] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 1317.691945][T16643] usb 10-1: device descriptor read/8, error -71 [ 1317.811051][T16643] usb usb10-port1: unable to enumerate USB device [ 1319.148287][T23764] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5162'. [ 1319.427548][T16643] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1319.560960][T23780] overlayfs: failed to clone upperpath [ 1319.571935][T23780] overlayfs: failed to clone upperpath [ 1319.598567][T16643] usb 10-1: Using ep0 maxpacket: 32 [ 1319.605255][T16643] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.622688][T16643] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.636063][T16643] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1319.650861][T16643] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1319.661305][T16643] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.672326][T16643] usb 10-1: config 0 descriptor?? [ 1319.758563][T19672] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1319.761296][ T4573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1320.091227][T16643] usbhid 10-1:0.0: can't add hid device: -71 [ 1320.098020][T16643] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1320.107049][T23805] md: array md2 already initialised! [ 1320.114918][T16643] usb 10-1: USB disconnect, device number 2 [ 1320.458626][T23809] fuse: Unknown parameter 'grou00000000000000000000' [ 1320.504994][T23811] __nla_validate_parse: 1 callbacks suppressed [ 1320.505007][T23811] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5178'. [ 1320.984489][T19631] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1321.114252][T19631] usb 10-1: device descriptor read/64, error -71 [ 1321.353970][T19631] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1321.483497][T19631] usb 10-1: device descriptor read/64, error -71 [ 1321.593821][T19631] usb usb10-port1: attempt power cycle [ 1321.932706][T19631] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1321.953094][T19631] usb 10-1: device descriptor read/8, error -71 [ 1321.979351][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1321.999942][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1322.009550][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1322.018872][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1322.028485][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1322.037729][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1322.047338][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1322.057893][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1322.067382][T23825] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1322.141882][T23829] syzkaller1: entered promiscuous mode [ 1322.149485][T23829] syzkaller1: entered allmulticast mode [ 1322.202310][T19631] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1322.223156][T19631] usb 10-1: device descriptor read/8, error -71 [ 1322.332476][T19631] usb usb10-port1: unable to enumerate USB device [ 1322.667912][T23833] fuse: Unknown parameter 'grou00000000000000000000' [ 1323.062882][T23846] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 1323.455646][T23863] fuse: Unknown parameter 'grou00000000000000000000' [ 1324.045254][T23869] netlink: 'syz.8.5198': attribute type 25 has an invalid length. [ 1324.053587][T23869] netlink: 'syz.8.5198': attribute type 25 has an invalid length. [ 1324.065850][T23869] netlink: 'syz.8.5198': attribute type 25 has an invalid length. [ 1324.077972][T23870] netlink: 'syz.8.5198': attribute type 25 has an invalid length. [ 1324.149692][T16643] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1324.313377][T16643] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1324.320259][T16643] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1324.330061][T16643] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.340958][T16643] usb 10-1: config 0 descriptor?? [ 1324.559405][T23867] program syz.9.5197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1324.774912][T16643] acrux 0003:1A34:0802.0053: item fetching failed at offset 1/5 [ 1324.790270][T16643] acrux 0003:1A34:0802.0053: parse failed [ 1324.796072][T16643] acrux 0003:1A34:0802.0053: probe with driver acrux failed with error -22 [ 1324.889838][T23887] fuse: Unknown parameter 'group_i00000000000000000000' [ 1324.979579][ T5833] usb 10-1: USB disconnect, device number 7 [ 1325.519760][ T1330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1325.524128][ T4573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1325.885558][ T5833] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1325.977406][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1325.995117][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1326.014807][T23921] __nla_validate_parse: 24 callbacks suppressed [ 1326.014826][T23921] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5213'. [ 1326.028468][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1326.063011][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1326.074201][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1326.076180][T19044] usb 9-1: USB disconnect, device number 10 [ 1326.097637][ T5833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1326.132628][ T5833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1326.157378][ T5833] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1326.167216][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.176190][ T5833] usb 10-1: Product: syz [ 1326.180558][ T5833] usb 10-1: Manufacturer: syz [ 1326.185361][ T5833] usb 10-1: SerialNumber: syz [ 1326.206046][ T5833] usb 10-1: config 0 descriptor?? [ 1326.231887][ T5833] usb 10-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress 0d [ 1326.287087][T23925] fuse: Unknown parameter 'group_i00000000000000000000' [ 1326.447123][T23918] ªªªªªª speed is unknown, defaulting to 1000 [ 1326.465928][T21709] can0 (unregistered): slcan off ttyS3. [ 1327.027435][T20017] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.137692][T20017] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.235880][T20017] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.389429][T20017] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.423889][ T25] block nbd0: Possible stuck request ffff888025b20000: control (read@0,1024B). Runtime 450 seconds [ 1327.434717][ T25] block nbd0: Possible stuck request ffff888025b20200: control (read@1024,1024B). Runtime 450 seconds [ 1327.445823][ T25] block nbd0: Possible stuck request ffff888025b20400: control (read@2048,1024B). Runtime 450 seconds [ 1327.456889][ T25] block nbd0: Possible stuck request ffff888025b20600: control (read@3072,1024B). Runtime 450 seconds [ 1327.533740][T23918] chnl_net:caif_netlink_parms(): no params data found [ 1327.789223][T23918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.798354][T23918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.806403][T23918] bridge_slave_0: entered allmulticast mode [ 1327.817548][T23918] bridge_slave_0: entered promiscuous mode [ 1327.847894][T23918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.859396][T23918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.868095][T23918] bridge_slave_1: entered allmulticast mode [ 1327.876985][T23918] bridge_slave_1: entered promiscuous mode [ 1327.886326][T20017] bridge_slave_1: left allmulticast mode [ 1327.896184][T20017] bridge_slave_1: left promiscuous mode [ 1327.904978][T20017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.916589][T20017] bridge_slave_0: left allmulticast mode [ 1327.922627][T20017] bridge_slave_0: left promiscuous mode [ 1327.929559][T20017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.223345][ T5149] Bluetooth: hci0: command tx timeout [ 1328.595100][T23987] use of bytesused == 0 is deprecated and will be removed in the future, [ 1328.607203][T23987] use the actual size instead. [ 1328.780916][T20017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.855652][T20017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.906894][ T5833] usb 10-1: USB disconnect, device number 8 [ 1328.915812][T20017] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1328.965114][T20017] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1328.980336][T17318] udevd[17318]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1329.036490][T20017] bond0 (unregistering): Released all slaves [ 1329.042357][T24005] tmpfs: Bad value for 'mpol' [ 1329.176736][T23918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.207220][T23918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.415518][T23918] team0: Port device team_slave_0 added [ 1329.424010][T24013] fuse: Unknown parameter 'group_i00000000000000000000' [ 1329.602252][T23918] team0: Port device team_slave_1 added [ 1329.614170][T24022] fuse: Unknown parameter 'group_id00000000000000000000' [ 1329.702835][T23918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.719073][T23918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.762269][T24025] md: array md2 already initialised! [ 1329.779566][T23918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.888428][T23918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.898075][T23918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.925332][T23918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.945907][T24033] pim6reg: entered allmulticast mode [ 1329.955104][T24034] pim6reg: left allmulticast mode [ 1330.128668][T20397] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1330.299120][ T5149] Bluetooth: hci0: command tx timeout [ 1330.307249][T20397] usb 10-1: config 0 has an invalid interface number: 249 but max is 0 [ 1330.328100][T20397] usb 10-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1330.337125][T23918] hsr_slave_0: entered promiscuous mode [ 1330.347921][T20397] usb 10-1: config 0 has no interface number 0 [ 1330.355046][T20397] usb 10-1: config 0 interface 249 altsetting 0 endpoint 0x6 has invalid maxpacket 24765, setting to 64 [ 1330.363529][T23918] hsr_slave_1: entered promiscuous mode [ 1330.372629][T20397] usb 10-1: config 0 interface 249 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1330.374758][T23918] debugfs: 'hsr0' already exists in 'hsr' [ 1330.392998][T23918] Cannot create hsr debugfs directory [ 1330.405857][T20017] hsr_slave_0: left promiscuous mode [ 1330.410558][T20397] usb 10-1: New USB device found, idVendor=12d1, idProduct=89d4, bcdDevice= 7.2f [ 1330.420813][T20017] hsr_slave_1: left promiscuous mode [ 1330.427307][T20017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.430055][T20397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.435904][T20017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.454575][T20017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.456343][T20397] usb 10-1: Product: syz [ 1330.467429][T20397] usb 10-1: Manufacturer: syz [ 1330.472208][T20017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.482536][T20397] usb 10-1: SerialNumber: syz [ 1330.497828][T20397] usb 10-1: config 0 descriptor?? [ 1330.503947][T24037] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1330.513575][T20017] veth1_macvtap: left promiscuous mode [ 1330.515800][T20397] option 10-1:0.249: GSM modem (1-port) converter detected [ 1330.527945][T20017] veth0_macvtap: left promiscuous mode [ 1330.543892][T20017] veth1_vlan: left promiscuous mode [ 1330.553850][T20017] veth0_vlan: left promiscuous mode [ 1330.703569][T20017] pim6reg (unregistering): left allmulticast mode [ 1331.337379][T20017] team0 (unregistering): Port device team_slave_1 removed [ 1331.363337][T24069] fuse: Unknown parameter 'group_id00000000000000000000' [ 1331.421927][T20017] team0 (unregistering): Port device team_slave_0 removed [ 1332.375328][ T5149] Bluetooth: hci0: command tx timeout [ 1332.646985][ T5833] usb 10-1: USB disconnect, device number 9 [ 1332.673552][T20017] IPVS: stop unused estimator thread 0... [ 1332.685327][ T5833] option 10-1:0.249: device disconnected [ 1333.345654][T23918] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1333.370063][T23918] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1333.397690][T23918] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1333.418341][T23918] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1333.525445][T24109] Bluetooth: MGMT ver 1.23 [ 1333.606200][T23918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.669203][T23918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.702456][T13397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.709785][T13397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.749410][T13397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.756771][T13397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.821225][T23918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1333.835350][T23918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1334.282900][ T5833] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1334.294079][T23918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.452658][T23154] Bluetooth: hci0: command tx timeout [ 1334.465555][ T5833] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1334.481415][ T5833] usb 10-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1334.489708][ T5833] usb 10-1: Product: syz [ 1334.494183][ T5833] usb 10-1: Manufacturer: syz [ 1334.498884][ T5833] usb 10-1: SerialNumber: syz [ 1334.506800][ T5833] usb 10-1: config 0 descriptor?? [ 1334.515360][ T5833] ch341 10-1:0.0: ch341-uart converter detected [ 1334.832383][T24148] fuse: Unknown parameter 'group_id00000000000000000000' [ 1335.035258][T23918] veth0_vlan: entered promiscuous mode [ 1335.090208][T23918] veth1_vlan: entered promiscuous mode [ 1335.243882][T23918] veth0_macvtap: entered promiscuous mode [ 1335.276908][T23918] veth1_macvtap: entered promiscuous mode [ 1335.305894][T23918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.329357][T23918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.371210][ T143] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.394504][ T143] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.431319][ T143] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.467947][ T143] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.527739][ T5833] ch341-uart ttyUSB0: failed to read break control: -71 [ 1335.552617][ T5833] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1335.604794][ T5833] usb 10-1: USB disconnect, device number 10 [ 1335.648530][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.650767][ T5833] ch341 10-1:0.0: device disconnected [ 1335.677739][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.734798][T19672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.746594][T19672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.071985][T24171] FAULT_INJECTION: forcing a failure. [ 1336.071985][T24171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.089738][T24171] CPU: 0 UID: 0 PID: 24171 Comm: syz.8.5247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.089768][T24171] Tainted: [L]=SOFTLOCKUP [ 1336.089775][T24171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1336.089786][T24171] Call Trace: [ 1336.089794][T24171] [ 1336.089802][T24171] dump_stack_lvl+0x189/0x250 [ 1336.089826][T24171] ? __pfx____ratelimit+0x10/0x10 [ 1336.089845][T24171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1336.089863][T24171] ? __pfx__printk+0x10/0x10 [ 1336.089887][T24171] ? __might_fault+0xb0/0x130 [ 1336.089918][T24171] should_fail_ex+0x414/0x560 [ 1336.089945][T24171] _copy_from_user+0x2d/0xb0 [ 1336.089964][T24171] ___sys_sendmsg+0x158/0x2a0 [ 1336.089989][T24171] ? __pfx____sys_sendmsg+0x10/0x10 [ 1336.090016][T24171] ? rcu_read_lock_any_held+0xb3/0x120 [ 1336.090059][T24171] ? __fget_files+0x2a/0x420 [ 1336.090076][T24171] ? __fget_files+0x3a0/0x420 [ 1336.090103][T24171] __x64_sys_sendmsg+0x19b/0x260 [ 1336.090126][T24171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1336.090156][T24171] ? __pfx_ksys_write+0x10/0x10 [ 1336.090181][T24171] ? do_syscall_64+0xbe/0xf80 [ 1336.090204][T24171] do_syscall_64+0xfa/0xf80 [ 1336.090223][T24171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.090239][T24171] ? clear_bhb_loop+0x60/0xb0 [ 1336.090260][T24171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.090276][T24171] RIP: 0033:0x7f4b18f8f749 [ 1336.090293][T24171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.090307][T24171] RSP: 002b:00007f4b19d7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1336.090325][T24171] RAX: ffffffffffffffda RBX: 00007f4b191e5fa0 RCX: 00007f4b18f8f749 [ 1336.090339][T24171] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1336.090350][T24171] RBP: 00007f4b19d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.090361][T24171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.090372][T24171] R13: 00007f4b191e6038 R14: 00007f4b191e5fa0 R15: 00007ffec5697258 [ 1336.090401][T24171] [ 1336.364834][ T5918] IPVS: starting estimator thread 0... [ 1336.469517][T24177] IPVS: using max 31 ests per chain, 74400 per kthread [ 1336.549957][T24183] fuse: Bad value for 'user_id' [ 1336.554984][T24183] fuse: Bad value for 'user_id' [ 1337.147544][T20397] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1337.254586][T24197] FAULT_INJECTION: forcing a failure. [ 1337.254586][T24197] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.269386][T24197] CPU: 1 UID: 0 PID: 24197 Comm: syz.9.5257 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.269415][T24197] Tainted: [L]=SOFTLOCKUP [ 1337.269421][T24197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1337.269432][T24197] Call Trace: [ 1337.269440][T24197] [ 1337.269448][T24197] dump_stack_lvl+0x189/0x250 [ 1337.269470][T24197] ? __pfx____ratelimit+0x10/0x10 [ 1337.269489][T24197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1337.269506][T24197] ? __pfx__printk+0x10/0x10 [ 1337.269531][T24197] ? __pfx___might_resched+0x10/0x10 [ 1337.269554][T24197] ? fs_reclaim_acquire+0x7d/0x100 [ 1337.269581][T24197] should_fail_ex+0x414/0x560 [ 1337.269607][T24197] should_failslab+0xa8/0x100 [ 1337.269626][T24197] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1337.269648][T24197] ? __alloc_skb+0x255/0x430 [ 1337.269666][T24197] ? napi_skb_cache_get+0x4a5/0x780 [ 1337.269682][T24197] ? napi_skb_cache_get+0x151/0x780 [ 1337.269704][T24197] __alloc_skb+0x255/0x430 [ 1337.269725][T24197] ? __pfx___alloc_skb+0x10/0x10 [ 1337.269745][T24197] ? netlink_autobind+0xdb/0x300 [ 1337.269766][T24197] ? netlink_autobind+0x2c2/0x300 [ 1337.269792][T24197] netlink_sendmsg+0x5c6/0xb30 [ 1337.269811][T24197] ? aa_sk_perm+0x15f/0x920 [ 1337.269840][T24197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.269863][T24197] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1337.269896][T24197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.269916][T24197] sock_sendmsg_nosec+0x18f/0x1d0 [ 1337.269942][T24197] ____sys_sendmsg+0x577/0x880 [ 1337.269971][T24197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1337.270000][T24197] ? import_iovec+0x74/0xa0 [ 1337.270022][T24197] ___sys_sendmsg+0x21f/0x2a0 [ 1337.270056][T24197] ? __pfx____sys_sendmsg+0x10/0x10 [ 1337.270083][T24197] ? rcu_read_lock_any_held+0xb3/0x120 [ 1337.270128][T24197] ? __fget_files+0x2a/0x420 [ 1337.270144][T24197] ? __fget_files+0x3a0/0x420 [ 1337.270172][T24197] __x64_sys_sendmsg+0x19b/0x260 [ 1337.270195][T24197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1337.270224][T24197] ? __pfx_ksys_write+0x10/0x10 [ 1337.270249][T24197] ? do_syscall_64+0xbe/0xf80 [ 1337.270272][T24197] do_syscall_64+0xfa/0xf80 [ 1337.270292][T24197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.270310][T24197] ? clear_bhb_loop+0x60/0xb0 [ 1337.270331][T24197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.270349][T24197] RIP: 0033:0x7ff345f8f749 [ 1337.270365][T24197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1337.270381][T24197] RSP: 002b:00007ff346eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1337.270401][T24197] RAX: ffffffffffffffda RBX: 00007ff3461e5fa0 RCX: 00007ff345f8f749 [ 1337.270415][T24197] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1337.270427][T24197] RBP: 00007ff346eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.270438][T24197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.270449][T24197] R13: 00007ff3461e6038 R14: 00007ff3461e5fa0 R15: 00007ffc7ce579c8 [ 1337.270480][T24197] [ 1337.580965][T20397] usb 9-1: device descriptor read/64, error -71 [ 1337.826472][T20397] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 1337.861841][T24206] fuse: Bad value for 'user_id' [ 1337.867164][T24206] fuse: Bad value for 'user_id' [ 1337.976251][T20397] usb 9-1: device descriptor read/64, error -71 [ 1338.086519][T20397] usb usb9-port1: attempt power cycle [ 1338.428032][T20397] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 1338.457767][T20397] usb 9-1: device descriptor read/8, error -71 [ 1338.538457][T24228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5268'. [ 1338.662440][T24235] fuse: Bad value for 'user_id' [ 1338.668232][T24235] fuse: Bad value for 'user_id' [ 1338.696653][T20397] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 1338.715916][T20397] usb 9-1: device descriptor read/8, error -71 [ 1338.826208][T20397] usb usb9-port1: unable to enumerate USB device [ 1339.024915][T20397] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1339.194535][T20397] usb 10-1: Using ep0 maxpacket: 8 [ 1339.201309][T20397] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1339.209751][T20397] usb 10-1: config 179 has no interface number 0 [ 1339.216220][T20397] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1339.228863][T20397] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1339.240912][T20397] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1339.253426][T20397] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1339.263740][T20397] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1339.279326][T20397] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1339.286587][T20397] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1339.295744][T20397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.321254][T20397] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input227 [ 1339.697973][ T5833] usb 10-1: USB disconnect, device number 11 [ 1340.283082][T20397] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1340.432733][T20397] usb 9-1: Using ep0 maxpacket: 32 [ 1340.439616][T20397] usb 9-1: config 0 has an invalid interface number: 183 but max is 0 [ 1340.449777][T20397] usb 9-1: config 0 has no interface number 0 [ 1340.457531][T20397] usb 9-1: config 0 interface 183 has no altsetting 0 [ 1340.466649][T20397] usb 9-1: New USB device found, idVendor=1ae7, idProduct=0381, bcdDevice=b1.5f [ 1340.476837][T20397] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.485032][T20397] usb 9-1: Product: syz [ 1340.489200][T20397] usb 9-1: Manufacturer: syz [ 1340.494150][T20397] usb 9-1: SerialNumber: syz [ 1340.500785][T20397] usb 9-1: config 0 descriptor?? [ 1340.711960][ T5833] usb 9-1: USB disconnect, device number 15 [ 1341.150811][T24250] FAULT_INJECTION: forcing a failure. [ 1341.150811][T24250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.168943][T24250] CPU: 1 UID: 0 PID: 24250 Comm: syz.6.5276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.168962][T24250] Tainted: [L]=SOFTLOCKUP [ 1341.168966][T24250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1341.168973][T24250] Call Trace: [ 1341.168979][T24250] [ 1341.168984][T24250] dump_stack_lvl+0x189/0x250 [ 1341.169004][T24250] ? __pfx____ratelimit+0x10/0x10 [ 1341.169015][T24250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1341.169025][T24250] ? __pfx__printk+0x10/0x10 [ 1341.169040][T24250] ? __might_fault+0xb0/0x130 [ 1341.169057][T24250] should_fail_ex+0x414/0x560 [ 1341.169072][T24250] _copy_from_iter+0x1cd/0x1630 [ 1341.169088][T24250] ? __build_skb_around+0x22d/0x3c0 [ 1341.169116][T24250] ? __pfx__copy_from_iter+0x10/0x10 [ 1341.169129][T24250] ? __alloc_skb+0x2f1/0x430 [ 1341.169140][T24250] ? __pfx___alloc_skb+0x10/0x10 [ 1341.169151][T24250] ? netlink_sendmsg+0x642/0xb30 [ 1341.169164][T24250] ? skb_put+0x11b/0x210 [ 1341.169176][T24250] netlink_sendmsg+0x6b2/0xb30 [ 1341.169187][T24250] ? aa_sk_perm+0x15f/0x920 [ 1341.169204][T24250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.169218][T24250] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1341.169237][T24250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.169249][T24250] sock_sendmsg_nosec+0x18f/0x1d0 [ 1341.169265][T24250] ____sys_sendmsg+0x577/0x880 [ 1341.169281][T24250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1341.169297][T24250] ? import_iovec+0x74/0xa0 [ 1341.169309][T24250] ___sys_sendmsg+0x21f/0x2a0 [ 1341.169322][T24250] ? __pfx____sys_sendmsg+0x10/0x10 [ 1341.169336][T24250] ? rcu_read_lock_any_held+0xb3/0x120 [ 1341.169361][T24250] ? __fget_files+0x2a/0x420 [ 1341.169370][T24250] ? __fget_files+0x3a0/0x420 [ 1341.169385][T24250] __x64_sys_sendmsg+0x19b/0x260 [ 1341.169398][T24250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1341.169414][T24250] ? __pfx_ksys_write+0x10/0x10 [ 1341.169429][T24250] ? do_syscall_64+0xbe/0xf80 [ 1341.169442][T24250] do_syscall_64+0xfa/0xf80 [ 1341.169454][T24250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.169464][T24250] ? clear_bhb_loop+0x60/0xb0 [ 1341.169476][T24250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.169485][T24250] RIP: 0033:0x7f0cb5b8f749 [ 1341.169495][T24250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.169504][T24250] RSP: 002b:00007f0cb6ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1341.169515][T24250] RAX: ffffffffffffffda RBX: 00007f0cb5de5fa0 RCX: 00007f0cb5b8f749 [ 1341.169523][T24250] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1341.169529][T24250] RBP: 00007f0cb6ada090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.169536][T24250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.169542][T24250] R13: 00007f0cb5de6038 R14: 00007f0cb5de5fa0 R15: 00007ffd14750388 [ 1341.169557][T24250] [ 1341.591141][T19631] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1341.750998][T19631] usb 10-1: Using ep0 maxpacket: 16 [ 1341.760556][T19631] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.768269][T24257] fuse: Bad value for 'fd' [ 1341.771561][T19631] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1341.788756][T19631] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1341.817134][T19631] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1341.827040][T19631] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.840808][T19631] usb 10-1: Product: syz [ 1341.840834][ T5833] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1341.845087][T19631] usb 10-1: Manufacturer: syz [ 1341.868595][T19631] usb 10-1: SerialNumber: syz [ 1342.004531][ T5833] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1342.014114][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.053520][ T5833] usb 9-1: config 0 descriptor?? [ 1342.092202][ T5833] cp210x 9-1:0.0: cp210x converter detected [ 1342.286825][T19631] cdc_ncm 10-1:1.0: skipping garbage [ 1342.292595][T19631] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1342.299608][T19631] cdc_ncm 10-1:1.0: bind() failure [ 1342.311680][T19631] usb 10-1: USB disconnect, device number 12 [ 1342.481448][ T5833] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1342.495604][ T5833] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1342.751912][T24254] syzkaller0: entered promiscuous mode [ 1342.758570][T24254] syzkaller0: entered allmulticast mode [ 1346.146183][T24286] FAULT_INJECTION: forcing a failure. [ 1346.146183][T24286] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.159312][T24286] CPU: 0 UID: 0 PID: 24286 Comm: syz.7.5286 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.159341][T24286] Tainted: [L]=SOFTLOCKUP [ 1346.159348][T24286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1346.159359][T24286] Call Trace: [ 1346.159367][T24286] [ 1346.159375][T24286] dump_stack_lvl+0x189/0x250 [ 1346.159399][T24286] ? __pfx____ratelimit+0x10/0x10 [ 1346.159419][T24286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1346.159436][T24286] ? __pfx__printk+0x10/0x10 [ 1346.159457][T24286] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 1346.159503][T24286] should_fail_ex+0x414/0x560 [ 1346.159530][T24286] should_failslab+0xa8/0x100 [ 1346.159550][T24286] kmem_cache_alloc_noprof+0x88/0x710 [ 1346.159571][T24286] ? __netlink_lookup+0xbd/0x8a0 [ 1346.159592][T24286] ? skb_clone+0x212/0x3a0 [ 1346.159618][T24286] skb_clone+0x212/0x3a0 [ 1346.159642][T24286] __netlink_deliver_tap+0x424/0x8b0 [ 1346.159676][T24286] ? netlink_deliver_tap+0x2e/0x1b0 [ 1346.159700][T24286] netlink_deliver_tap+0x19c/0x1b0 [ 1346.159722][T24286] netlink_unicast+0x7fa/0x9e0 [ 1346.159751][T24286] ? __pfx_netlink_unicast+0x10/0x10 [ 1346.159773][T24286] ? netlink_sendmsg+0x642/0xb30 [ 1346.159792][T24286] ? skb_put+0x11b/0x210 [ 1346.159814][T24286] netlink_sendmsg+0x805/0xb30 [ 1346.159834][T24286] ? aa_sk_perm+0x15f/0x920 [ 1346.159863][T24286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1346.159887][T24286] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1346.159919][T24286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1346.159940][T24286] sock_sendmsg_nosec+0x18f/0x1d0 [ 1346.159967][T24286] ____sys_sendmsg+0x577/0x880 [ 1346.159996][T24286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1346.160025][T24286] ? import_iovec+0x74/0xa0 [ 1346.160046][T24286] ___sys_sendmsg+0x21f/0x2a0 [ 1346.160069][T24286] ? __pfx____sys_sendmsg+0x10/0x10 [ 1346.160096][T24286] ? rcu_read_lock_any_held+0xb3/0x120 [ 1346.160141][T24286] ? __fget_files+0x2a/0x420 [ 1346.160158][T24286] ? __fget_files+0x3a0/0x420 [ 1346.160186][T24286] __x64_sys_sendmsg+0x19b/0x260 [ 1346.160210][T24286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1346.160239][T24286] ? __pfx_ksys_write+0x10/0x10 [ 1346.160265][T24286] ? do_syscall_64+0xbe/0xf80 [ 1346.160288][T24286] do_syscall_64+0xfa/0xf80 [ 1346.160308][T24286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.160325][T24286] ? clear_bhb_loop+0x60/0xb0 [ 1346.160346][T24286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.160364][T24286] RIP: 0033:0x7f6da818f749 [ 1346.160381][T24286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.160395][T24286] RSP: 002b:00007f6da9083038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1346.160414][T24286] RAX: ffffffffffffffda RBX: 00007f6da83e5fa0 RCX: 00007f6da818f749 [ 1346.160428][T24286] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1346.160439][T24286] RBP: 00007f6da9083090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.160451][T24286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.160462][T24286] R13: 00007f6da83e6038 R14: 00007f6da83e5fa0 R15: 00007ffe0b4052c8 [ 1346.160499][T24286] [ 1346.969014][T19044] usb 9-1: USB disconnect, device number 16 [ 1346.987295][T19044] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1347.016539][T19044] cp210x 9-1:0.0: device disconnected [ 1347.162463][T24291] fuse: Bad value for 'fd' [ 1347.636911][T24314] FAULT_INJECTION: forcing a failure. [ 1347.636911][T24314] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.649728][T24314] CPU: 0 UID: 0 PID: 24314 Comm: syz.8.5297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.649747][T24314] Tainted: [L]=SOFTLOCKUP [ 1347.649751][T24314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1347.649763][T24314] Call Trace: [ 1347.649769][T24314] [ 1347.649774][T24314] dump_stack_lvl+0x189/0x250 [ 1347.649789][T24314] ? __pfx____ratelimit+0x10/0x10 [ 1347.649801][T24314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1347.649811][T24314] ? __pfx__printk+0x10/0x10 [ 1347.649828][T24314] ? __pfx___might_resched+0x10/0x10 [ 1347.649842][T24314] ? fs_reclaim_acquire+0x7d/0x100 [ 1347.649859][T24314] should_fail_ex+0x414/0x560 [ 1347.649875][T24314] should_failslab+0xa8/0x100 [ 1347.649887][T24314] __kmalloc_noprof+0xdf/0x800 [ 1347.649900][T24314] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1347.649915][T24314] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1347.649929][T24314] genl_family_rcv_msg_doit+0xb8/0x300 [ 1347.649942][T24314] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1347.649957][T24314] ? apparmor_capable+0x137/0x1a0 [ 1347.649968][T24314] ? bpf_lsm_capable+0x9/0x20 [ 1347.649978][T24314] ? security_capable+0x7e/0x2e0 [ 1347.649994][T24314] genl_rcv_msg+0x60e/0x790 [ 1347.650007][T24314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.650016][T24314] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1347.650027][T24314] ? __pfx_nl80211_connect+0x10/0x10 [ 1347.650040][T24314] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1347.650059][T24314] netlink_rcv_skb+0x208/0x470 [ 1347.650073][T24314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.650083][T24314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1347.650104][T24314] ? down_read+0x274/0x2e0 [ 1347.650118][T24314] ? genl_rcv+0xd/0x40 [ 1347.650128][T24314] genl_rcv+0x28/0x40 [ 1347.650137][T24314] netlink_unicast+0x82f/0x9e0 [ 1347.650153][T24314] ? __pfx_netlink_unicast+0x10/0x10 [ 1347.650165][T24314] ? netlink_sendmsg+0x642/0xb30 [ 1347.650176][T24314] ? skb_put+0x11b/0x210 [ 1347.650190][T24314] netlink_sendmsg+0x805/0xb30 [ 1347.650202][T24314] ? aa_sk_perm+0x15f/0x920 [ 1347.650219][T24314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.650232][T24314] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1347.650252][T24314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.650264][T24314] sock_sendmsg_nosec+0x18f/0x1d0 [ 1347.650280][T24314] ____sys_sendmsg+0x577/0x880 [ 1347.650296][T24314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.650313][T24314] ? import_iovec+0x74/0xa0 [ 1347.650325][T24314] ___sys_sendmsg+0x21f/0x2a0 [ 1347.650338][T24314] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.650354][T24314] ? rcu_read_lock_any_held+0xb3/0x120 [ 1347.650397][T24314] ? __fget_files+0x2a/0x420 [ 1347.650407][T24314] ? __fget_files+0x3a0/0x420 [ 1347.650422][T24314] __x64_sys_sendmsg+0x19b/0x260 [ 1347.650436][T24314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1347.650453][T24314] ? __pfx_ksys_write+0x10/0x10 [ 1347.650468][T24314] ? do_syscall_64+0xbe/0xf80 [ 1347.650481][T24314] do_syscall_64+0xfa/0xf80 [ 1347.650492][T24314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.650502][T24314] ? clear_bhb_loop+0x60/0xb0 [ 1347.650513][T24314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.650522][T24314] RIP: 0033:0x7f4b18f8f749 [ 1347.650533][T24314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.650541][T24314] RSP: 002b:00007f4b19d7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.650552][T24314] RAX: ffffffffffffffda RBX: 00007f4b191e5fa0 RCX: 00007f4b18f8f749 [ 1347.650559][T24314] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1347.650566][T24314] RBP: 00007f4b19d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.650572][T24314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.650578][T24314] R13: 00007f4b191e6038 R14: 00007f4b191e5fa0 R15: 00007ffec5697258 [ 1347.650594][T24314] [ 1348.189728][T24323] overlay: ./file0 is not a directory [ 1348.240262][T24326] fuse: Bad value for 'fd' [ 1348.322726][T19631] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1348.492179][T19631] usb 9-1: Using ep0 maxpacket: 32 [ 1348.499102][T19631] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1348.507781][T19631] usb 9-1: config 0 has no interface number 0 [ 1348.520080][T19631] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1348.530459][T19631] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.538898][T19631] usb 9-1: Product: syz [ 1348.550106][T19631] usb 9-1: Manufacturer: syz [ 1348.563848][T19631] usb 9-1: SerialNumber: syz [ 1348.575265][T19631] usb 9-1: config 0 descriptor?? [ 1348.591914][T19631] smsc95xx v2.0.0 [ 1348.602142][T20397] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1348.751904][T20397] usb 10-1: Using ep0 maxpacket: 32 [ 1348.758809][T20397] usb 10-1: config 128 has an invalid interface number: 67 but max is 0 [ 1348.767372][T20397] usb 10-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1348.776484][T20397] usb 10-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1348.785928][T20397] usb 10-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1348.797240][T20397] usb 10-1: config 128 has no interface number 0 [ 1348.804093][T20397] usb 10-1: config 128 interface 67 altsetting 0 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 1348.816388][T20397] usb 10-1: config 128 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.827827][T20397] usb 10-1: config 128 interface 67 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1348.839069][T20397] usb 10-1: config 128 interface 67 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1348.850326][T20397] usb 10-1: config 128 interface 67 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1348.861580][T20397] usb 10-1: config 128 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.872803][T20397] usb 10-1: config 128 interface 67 altsetting 0 endpoint 0x1 has invalid maxpacket 25344, setting to 1024 [ 1348.884343][T20397] usb 10-1: config 128 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.896050][T20397] usb 10-1: config 128 interface 67 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1348.907309][T20397] usb 10-1: config 128 interface 67 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1348.918628][T20397] usb 10-1: config 128 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.930715][T20397] usb 10-1: config 128 interface 67 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1348.942331][T20397] usb 10-1: config 128 interface 67 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1348.956090][T20397] usb 10-1: New USB device found, idVendor=10b8, idProduct=1e80, bcdDevice=51.9c [ 1348.965339][T20397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.973504][T20397] usb 10-1: Product: syz [ 1348.977776][T20397] usb 10-1: Manufacturer: syz [ 1348.982518][T20397] usb 10-1: SerialNumber: syz [ 1348.993406][T24330] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1349.137677][T24342] FAULT_INJECTION: forcing a failure. [ 1349.137677][T24342] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.152483][T24342] CPU: 0 UID: 0 PID: 24342 Comm: syz.6.5307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.152513][T24342] Tainted: [L]=SOFTLOCKUP [ 1349.152519][T24342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1349.152530][T24342] Call Trace: [ 1349.152538][T24342] [ 1349.152546][T24342] dump_stack_lvl+0x189/0x250 [ 1349.152568][T24342] ? __pfx____ratelimit+0x10/0x10 [ 1349.152588][T24342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1349.152605][T24342] ? __pfx__printk+0x10/0x10 [ 1349.152631][T24342] ? __pfx___might_resched+0x10/0x10 [ 1349.152654][T24342] ? fs_reclaim_acquire+0x7d/0x100 [ 1349.152681][T24342] should_fail_ex+0x414/0x560 [ 1349.152708][T24342] should_failslab+0xa8/0x100 [ 1349.152727][T24342] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1349.152750][T24342] ? __alloc_skb+0x255/0x430 [ 1349.152767][T24342] ? napi_skb_cache_get+0x4a5/0x780 [ 1349.152784][T24342] ? napi_skb_cache_get+0x151/0x780 [ 1349.152806][T24342] __alloc_skb+0x255/0x430 [ 1349.152827][T24342] ? __pfx___alloc_skb+0x10/0x10 [ 1349.152851][T24342] ? netlink_ack_tlv_len+0x6c/0x210 [ 1349.152875][T24342] netlink_ack+0x146/0xa50 [ 1349.152894][T24342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1349.152917][T24342] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1349.152937][T24342] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1349.152969][T24342] netlink_rcv_skb+0x28c/0x470 [ 1349.152990][T24342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1349.153008][T24342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1349.153045][T24342] ? down_read+0x274/0x2e0 [ 1349.153061][T24342] ? genl_rcv+0xd/0x40 [ 1349.153078][T24342] genl_rcv+0x28/0x40 [ 1349.153093][T24342] netlink_unicast+0x82f/0x9e0 [ 1349.153121][T24342] ? __pfx_netlink_unicast+0x10/0x10 [ 1349.153141][T24342] ? netlink_sendmsg+0x642/0xb30 [ 1349.153158][T24342] ? skb_put+0x11b/0x210 [ 1349.153178][T24342] netlink_sendmsg+0x805/0xb30 [ 1349.153198][T24342] ? aa_sk_perm+0x15f/0x920 [ 1349.153226][T24342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1349.153249][T24342] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1349.153282][T24342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1349.153300][T24342] sock_sendmsg_nosec+0x18f/0x1d0 [ 1349.153324][T24342] ____sys_sendmsg+0x577/0x880 [ 1349.153354][T24342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1349.153381][T24342] ? import_iovec+0x74/0xa0 [ 1349.153402][T24342] ___sys_sendmsg+0x21f/0x2a0 [ 1349.153424][T24342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1349.153451][T24342] ? rcu_read_lock_any_held+0xb3/0x120 [ 1349.153492][T24342] ? __fget_files+0x2a/0x420 [ 1349.153508][T24342] ? __fget_files+0x3a0/0x420 [ 1349.153535][T24342] __x64_sys_sendmsg+0x19b/0x260 [ 1349.153555][T24342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1349.153580][T24342] ? __pfx_ksys_write+0x10/0x10 [ 1349.153602][T24342] ? do_syscall_64+0xbe/0xf80 [ 1349.153622][T24342] do_syscall_64+0xfa/0xf80 [ 1349.153641][T24342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.153658][T24342] ? clear_bhb_loop+0x60/0xb0 [ 1349.153679][T24342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.153695][T24342] RIP: 0033:0x7f0cb5b8f749 [ 1349.153712][T24342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.153727][T24342] RSP: 002b:00007f0cb6ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.153747][T24342] RAX: ffffffffffffffda RBX: 00007f0cb5de5fa0 RCX: 00007f0cb5b8f749 [ 1349.153760][T24342] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1349.153773][T24342] RBP: 00007f0cb6ada090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.153784][T24342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.153795][T24342] R13: 00007f0cb5de6038 R14: 00007f0cb5de5fa0 R15: 00007ffd14750388 [ 1349.153827][T24342] [ 1349.525011][T24316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.533799][T24316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.542106][T19631] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1349.570932][T19631] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1349.754038][T20397] dvb-usb: found a 'DiBcom STK7770P reference design' in warm state. [ 1349.765133][T20397] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1349.775956][T20397] dvbdev: DVB: registering new adapter (DiBcom STK7770P reference design) [ 1349.785667][T20397] usb 10-1: media controller created [ 1349.805661][T20397] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1349.817506][T19631] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1349.829924][T19631] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1349.853858][T19631] usb 9-1: USB disconnect, device number 17 [ 1349.878152][T20397] DVB: Unable to find symbol dib7000p_attach() [ 1349.886537][T20397] dvb-usb: no frontend was attached by 'DiBcom STK7770P reference design' [ 1349.950543][T20397] rc_core: IR keymap rc-dib0700-rc5 not found [ 1349.956859][T20397] Registered IR keymap rc-empty [ 1349.962118][T24330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.964615][T24330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.974713][T20397] dvb-usb: could not initialize remote control. [ 1349.988301][T20397] dvb-usb: DiBcom STK7770P reference design successfully initialized and connected. [ 1350.008388][T20397] usb 10-1: USB disconnect, device number 13 [ 1350.058140][T20397] dvb-usb: DiBcom STK7770P reference design successfully deinitialized and disconnected. [ 1350.580908][ T5910] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1350.739591][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 1350.746691][ T5910] usb 9-1: config 252 has an invalid interface number: 15 but max is 0 [ 1350.755131][ T5910] usb 9-1: config 252 has no interface number 0 [ 1350.761518][T16643] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1350.769295][ T5910] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1350.783277][ T5910] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1350.792582][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.800707][ T5910] usb 9-1: Product: syz [ 1350.804877][ T5910] usb 9-1: Manufacturer: syz [ 1350.809528][ T5910] usb 9-1: SerialNumber: syz [ 1350.824164][ T5910] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1350.909565][T16643] usb 10-1: device descriptor read/64, error -71 [ 1351.023399][T24305] usb 9-1: Failed to submit usb control message: -71 [ 1351.031353][T19631] usb 9-1: USB disconnect, device number 18 [ 1351.040049][T24305] usb 9-1: unable to send the bmi data to the device: -71 [ 1351.047193][T24305] usb 9-1: unable to get target info from device [ 1351.053914][T24305] usb 9-1: could not get target info (-71) [ 1351.060218][T24305] usb 9-1: could not probe fw (-71) [ 1351.159120][T16643] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1351.288909][T16643] usb 10-1: device descriptor read/64, error -71 [ 1351.335790][T24355] fuse: Bad value for 'fd' [ 1351.382052][T24357] comedi comedi0: comedi_bond: 3:0 attached, 8 channels from 1 devices [ 1351.399270][T16643] usb usb10-port1: attempt power cycle [ 1351.422710][T24362] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5313'. [ 1351.749541][T16643] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1351.779368][T16643] usb 10-1: device descriptor read/8, error -71 [ 1351.885344][T24380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1351.929907][T24385] fuse: Bad value for 'fd' [ 1352.018835][T16643] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1352.039112][T16643] usb 10-1: device descriptor read/8, error -71 [ 1352.065177][T24390] netlink: 'syz.8.5323': attribute type 4 has an invalid length. [ 1352.072998][T24390] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5323'. [ 1352.149393][T16643] usb usb10-port1: unable to enumerate USB device [ 1352.741897][T24397] FAULT_INJECTION: forcing a failure. [ 1352.741897][T24397] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.756469][T24397] CPU: 1 UID: 0 PID: 24397 Comm: syz.6.5326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1352.756496][T24397] Tainted: [L]=SOFTLOCKUP [ 1352.756502][T24397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1352.756513][T24397] Call Trace: [ 1352.756520][T24397] [ 1352.756528][T24397] dump_stack_lvl+0x189/0x250 [ 1352.756557][T24397] ? __pfx____ratelimit+0x10/0x10 [ 1352.756570][T24397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1352.756580][T24397] ? __pfx__printk+0x10/0x10 [ 1352.756592][T24397] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 1352.756615][T24397] should_fail_ex+0x414/0x560 [ 1352.756630][T24397] should_failslab+0xa8/0x100 [ 1352.756641][T24397] kmem_cache_alloc_noprof+0x88/0x710 [ 1352.756655][T24397] ? skb_clone+0x212/0x3a0 [ 1352.756670][T24397] skb_clone+0x212/0x3a0 [ 1352.756684][T24397] __netlink_deliver_tap+0x424/0x8b0 [ 1352.756704][T24397] ? netlink_deliver_tap+0x2e/0x1b0 [ 1352.756718][T24397] netlink_deliver_tap+0x19c/0x1b0 [ 1352.756731][T24397] netlink_sendskb+0x68/0x140 [ 1352.756743][T24397] netlink_unicast+0x397/0x9e0 [ 1352.756754][T24397] ? __asan_memcpy+0x40/0x70 [ 1352.756771][T24397] ? __pfx_netlink_unicast+0x10/0x10 [ 1352.756788][T24397] netlink_rcv_skb+0x28c/0x470 [ 1352.756808][T24397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1352.756819][T24397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1352.756841][T24397] ? down_read+0x274/0x2e0 [ 1352.756853][T24397] ? genl_rcv+0xd/0x40 [ 1352.756862][T24397] genl_rcv+0x28/0x40 [ 1352.756871][T24397] netlink_unicast+0x82f/0x9e0 [ 1352.756887][T24397] ? __pfx_netlink_unicast+0x10/0x10 [ 1352.756899][T24397] ? netlink_sendmsg+0x642/0xb30 [ 1352.756911][T24397] ? skb_put+0x11b/0x210 [ 1352.756924][T24397] netlink_sendmsg+0x805/0xb30 [ 1352.756935][T24397] ? aa_sk_perm+0x15f/0x920 [ 1352.756952][T24397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.756966][T24397] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1352.756986][T24397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.756998][T24397] sock_sendmsg_nosec+0x18f/0x1d0 [ 1352.757022][T24397] ____sys_sendmsg+0x577/0x880 [ 1352.757048][T24397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1352.757075][T24397] ? import_iovec+0x74/0xa0 [ 1352.757096][T24397] ___sys_sendmsg+0x21f/0x2a0 [ 1352.757119][T24397] ? __pfx____sys_sendmsg+0x10/0x10 [ 1352.757144][T24397] ? rcu_read_lock_any_held+0xb3/0x120 [ 1352.757186][T24397] ? __fget_files+0x2a/0x420 [ 1352.757202][T24397] ? __fget_files+0x3a0/0x420 [ 1352.757226][T24397] __x64_sys_sendmsg+0x19b/0x260 [ 1352.757249][T24397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1352.757278][T24397] ? __pfx_ksys_write+0x10/0x10 [ 1352.757302][T24397] ? do_syscall_64+0xbe/0xf80 [ 1352.757324][T24397] do_syscall_64+0xfa/0xf80 [ 1352.757341][T24397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.757357][T24397] ? clear_bhb_loop+0x60/0xb0 [ 1352.757377][T24397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.757392][T24397] RIP: 0033:0x7f0cb5b8f749 [ 1352.757407][T24397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.757420][T24397] RSP: 002b:00007f0cb6ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.757436][T24397] RAX: ffffffffffffffda RBX: 00007f0cb5de5fa0 RCX: 00007f0cb5b8f749 [ 1352.757448][T24397] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1352.757458][T24397] RBP: 00007f0cb6ada090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.757468][T24397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.757478][T24397] R13: 00007f0cb5de6038 R14: 00007f0cb5de5fa0 R15: 00007ffd14750388 [ 1352.757504][T24397] [ 1353.211556][T24402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.242621][T24402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.252721][T24402] [U]  [ 1353.255899][T24402] [U] K{‘ [ 1353.259309][T24402] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 1353.266265][T24402] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 1353.282922][T24402] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 1353.295132][T24402] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 1353.334766][T24402] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 1353.359824][T24402] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 1353.371061][T24402] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 1353.382684][T24402] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 1353.477234][T24402] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 1353.485959][T24402] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 1353.500821][T16643] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1353.508844][T24402] [U] 22½“Æ©Ðû©x?0;3u± [ 1353.513127][T24402] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 1353.567298][T24402] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 1353.578482][T24402] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 1353.578942][T24408] netlink: 'syz.9.5330': attribute type 29 has an invalid length. [ 1353.587475][T24402] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 1353.607290][T24402] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 1353.620521][T24402] [U] ¹ ec [ 1353.623656][T24402] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 1353.717349][T16643] usb 9-1: not running at top speed; connect to a high speed hub [ 1353.726669][T16643] usb 9-1: config 127 has an invalid interface number: 15 but max is 0 [ 1353.735135][T16643] usb 9-1: config 127 has an invalid interface number: 5 but max is 0 [ 1353.744561][T16643] usb 9-1: config 127 descriptor has 1 excess byte, ignoring [ 1353.752046][T16643] usb 9-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 1353.773585][T16643] usb 9-1: config 127 has no interface number 0 [ 1353.780090][T16643] usb 9-1: config 127 has no interface number 1 [ 1353.786720][T16643] usb 9-1: config 127 interface 15 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1353.802307][T16643] usb 9-1: too many endpoints for config 127 interface 5 altsetting 129: 62, using maximum allowed: 30 [ 1353.813769][T16643] usb 9-1: config 127 interface 5 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 62 [ 1353.827287][T16643] usb 9-1: config 127 interface 15 has no altsetting 0 [ 1353.834251][T16643] usb 9-1: config 127 interface 5 has no altsetting 0 [ 1353.842826][T16643] usb 9-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=12.c5 [ 1353.852360][T16643] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.853172][T24421] syzkaller0: entered promiscuous mode [ 1353.860489][T16643] usb 9-1: Product: syz [ 1353.860511][T16643] usb 9-1: Manufacturer: syz [ 1353.860524][T16643] usb 9-1: SerialNumber: syz [ 1353.885884][T24421] syzkaller0: entered allmulticast mode [ 1354.096274][T24404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.105021][T24404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.598339][T24424] FAULT_INJECTION: forcing a failure. [ 1354.598339][T24424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.618464][T24424] CPU: 1 UID: 0 PID: 24424 Comm: syz.7.5335 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.618494][T24424] Tainted: [L]=SOFTLOCKUP [ 1354.618501][T24424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1354.618512][T24424] Call Trace: [ 1354.618519][T24424] [ 1354.618528][T24424] dump_stack_lvl+0x189/0x250 [ 1354.618550][T24424] ? __pfx____ratelimit+0x10/0x10 [ 1354.618569][T24424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1354.618586][T24424] ? __pfx__printk+0x10/0x10 [ 1354.618622][T24424] should_fail_ex+0x414/0x560 [ 1354.618648][T24424] _copy_to_user+0x31/0xb0 [ 1354.618668][T24424] simple_read_from_buffer+0xe1/0x170 [ 1354.618691][T24424] proc_fail_nth_read+0x1b3/0x220 [ 1354.618717][T24424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1354.618741][T24424] ? rw_verify_area+0x2a6/0x4d0 [ 1354.618761][T24424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1354.618784][T24424] vfs_read+0x200/0xa30 [ 1354.618804][T24424] ? fdget_pos+0x247/0x320 [ 1354.618825][T24424] ? __pfx___mutex_lock+0x10/0x10 [ 1354.618843][T24424] ? __pfx_vfs_read+0x10/0x10 [ 1354.618866][T24424] ? __fget_files+0x2a/0x420 [ 1354.618887][T24424] ? __fget_files+0x3a0/0x420 [ 1354.618903][T24424] ? __fget_files+0x2a/0x420 [ 1354.618929][T24424] ksys_read+0x145/0x250 [ 1354.618951][T24424] ? __pfx_ksys_read+0x10/0x10 [ 1354.618976][T24424] ? do_syscall_64+0xbe/0xf80 [ 1354.618998][T24424] do_syscall_64+0xfa/0xf80 [ 1354.619018][T24424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.619035][T24424] ? clear_bhb_loop+0x60/0xb0 [ 1354.619055][T24424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.619071][T24424] RIP: 0033:0x7f6da818e15c [ 1354.619087][T24424] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1354.619102][T24424] RSP: 002b:00007f6da9083030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1354.619120][T24424] RAX: ffffffffffffffda RBX: 00007f6da83e5fa0 RCX: 00007f6da818e15c [ 1354.619133][T24424] RDX: 000000000000000f RSI: 00007f6da90830a0 RDI: 0000000000000004 [ 1354.619144][T24424] RBP: 00007f6da9083090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.619154][T24424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.619164][T24424] R13: 00007f6da83e6038 R14: 00007f6da83e5fa0 R15: 00007ffe0b4052c8 [ 1354.619189][T24424] [ 1354.899752][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5336'. [ 1355.004020][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5336'. [ 1355.022027][T24433] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1355.281288][T24451] overlayfs: conflicting options: nfs_export=on,index=off [ 1355.324379][ T5910] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1355.378556][T24453] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5344'. [ 1355.496300][ T5910] usb 10-1: Using ep0 maxpacket: 16 [ 1355.504851][ T5910] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1355.513328][ T5910] usb 10-1: config 0 has no interface number 0 [ 1355.519675][ T5910] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1355.540018][ T5910] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1355.558917][ T5910] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1355.569511][ T5910] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1355.579104][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.587346][ T5910] usb 10-1: Product: syz [ 1355.591957][ T5910] usb 10-1: Manufacturer: syz [ 1355.598974][ T5910] usb 10-1: SerialNumber: syz [ 1355.607062][ T5910] usb 10-1: config 0 descriptor?? [ 1355.613005][T24443] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1355.624162][T24443] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1355.804664][T24466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1355.815574][T24467] loop4: detected capacity change from 0 to 524287936 [ 1355.844659][T24443] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1355.853106][T24443] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1356.186899][T24474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.208311][T24401] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 1356.210430][T24474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.265842][ T5910] Error reading MAC address [ 1356.272380][T24443] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1356.281559][T24443] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1356.512339][ T5910] sr9700 10-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1356.548520][ T5910] usb 10-1: USB disconnect, device number 18 [ 1356.873853][T24485] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5350'. [ 1357.372121][ T5910] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1357.472072][ T25] block nbd0: Possible stuck request ffff888025b20000: control (read@0,1024B). Runtime 480 seconds [ 1357.483510][ T25] block nbd0: Possible stuck request ffff888025b20200: control (read@1024,1024B). Runtime 480 seconds [ 1357.494645][ T25] block nbd0: Possible stuck request ffff888025b20400: control (read@2048,1024B). Runtime 480 seconds [ 1357.505775][ T25] block nbd0: Possible stuck request ffff888025b20600: control (read@3072,1024B). Runtime 480 seconds [ 1357.542136][ T5910] usb 10-1: Using ep0 maxpacket: 16 [ 1357.550257][ T5910] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.561368][ T5910] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1357.574481][ T5910] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1357.586867][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.598085][ T5910] usb 10-1: Product: syz [ 1357.611711][ T5910] usb 10-1: Manufacturer: syz [ 1357.616487][ T5910] usb 10-1: SerialNumber: syz [ 1357.852890][T24488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.861985][T24488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.073453][ T5910] usb 10-1: cannot find UAC_HEADER [ 1358.126919][ T5910] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1358.143011][ T5910] usb 10-1: USB disconnect, device number 19 [ 1358.188442][T16184] udevd[16184]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.920622][T16643] safe_serial 9-1:127.15: safe_serial converter detected [ 1358.928601][T16643] safe_serial 9-1:127.15: probe with driver safe_serial failed with error -22 [ 1358.943429][T16643] hub 9-1:127.5: Invalid hub with more than one config or interface [ 1358.951980][T16643] hub 9-1:127.5: probe with driver hub failed with error -22 [ 1358.970594][ T5944] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1359.121092][ T5944] usb 10-1: device descriptor read/64, error -71 [ 1359.334026][T24502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.344660][T24502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.354821][T24502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.365279][T24502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.380074][ T5944] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1359.519802][ T5944] usb 10-1: device descriptor read/64, error -71 [ 1359.631518][ T5944] usb usb10-port1: attempt power cycle [ 1359.905972][T24504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.914831][T24504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.969402][ T5944] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1359.990503][ T5944] usb 10-1: device descriptor read/8, error -71 [ 1360.229109][ T5944] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1360.249432][ T5944] usb 10-1: device descriptor read/8, error -71 [ 1360.311587][T24506] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1360.359263][ T5944] usb usb10-port1: unable to enumerate USB device [ 1360.535980][T24508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.545581][T24508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.557689][T24508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.568030][T24508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.110558][T24517] netlink: 'syz.8.5364': attribute type 1 has an invalid length. [ 1361.118472][T24517] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5364'. [ 1361.127407][T24517] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5364'. [ 1361.137673][T24517] netlink: 658 bytes leftover after parsing attributes in process `syz.8.5364'. [ 1361.303093][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.772459][T24523] syzkaller1: entered promiscuous mode [ 1361.779066][T24523] syzkaller1: entered allmulticast mode [ 1361.833520][T24527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.842506][T24527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.108255][T19631] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1362.268904][T19631] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1362.278192][T19631] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.288123][T19631] usb 10-1: config 0 descriptor?? [ 1362.296584][T19631] cp210x 10-1:0.0: cp210x converter detected [ 1362.475529][T24533] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1362.484741][T24533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1362.496024][T19631] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1362.505066][T19631] cp210x 10-1:0.0: querying part number failed [ 1362.516935][T19631] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1363.427266][T24535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1363.436216][T24535] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1363.445516][T24535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1363.451613][T24535] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1363.459302][T24535] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1363.466581][T24535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1363.472645][T24535] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1363.481253][T24535] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1363.489926][T24538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.503761][T24538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.551107][ T5149] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1363.684726][T24553] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5375'. [ 1364.409113][T24576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.418764][T24576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.429932][T24576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.440425][T24576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.654879][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 1364.908822][T19631] usb 10-1: USB disconnect, device number 24 [ 1364.938008][T19631] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1364.950773][T19631] cp210x 10-1:0.0: device disconnected [ 1365.374126][T19631] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1365.453998][ T5149] Bluetooth: hci3: command 0x0419 tx timeout [ 1365.525476][T19631] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.536586][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 1365.543309][T19631] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1365.556374][T19631] usb 10-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1365.566279][T19631] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.577434][T19631] usb 10-1: config 0 descriptor?? [ 1365.586905][T19631] usbhid 10-1:0.0: can't add hid device: -22 [ 1365.592978][T19631] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 1365.788195][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.797193][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.808565][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.817629][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.027437][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.036171][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.046951][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.055909][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.110678][T24582] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.198387][T24582] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.283341][T24582] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.352776][T24582] bridge0: port 4(netdevsim0) entered disabled state [ 1366.380360][T24582] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode [ 1366.390267][T24582] netdevsim netdevsim9 netdevsim0 (unregistering): left promiscuous mode [ 1366.403315][T24582] bridge0: port 4(netdevsim0) entered disabled state [ 1366.425499][T24582] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.500809][ T4573] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.516173][ T4573] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.530773][ T4573] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.546018][ T4573] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.560209][ T5944] usb 10-1: USB disconnect, device number 25 [ 1366.732856][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 1367.472664][T20397] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1367.532519][ T5149] Bluetooth: hci3: command 0x0419 tx timeout [ 1367.612018][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 1367.622179][T20397] usb 10-1: Using ep0 maxpacket: 16 [ 1367.628932][T20397] usb 10-1: config index 0 descriptor too short (expected 69, got 36) [ 1367.637330][T20397] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.649632][T20397] usb 10-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1367.659093][T20397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.667249][T20397] usb 10-1: Product: syz [ 1367.671501][T20397] usb 10-1: Manufacturer: syz [ 1367.676480][T20397] usb 10-1: SerialNumber: syz [ 1367.683804][T20397] usb 10-1: config 0 descriptor?? [ 1367.691144][T20397] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1367.891340][T24596] fuse: Unknown parameter 'fdÖ' [ 1367.915135][T24596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.924628][T24596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.212941][T20397] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1368.220737][T20397] gspca_pac7302 10-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1368.235475][T20397] usb 10-1: USB disconnect, device number 26 [ 1368.310128][T24606] nbd: couldn't find device at index -37165402 [ 1368.556817][T24620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.567282][T24620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.131113][T20397] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1369.293653][T20397] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.305844][T20397] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1369.315634][T20397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.325764][T20397] usb 10-1: config 0 descriptor?? [ 1369.538130][T20397] steelseries 0003:1038:12B6.0054: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 1369.612086][ T5149] Bluetooth: hci3: command 0x0419 tx timeout [ 1369.690341][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 1369.934811][T24626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.944090][T24626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.955021][T19043] usb 10-1: USB disconnect, device number 27 [ 1370.327772][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5408'. [ 1370.338535][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5408'. [ 1370.355542][T24655] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5408'. [ 1371.378771][T20397] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1371.531147][ T979] kworker/0:3 (979) used greatest stack depth: 15832 bytes left [ 1371.541217][T20397] usb 10-1: Using ep0 maxpacket: 16 [ 1371.558649][T20397] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.588620][T20397] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.608383][T20397] usb 10-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1371.617550][T20397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.649606][T20397] usb 10-1: config 0 descriptor?? [ 1371.682449][T24680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.691838][T24680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.063741][T20397] topre 0003:0853:0148.0055: unknown main item tag 0x2 [ 1372.070823][T20397] topre 0003:0853:0148.0055: item fetching failed at offset 8/164 [ 1372.079553][T20397] topre 0003:0853:0148.0055: probe with driver topre failed with error -22 [ 1372.249694][T24682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.260044][T24682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.265368][T20397] usb 10-1: USB disconnect, device number 28 [ 1372.817779][T24684] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5418'. [ 1372.832584][T24686] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1372.841118][T24689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.853475][T24689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.867506][T24688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.881757][T24688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.942859][T24696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.953361][T24696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.962772][T24696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.973459][T24696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.158172][T20397] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1373.307245][T20397] usb 10-1: Using ep0 maxpacket: 8 [ 1373.315413][T20397] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1373.325282][T20397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.333540][T20397] usb 10-1: Product: syz [ 1373.337917][T20397] usb 10-1: Manufacturer: syz [ 1373.343095][T20397] usb 10-1: SerialNumber: syz [ 1373.351247][T20397] usb 10-1: config 0 descriptor?? [ 1373.533426][T24698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.551662][T24698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.560716][T20397] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1373.762644][T24704] [U] ©„ [ 1373.848560][T24706] [U] © [ 1374.163000][T24715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.172951][T24715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.173359][T24694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.189914][T24694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.007925][T20397] usb write operation failed. (-71) [ 1375.017155][T20397] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1375.027808][T20397] dvbdev: DVB: registering new adapter (Terratec H7) [ 1375.034628][T20397] usb 10-1: media controller created [ 1375.041019][T20397] usb read operation failed. (-71) [ 1375.052852][T20397] usb write operation failed. (-71) [ 1375.061696][T20397] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1375.073852][T20397] usb 10-1: USB disconnect, device number 29 [ 1375.701468][T24721] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5430'. [ 1375.710840][T24721] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5430'. [ 1375.781675][T24721] delete_channel: no stack [ 1375.787265][T24721] delete_channel: no stack [ 1376.184736][T20397] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1376.334743][T20397] usb 10-1: Using ep0 maxpacket: 32 [ 1376.341605][T20397] usb 10-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.352861][T20397] usb 10-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1376.366325][T20397] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1376.373041][T20397] usb 10-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1376.382280][T20397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.393238][T20397] usb 10-1: config 0 descriptor?? [ 1376.823159][T20397] usbhid 10-1:0.0: can't add hid device: -71 [ 1376.831187][T20397] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1376.844474][T20397] usb 10-1: USB disconnect, device number 30 [ 1376.917055][T24741] batadv_slave_0: entered promiscuous mode [ 1376.929185][T24740] batadv_slave_0: left promiscuous mode [ 1377.273985][T20397] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1377.425457][T20397] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.437279][T20397] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1377.446952][T20397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.456836][T20397] usb 10-1: config 0 descriptor?? [ 1377.666158][T20397] usbhid 10-1:0.0: can't add hid device: -71 [ 1377.673874][T20397] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1377.685483][T20397] usb 10-1: USB disconnect, device number 31 [ 1377.983309][T20397] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1378.133186][T20397] usb 10-1: Using ep0 maxpacket: 32 [ 1378.140434][T20397] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1378.147336][T20397] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1378.157131][T20397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.167426][T20397] usb 10-1: config 0 descriptor?? [ 1378.380940][T20397] waterforce 0003:1044:7A4D.0056: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.9-1/input0 [ 1378.447876][T20397] waterforce 0003:1044:7A4D.0056: fw version request failed with -38 [ 1378.779746][ T5910] usb 10-1: USB disconnect, device number 32 [ 1379.348619][ T5149] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1379.513513][T24759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.524333][T24759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.592067][T19631] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1379.752011][T19631] usb 10-1: Using ep0 maxpacket: 8 [ 1379.758710][T19631] usb 10-1: config index 0 descriptor too short (expected 94, got 36) [ 1379.768098][T19631] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 1379.777994][T19631] usb 10-1: config 2 has an invalid descriptor of length 166, skipping remainder of the config [ 1379.789123][T19631] usb 10-1: config 2 has no interface number 0 [ 1379.796020][T19631] usb 10-1: too many endpoints for config 2 interface 31 altsetting 140: 192, using maximum allowed: 30 [ 1379.807520][T19631] usb 10-1: config 2 interface 31 altsetting 140 has 0 endpoint descriptors, different from the interface descriptor's value: 192 [ 1379.821622][T19631] usb 10-1: config 2 interface 31 has no altsetting 0 [ 1379.828469][T19631] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 8.3f [ 1379.837665][T19631] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.055438][T19631] usb 10-1: string descriptor 0 read error: -71 [ 1380.066684][T19631] ch9200 10-1:2.31: probe with driver ch9200 failed with error -22 [ 1380.085337][T19631] usb 10-1: USB disconnect, device number 33 [ 1380.651362][T24769] IPv6: NLM_F_CREATE should be specified when creating new route [ 1380.891121][ T5918] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1381.054429][ T5918] usb 10-1: Using ep0 maxpacket: 16 [ 1381.076563][ T5918] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1381.090572][ T5918] usb 10-1: config 13 has an invalid interface number: 50 but max is 0 [ 1381.101970][ T5918] usb 10-1: config 13 has no interface number 0 [ 1381.112268][ T5918] usb 10-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1381.124576][ T5918] usb 10-1: config 13 interface 50 has no altsetting 0 [ 1381.134906][ T5918] usb 10-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1381.145421][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.153851][ T5918] usb 10-1: Product: syz [ 1381.158121][ T5918] usb 10-1: Manufacturer: syz [ 1381.165138][ T5918] usb 10-1: SerialNumber: syz [ 1381.174454][T24769] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1381.254114][T24777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.265488][T24777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.324123][T24781] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1381.335821][T24781] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1381.344879][T24781] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1381.393334][ T5918] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1381.400530][ T5918] usb 10-1: MIDIStreaming interface descriptor not found [ 1381.428153][ T5918] usb 10-1: USB disconnect, device number 34 [ 1381.467609][T21901] udevd[21901]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1382.013488][T24789] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5453'. [ 1382.038977][T24789] dummy0 (unregistering): left allmulticast mode [ 1382.045880][T24789] bridge0: port 3(dummy0) entered disabled state [ 1382.127152][T24792] Invalid/unusable pipe [ 1382.501767][T24807] syz_tun: entered allmulticast mode [ 1382.577176][T24809] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5459'. [ 1382.766456][T24811] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5460'. [ 1382.829685][T19631] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1382.979633][T19631] usb 10-1: Using ep0 maxpacket: 16 [ 1382.992023][T19631] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1383.002678][T19631] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.011189][T19631] usb 10-1: Product: syz [ 1383.016059][T19631] usb 10-1: Manufacturer: syz [ 1383.021175][T19631] usb 10-1: SerialNumber: syz [ 1383.045891][T19631] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1383.056339][T19631] r8152-cfgselector 10-1: config 0 descriptor?? [ 1383.066048][T19631] hub 10-1:0.0: bad descriptor, ignoring hub [ 1383.072988][T19631] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1383.208051][T24815] netlink: 228 bytes leftover after parsing attributes in process `syz.8.5462'. [ 1383.390000][T24823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.409578][T24823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.424315][T24823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.435110][T24823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.679429][ T5910] r8152-cfgselector 10-1: USB disconnect, device number 35 [ 1383.685679][T24839] QAT: failed to copy from user cfg_data. [ 1383.964813][T24852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.978365][T24852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.668089][T24877] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.693819][T24880] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1384.764261][T24877] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.843958][T24877] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.930490][T24877] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.003147][ T75] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.024325][T13397] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.040306][T13397] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.056227][T13397] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.518158][T19043] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1385.669109][T19043] usb 10-1: config 0 has an invalid interface number: 123 but max is 0 [ 1385.677418][T19043] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.700474][T19043] usb 10-1: config 0 has no interface number 0 [ 1385.729788][T19043] usb 10-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 1385.742752][T19043] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.753744][T19043] usb 10-1: Product: syz [ 1385.758606][T19043] usb 10-1: Manufacturer: syz [ 1385.764088][T19043] usb 10-1: SerialNumber: syz [ 1385.778249][T19043] usb 10-1: config 0 descriptor?? [ 1385.789667][T19043] cdc_acm 10-1:0.123: skipping garbage [ 1386.011664][T19043] usb 10-1: USB disconnect, device number 36 [ 1386.075007][T24904] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5481'. [ 1386.094483][T24904] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5481'. [ 1386.259489][T24923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.285164][T24923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.368789][T24923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.378211][T24923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.395141][T24929] kAFS: unable to lookup cell '/yz1' [ 1386.492403][T24932] fuse: Bad value for 'fd' [ 1386.708134][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5495'. [ 1386.739899][T24953] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5495'. [ 1386.767327][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5495'. [ 1387.087654][ T5910] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1387.110454][T24973] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5500'. [ 1387.251099][ T5910] usb 10-1: config 151 has an invalid interface number: 131 but max is 0 [ 1387.265804][ T5910] usb 10-1: config 151 has no interface number 0 [ 1387.276352][ T5910] usb 10-1: config 151 interface 131 has no altsetting 0 [ 1387.288193][ T5910] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=4b.2c [ 1387.300446][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.317200][ T5910] usb 10-1: Product: syz [ 1387.321855][ T5910] usb 10-1: Manufacturer: syz [ 1387.327025][ T5910] usb 10-1: SerialNumber: syz [ 1387.413255][T24991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5503'. [ 1387.425903][T24991] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5503'. [ 1387.441005][T24991] !@ÿÒ: renamed from xfrm0 (while UP) [ 1387.455234][T24991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.466180][T24991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.481524][T24991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.493476][T24991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.526928][ T25] block nbd0: Possible stuck request ffff888025b20000: control (read@0,1024B). Runtime 510 seconds [ 1387.538954][ T25] block nbd0: Possible stuck request ffff888025b20200: control (read@1024,1024B). Runtime 510 seconds [ 1387.552796][ T25] block nbd0: Possible stuck request ffff888025b20400: control (read@2048,1024B). Runtime 510 seconds [ 1387.564666][ T25] block nbd0: Possible stuck request ffff888025b20600: control (read@3072,1024B). Runtime 510 seconds [ 1387.670134][T25003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.693924][T25003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.120252][T25015] tipc: Started in network mode [ 1388.125225][T25015] tipc: Node identity c2e638c3e80c, cluster identity 4711 [ 1388.132985][T25015] tipc: Enabled bearer , priority 0 [ 1388.216996][T25015] syzkaller0: entered promiscuous mode [ 1388.222501][T25015] syzkaller0: entered allmulticast mode [ 1388.231556][T25015] tipc: Resetting bearer [ 1388.246927][T25014] tipc: Resetting bearer [ 1389.799359][ T5910] usb 10-1: unknown interface protocol 0xc1, assuming v1 [ 1389.810350][ T5910] usb 10-1: cannot find UAC_HEADER [ 1389.887089][ T5910] snd-usb-audio 10-1:151.131: probe with driver snd-usb-audio failed with error -22 [ 1389.904096][ T5910] usb 10-1: USB disconnect, device number 37 [ 1389.933543][T16185] udevd[16185]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:151.131/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.245509][ T5910] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1390.414558][ T5910] usb 10-1: Using ep0 maxpacket: 16 [ 1390.421824][ T5910] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.435455][ T5910] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1390.442318][ T5910] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1390.454182][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.473919][ T5910] usb 10-1: config 0 descriptor?? [ 1390.926282][T25018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.935393][T25018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.024306][ T5910] nzxt-smart2 0003:1E71:2009.0057: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 1391.392675][T25014] tipc: Disabling bearer [ 1391.399943][ T5918] usb 10-1: USB disconnect, device number 38 [ 1391.413551][T16643] tipc: Node number set to 719993027 [ 1391.775630][T25042] Scaler: ================= START STATUS ================= [ 1391.783133][T25042] Scaler: ================== END STATUS ================== [ 1391.792306][T25042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.801507][T25042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.136501][T25052] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5516'. [ 1392.283482][T19044] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1392.443303][T19044] usb 10-1: Using ep0 maxpacket: 8 [ 1392.458226][T19044] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1392.468828][T19044] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.480128][T19044] usb 10-1: Product: syz [ 1392.484588][T19044] usb 10-1: Manufacturer: syz [ 1392.489519][T19044] usb 10-1: SerialNumber: syz [ 1392.498604][T19044] usb 10-1: config 0 descriptor?? [ 1392.508973][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.518848][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.716541][T19044] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1392.924502][T25050] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5515'. [ 1392.936498][T19044] usb write operation failed. (-71) [ 1392.945351][T19044] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1392.956610][T19044] dvbdev: DVB: registering new adapter (Terratec H7) [ 1392.964141][T19044] usb 10-1: media controller created [ 1392.969699][T19044] usb read operation failed. (-71) [ 1392.975323][T19044] usb write operation failed. (-71) [ 1392.982833][T19044] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1392.997714][T19044] usb 10-1: USB disconnect, device number 39 [ 1393.156568][T25067] fuse: Unknown parameter 'vçÌ×ìñ?Éc [ 1393.156568][T25067] KÐR°`“`ÕC4¹ö:¨0ç®Ó®ÅßÚÐÐÐðŒî [ 1393.156568][T25067] ' [ 1393.712675][ T5910] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1393.862526][ T5910] usb 10-1: Using ep0 maxpacket: 32 [ 1393.869121][ T5910] usb 10-1: config 128 has an invalid interface number: 67 but max is 0 [ 1393.877628][ T5910] usb 10-1: config 128 has no interface number 0 [ 1393.885948][ T5910] usb 10-1: New USB device found, idVendor=10b8, idProduct=1e80, bcdDevice=51.9c [ 1393.895437][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.903576][ T5910] usb 10-1: Product: syz [ 1393.909060][ T5910] usb 10-1: Manufacturer: syz [ 1393.914609][ T5910] usb 10-1: SerialNumber: syz [ 1393.981214][T25071] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5523'. [ 1393.990782][T25071] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5523'. [ 1394.139704][T25080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.149269][T25080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.330745][ T5910] dvb-usb: found a 'DiBcom STK7770P reference design' in warm state. [ 1394.341200][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1394.351330][ T5910] dvbdev: DVB: registering new adapter (DiBcom STK7770P reference design) [ 1394.359986][ T5910] usb 10-1: media controller created [ 1394.372562][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1394.409977][ T5910] DVB: Unable to find symbol dib7000p_attach() [ 1394.416224][ T5910] dvb-usb: no frontend was attached by 'DiBcom STK7770P reference design' [ 1394.472362][ T5910] rc_core: IR keymap rc-dib0700-rc5 not found [ 1394.478478][ T5910] Registered IR keymap rc-empty [ 1394.485481][ T5910] dvb-usb: could not initialize remote control. [ 1394.491725][ T5910] dvb-usb: DiBcom STK7770P reference design successfully initialized and connected. [ 1394.532246][T25069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.542835][T25069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.559243][ T5910] usb 10-1: USB disconnect, device number 40 [ 1394.600012][ T5910] dvb-usb: DiBcom STK7770P reference design successfully deinitialized and disconnected. [ 1394.688495][T25086] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1394.701362][T25088] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1394.837616][T25093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.837972][T25094] loop6: detected capacity change from 0 to 2640 [ 1394.853289][T25093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.854916][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.873225][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.881098][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.889449][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.899151][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.907805][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.917896][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1394.918744][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.927702][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1394.937000][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.952325][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1394.960998][T25094] ldm_validate_partition_table(): Disk read failed. [ 1394.963051][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1394.969995][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.979628][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1394.989249][T25094] Buffer I/O error on dev loop6, logical block 0, async page read [ 1394.997146][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1395.005509][T25094] Dev loop6: unable to read RDB block 0 [ 1395.014772][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1395.020712][T25094] loop6: unable to read partition table [ 1395.030088][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1395.047288][T25094] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1395.214969][T25101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.224318][T25101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.431683][T19631] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1395.581420][T19631] usb 10-1: Using ep0 maxpacket: 16 [ 1395.588107][T19631] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1395.597266][T19631] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.607601][T19631] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1395.618282][T19631] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1395.627732][T19631] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.635962][T19631] usb 10-1: Product: syz [ 1395.640257][T19631] usb 10-1: Manufacturer: syz [ 1395.645089][T19631] usb 10-1: SerialNumber: syz [ 1396.058122][T19631] usb 10-1: 0:2 : does not exist [ 1396.135577][T25117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.144421][T25117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.155176][T25117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.166994][T25117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.713823][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.723259][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.759100][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.765586][T25121] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.769913][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.826540][T25121] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.888657][T25121] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.966342][T25121] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.052945][T13391] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.073965][T13391] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.092747][T13391] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.108121][T13391] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.482463][T19631] usb 10-1: USB disconnect, device number 41 [ 1397.507994][T16185] udevd[16185]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1397.675821][T25129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.687855][T25129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.710661][T25129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.722752][T25129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.261157][ T5149] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1398.370608][ T5910] usb 10-1: new low-speed USB device number 42 using dummy_hcd [ 1398.387372][T25149] binder: 25148:25149 ioctl c018620c 200000000280 returned -1 [ 1398.389045][T25157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.405632][T25157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.520906][ T5910] usb 10-1: Invalid ep0 maxpacket: 16 [ 1398.650161][ T5910] usb 10-1: new low-speed USB device number 43 using dummy_hcd [ 1398.809972][ T5910] usb 10-1: Invalid ep0 maxpacket: 16 [ 1398.816072][ T5910] usb usb10-port1: attempt power cycle [ 1399.179436][ T5910] usb 10-1: new low-speed USB device number 44 using dummy_hcd [ 1399.199988][ T5910] usb 10-1: Invalid ep0 maxpacket: 16 [ 1399.316758][T25173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.326658][T25173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.335865][ T5910] usb 10-1: new low-speed USB device number 45 using dummy_hcd [ 1399.344899][T25173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.353983][T25173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.362841][ T5910] usb 10-1: Invalid ep0 maxpacket: 16 [ 1399.368525][ T5910] usb usb10-port1: unable to enumerate USB device [ 1400.054238][T25184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.063695][T25184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.245492][T25189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.256021][T25189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.267284][T25189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.276289][T25189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.055163][T25195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.065430][T25195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.558099][ T5918] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1401.728274][ T5918] usb 10-1: Using ep0 maxpacket: 32 [ 1401.736859][ T5918] usb 10-1: config 128 has an invalid interface number: 67 but max is 0 [ 1401.739685][T25208] pim6reg1: entered promiscuous mode [ 1401.751894][ T5918] usb 10-1: config 128 has no interface number 0 [ 1401.756284][T25208] pim6reg1: entered allmulticast mode [ 1401.773594][ T5918] usb 10-1: New USB device found, idVendor=10b8, idProduct=1e80, bcdDevice=51.9c [ 1401.793404][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.818057][ T5918] usb 10-1: Product: syz [ 1401.822345][ T5918] usb 10-1: Manufacturer: syz [ 1401.827009][ T5918] usb 10-1: SerialNumber: syz [ 1401.909684][T25210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.922684][T25210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.165557][T25213] mkiss: ax0: crc mode is auto. [ 1402.244821][T25197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.253389][ T5918] dvb-usb: found a 'DiBcom STK7770P reference design' in cold state, will try to load a firmware [ 1402.268242][T25197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.283374][ T5918] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1402.301299][ T5918] dib0700: firmware download failed at 7 with -22 [ 1402.319091][ T5918] usb 10-1: USB disconnect, device number 46 [ 1402.387217][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5572'. [ 1403.077351][ T5918] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1403.227295][ T5918] usb 10-1: Using ep0 maxpacket: 8 [ 1403.234380][ T5918] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.246229][ T5918] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.256713][ T5918] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1403.263663][ T5918] usb 10-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1403.273321][ T5918] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.284358][ T5918] usb 10-1: config 0 descriptor?? [ 1403.699388][ T5918] hid-alps 0003:044E:121E.0058: item fetching failed at offset 2/5 [ 1403.708320][ T5918] hid-alps 0003:044E:121E.0058: parse failed [ 1403.714380][ T5918] hid-alps 0003:044E:121E.0058: probe with driver hid-alps failed with error -22 [ 1403.902295][T19044] usb 10-1: USB disconnect, device number 47 [ 1404.010545][ T30] audit: type=1326 audit(1764898649.662:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25244 comm="syz.7.5581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6da818f749 code=0x0 [ 1404.205490][T25249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.215048][T25249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.440587][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5583'. [ 1404.479264][T25253] tmpfs: Bad value for 'mpol' [ 1404.769110][T25266] loop3: detected capacity change from 0 to 7 [ 1404.786029][T25266] Dev loop3: unable to read RDB block 7 [ 1404.798387][T25266] loop3: unable to read partition table [ 1404.804410][T25266] loop3: partition table beyond EOD, truncated [ 1404.812686][T25266] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1404.853282][T25265] autofs: Unknown parameter '' [ 1404.978405][T25273] mkiss: ax0: crc mode is auto. [ 1405.889597][T25284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.899778][T25284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.150746][T25295] netlink: 6068 bytes leftover after parsing attributes in process `syz.6.5598'. [ 1406.363364][ T5149] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1407.557799][T25330] netlink: 'syz.8.5611': attribute type 2 has an invalid length. [ 1407.572951][T25330] netlink: 'syz.8.5611': attribute type 11 has an invalid length. [ 1407.581755][T25330] netlink: 112 bytes leftover after parsing attributes in process `syz.8.5611'. [ 1407.599498][T25330] syzkaller1: entered promiscuous mode [ 1407.605360][T25330] syzkaller1: entered allmulticast mode [ 1408.165404][T19631] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 1408.274252][T25344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.285796][T25344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.302075][T25344] sp0: Synchronizing with TNC [ 1408.319064][T19631] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1408.327801][T25343] [U] è [ 1408.330888][T19631] usb 10-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1408.348988][T19631] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.362848][T19631] usb 10-1: config 0 descriptor?? [ 1408.369888][T25339] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1408.784227][T19631] kye 0003:0458:501A.0059: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1408.796497][T19631] kye 0003:0458:501A.0059: unknown main item tag 0x0 [ 1408.803265][T19631] kye 0003:0458:501A.0059: unknown main item tag 0x0 [ 1408.812187][T19631] kye 0003:0458:501A.0059: unknown main item tag 0x0 [ 1408.819070][T19631] kye 0003:0458:501A.0059: unknown main item tag 0x0 [ 1408.825975][T19631] kye 0003:0458:501A.0059: unknown main item tag 0x0 [ 1408.834839][T19631] kye 0003:0458:501A.0059: hidraw0: USB HID v1.00 Device [HID 0458:501a] on usb-dummy_hcd.9-1/input0 [ 1408.845978][T19631] kye 0003:0458:501A.0059: tablet-enabling feature report not found [ 1408.856349][T19631] kye 0003:0458:501A.0059: tablet enabling failed [ 1408.987123][T19631] usb 10-1: USB disconnect, device number 48 [ 1409.121819][T25356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1409.514450][T25365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.523212][T25365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.591339][T25367] netlink: 332 bytes leftover after parsing attributes in process `syz.9.5624'. [ 1410.062388][T25372] random: crng reseeded on system resumption [ 1410.165953][T25379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.175172][T25379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.263391][T25386] ªªªªªª speed is unknown, defaulting to 1000 [ 1410.803666][ T5944] usb 10-1: new low-speed USB device number 49 using dummy_hcd [ 1410.881799][T25403] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5635'. [ 1410.894543][T25404] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5635'. [ 1410.986355][ T5944] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.007538][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1411.044329][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1411.075810][ T5944] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1411.093346][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.149009][ T5944] usb 10-1: config 0 descriptor?? [ 1411.844771][ T5944] usb 10-1: USB disconnect, device number 49 [ 1411.921324][T25420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1412.112603][T25434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.122616][T25434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.165991][T25438] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5643'. [ 1412.457976][T25444] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5646'. [ 1412.470104][T25444] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5646'. [ 1412.483044][T25445] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5646'. [ 1412.492193][T25445] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5646'. [ 1413.113922][T25459] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5651'. [ 1413.686199][T25470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.706524][T25470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.825093][T25475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.852539][T25475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.244423][ T5918] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1414.401974][ T5918] usb 10-1: Using ep0 maxpacket: 16 [ 1414.409956][ T5918] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.420376][ T5918] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1414.432185][ T5918] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1414.441348][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.451337][ T5918] usb 10-1: Product: syz [ 1414.455650][ T5918] usb 10-1: Manufacturer: syz [ 1414.460338][ T5918] usb 10-1: SerialNumber: syz [ 1415.184024][ T5918] usb 10-1: 0:2 : does not exist [ 1415.189082][ T5918] usb 10-1: unit 9 not found! [ 1415.200853][ T5918] usb 10-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1415.216041][ T5918] usb 10-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1415.233735][ T5918] usb 10-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1415.250327][ T5918] usb 10-1: USB disconnect, device number 50 [ 1415.274037][T16185] udevd[16185]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.561511][ T5918] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1415.721319][ T5918] usb 10-1: Using ep0 maxpacket: 8 [ 1415.728024][ T5918] usb 10-1: config index 0 descriptor too short (expected 24063, got 36) [ 1415.737061][ T5918] usb 10-1: config 180 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.747803][ T5918] usb 10-1: config 180 has 0 interfaces, different from the descriptor's value: 9 [ 1415.758853][ T5918] usb 10-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 1415.768166][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.776473][ T5918] usb 10-1: Product: syz [ 1415.780731][ T5918] usb 10-1: Manufacturer: syz [ 1415.785586][ T5918] usb 10-1: SerialNumber: syz [ 1415.829132][T25483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1415.980712][T25488] fuse: Bad value for 'fd' [ 1416.006735][ T5918] usb 10-1: USB disconnect, device number 51 [ 1416.742955][T25500] nfs4: Unknown parameter '' [ 1416.771006][ T5918] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1416.834096][T25504] veth1_macvtap: entered allmulticast mode [ 1416.894676][T25504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.903262][ T5918] usb 10-1: device descriptor read/64, error -71 [ 1416.909991][T25504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.142139][ T5918] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1417.290718][ T5918] usb 10-1: device descriptor read/64, error -71 [ 1417.404293][ T5918] usb usb10-port1: attempt power cycle [ 1417.573613][T25514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.585366][ T25] block nbd0: Possible stuck request ffff888025b20000: control (read@0,1024B). Runtime 540 seconds [ 1417.596213][ T25] block nbd0: Possible stuck request ffff888025b20200: control (read@1024,1024B). Runtime 540 seconds [ 1417.602271][T25514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.607831][ T25] block nbd0: Possible stuck request ffff888025b20400: control (read@2048,1024B). Runtime 540 seconds [ 1417.628157][ T25] block nbd0: Possible stuck request ffff888025b20600: control (read@3072,1024B). Runtime 540 seconds [ 1417.635080][T25514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.656690][T25514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.665966][ T75] bridge_slave_1: left allmulticast mode [ 1417.673578][ T75] bridge_slave_1: left promiscuous mode [ 1417.679362][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.688914][ T75] bridge_slave_0: left allmulticast mode [ 1417.694651][ T75] bridge_slave_0: left promiscuous mode [ 1417.700498][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.740623][ T5918] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1417.763908][ T5918] usb 10-1: device descriptor read/8, error -71 [ 1417.938508][ T75] dvmrp3 (unregistering): left allmulticast mode [ 1418.000378][ T5918] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1418.035364][ T5918] usb 10-1: device descriptor read/8, error -71 [ 1418.157926][ T5918] usb usb10-port1: unable to enumerate USB device [ 1418.182792][ T75] team0: Port device bond0 removed [ 1418.191649][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.204552][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.217572][ T75] bond0 (unregistering): (slave vlan1): Releasing backup interface [ 1418.230092][ T75] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1418.244375][ T75] bond0 (unregistering): Released all slaves [ 1418.296161][T25519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.306037][T25519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.333997][ T75] tipc: Left network mode [ 1418.694506][ T75] hsr_slave_0: left promiscuous mode [ 1418.701013][ T75] hsr_slave_1: left promiscuous mode [ 1418.706902][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.722109][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.747326][ T75] veth1_macvtap: left promiscuous mode [ 1418.753061][ T75] veth0_macvtap: left promiscuous mode [ 1418.760766][ T75] veth1_vlan: left promiscuous mode [ 1418.766034][ T75] veth0_vlan: left promiscuous mode [ 1419.374054][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1419.439537][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1420.116910][ T4573] smc: removing ib device sz1 [ 1420.221253][T25529] netlink: 'syz.9.5677': attribute type 33 has an invalid length. [ 1420.231660][T25530] netlink: 'syz.9.5677': attribute type 33 has an invalid length. [ 1420.248754][T25529] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5677'. [ 1420.270354][T25530] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5677'. [ 1420.282937][T25532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5678'. [ 1421.022254][ T5149] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1421.168966][T25541] [ 1421.171334][T25541] ===================================================== [ 1421.178273][T25541] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1421.185754][T25541] syzkaller #0 Tainted: G L [ 1421.191730][T25541] ----------------------------------------------------- [ 1421.198655][T25541] syz.9.5681/25541 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1421.206364][T25541] ffff88804937f468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 1421.214983][T25541] [ 1421.214983][T25541] and this task is already holding: [ 1421.222329][T25541] ffffffff8eb996d8 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd2/0x3fa0 [ 1421.230926][T25541] which would create a new lock dependency: [ 1421.236797][T25541] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1421.244531][T25541] [ 1421.244531][T25541] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1421.253959][T25541] (kbd_event_lock){..-.}-{3:3} [ 1421.253981][T25541] [ 1421.253981][T25541] ... which became SOFTIRQ-irq-safe at: [ 1421.266495][T25541] lock_acquire+0x117/0x340 [ 1421.271132][T25541] _raw_spin_lock+0x2e/0x40 [ 1421.275715][T25541] kbd_event+0xd2/0x3fa0 [ 1421.280038][T25541] input_handle_events_default+0xd4/0x1a0 [ 1421.285836][T25541] input_pass_values+0x288/0x890 [ 1421.290841][T25541] input_event_dispose+0x3e5/0x6b0 [ 1421.296023][T25541] input_event+0x89/0xe0 [ 1421.300340][T25541] hidinput_hid_event+0x145e/0x1e50 [ 1421.305609][T25541] hid_process_event+0x4be/0x620 [ 1421.310820][T25541] hid_report_raw_event+0xe91/0x1720 [ 1421.316182][T25541] hid_input_report+0x44b/0x580 [ 1421.321098][T25541] hid_irq_in+0x47e/0x6d0 [ 1421.325497][T25541] __usb_hcd_giveback_urb+0x376/0x540 [ 1421.330943][T25541] dummy_timer+0x85f/0x45b0 [ 1421.335518][T25541] __hrtimer_run_queues+0x51c/0xc30 [ 1421.340787][T25541] hrtimer_run_softirq+0x187/0x2b0 [ 1421.345971][T25541] handle_softirqs+0x27d/0x850 [ 1421.350807][T25541] __irq_exit_rcu+0xca/0x1f0 [ 1421.355467][T25541] irq_exit_rcu+0x9/0x30 [ 1421.359784][T25541] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1421.365486][T25541] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1421.371536][T25541] lock_release+0x80/0x3b0 [ 1421.376024][T25541] is_module_text_address+0x18b/0x1e0 [ 1421.381466][T25541] kernel_text_address+0x94/0xe0 [ 1421.386472][T25541] __kernel_text_address+0xd/0x40 [ 1421.391567][T25541] unwind_get_return_address+0x4d/0x90 [ 1421.397100][T25541] arch_stack_walk+0xfc/0x150 [ 1421.401852][T25541] stack_trace_save+0x9c/0xe0 [ 1421.406599][T25541] kasan_save_track+0x3e/0x80 [ 1421.411347][T25541] kasan_save_free_info+0x46/0x50 [ 1421.416441][T25541] __kasan_slab_free+0x5c/0x80 [ 1421.421278][T25541] kmem_cache_free+0x197/0x620 [ 1421.426113][T25541] unlink_anon_vmas+0x2cc/0x670 [ 1421.431037][T25541] free_pgtables+0x735/0x9d0 [ 1421.435698][T25541] exit_mmap+0x431/0xb10 [ 1421.440030][T25541] __mmput+0x118/0x430 [ 1421.444172][T25541] exit_mm+0x1da/0x2c0 [ 1421.448309][T25541] do_exit+0x658/0x2310 [ 1421.452534][T25541] do_group_exit+0x21c/0x2d0 [ 1421.457196][T25541] __x64_sys_exit_group+0x3f/0x40 [ 1421.462290][T25541] __pfx_syscall_get_nr+0x0/0x10 [ 1421.467297][T25541] do_syscall_64+0xfa/0xf80 [ 1421.471871][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.477845][T25541] [ 1421.477845][T25541] to a SOFTIRQ-irq-unsafe lock: [ 1421.484842][T25541] (tasklist_lock){.+.?}-{3:3} [ 1421.484865][T25541] [ 1421.484865][T25541] ... which became SOFTIRQ-irq-unsafe at: [ 1421.497462][T25541] ... [ 1421.497469][T25541] lock_acquire+0x117/0x340 [ 1421.504601][T25541] _raw_read_lock+0x36/0x50 [ 1421.509175][T25541] __do_wait+0xde/0x740 [ 1421.513400][T25541] do_wait+0x1e8/0x4f0 [ 1421.517538][T25541] kernel_wait+0xab/0x170 [ 1421.521936][T25541] call_usermodehelper_exec_work+0xbe/0x230 [ 1421.527903][T25541] process_one_work+0x93a/0x15a0 [ 1421.532911][T25541] worker_thread+0x9b0/0xee0 [ 1421.537572][T25541] kthread+0x711/0x8a0 [ 1421.541713][T25541] ret_from_fork+0x599/0xb30 [ 1421.546378][T25541] ret_from_fork_asm+0x1a/0x30 [ 1421.551217][T25541] [ 1421.551217][T25541] other info that might help us debug this: [ 1421.551217][T25541] [ 1421.561425][T25541] Chain exists of: [ 1421.561425][T25541] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1421.561425][T25541] [ 1421.574181][T25541] Possible interrupt unsafe locking scenario: [ 1421.574181][T25541] [ 1421.582653][T25541] CPU0 CPU1 [ 1421.587998][T25541] ---- ---- [ 1421.593341][T25541] lock(tasklist_lock); [ 1421.597568][T25541] local_irq_disable(); [ 1421.604300][T25541] lock(kbd_event_lock); [ 1421.611129][T25541] lock(&tty->flow.lock); [ 1421.618057][T25541] [ 1421.621493][T25541] lock(kbd_event_lock); [ 1421.625977][T25541] [ 1421.625977][T25541] *** DEADLOCK *** [ 1421.625977][T25541] [ 1421.634098][T25541] 5 locks held by syz.9.5681/25541: [ 1421.639276][T25541] #0: ffff88802a624118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1421.648491][T25541] #1: ffff88802a620230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1421.658583][T25541] #2: ffffffff8e3419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1421.668243][T25541] #3: ffffffff8e3419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1421.677805][T25541] #4: ffffffff8eb996d8 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd2/0x3fa0 [ 1421.686852][T25541] [ 1421.686852][T25541] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1421.697245][T25541] -> (kbd_event_lock){..-.}-{3:3} { [ 1421.702452][T25541] IN-SOFTIRQ-W at: [ 1421.706414][T25541] lock_acquire+0x117/0x340 [ 1421.712557][T25541] _raw_spin_lock+0x2e/0x40 [ 1421.718692][T25541] kbd_event+0xd2/0x3fa0 [ 1421.724569][T25541] input_handle_events_default+0xd4/0x1a0 [ 1421.731922][T25541] input_pass_values+0x288/0x890 [ 1421.738529][T25541] input_event_dispose+0x3e5/0x6b0 [ 1421.745273][T25541] input_event+0x89/0xe0 [ 1421.751161][T25541] hidinput_hid_event+0x145e/0x1e50 [ 1421.758015][T25541] hid_process_event+0x4be/0x620 [ 1421.764604][T25541] hid_report_raw_event+0xe91/0x1720 [ 1421.771543][T25541] hid_input_report+0x44b/0x580 [ 1421.778052][T25541] hid_irq_in+0x47e/0x6d0 [ 1421.784016][T25541] __usb_hcd_giveback_urb+0x376/0x540 [ 1421.791027][T25541] dummy_timer+0x85f/0x45b0 [ 1421.797170][T25541] __hrtimer_run_queues+0x51c/0xc30 [ 1421.804003][T25541] hrtimer_run_softirq+0x187/0x2b0 [ 1421.810750][T25541] handle_softirqs+0x27d/0x850 [ 1421.817151][T25541] __irq_exit_rcu+0xca/0x1f0 [ 1421.823375][T25541] irq_exit_rcu+0x9/0x30 [ 1421.829253][T25541] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1421.836519][T25541] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1421.844129][T25541] lock_release+0x80/0x3b0 [ 1421.850182][T25541] is_module_text_address+0x18b/0x1e0 [ 1421.857198][T25541] kernel_text_address+0x94/0xe0 [ 1421.863781][T25541] __kernel_text_address+0xd/0x40 [ 1421.870441][T25541] unwind_get_return_address+0x4d/0x90 [ 1421.877536][T25541] arch_stack_walk+0xfc/0x150 [ 1421.883844][T25541] stack_trace_save+0x9c/0xe0 [ 1421.890158][T25541] kasan_save_track+0x3e/0x80 [ 1421.896473][T25541] kasan_save_free_info+0x46/0x50 [ 1421.903132][T25541] __kasan_slab_free+0x5c/0x80 [ 1421.909629][T25541] kmem_cache_free+0x197/0x620 [ 1421.916047][T25541] unlink_anon_vmas+0x2cc/0x670 [ 1421.922551][T25541] free_pgtables+0x735/0x9d0 [ 1421.928792][T25541] exit_mmap+0x431/0xb10 [ 1421.934759][T25541] __mmput+0x118/0x430 [ 1421.940464][T25541] exit_mm+0x1da/0x2c0 [ 1421.946166][T25541] do_exit+0x658/0x2310 [ 1421.951955][T25541] do_group_exit+0x21c/0x2d0 [ 1421.958186][T25541] __x64_sys_exit_group+0x3f/0x40 [ 1421.964844][T25541] __pfx_syscall_get_nr+0x0/0x10 [ 1421.971416][T25541] do_syscall_64+0xfa/0xf80 [ 1421.977561][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.985086][T25541] INITIAL USE at: [ 1421.988961][T25541] lock_acquire+0x117/0x340 [ 1421.995014][T25541] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1422.001752][T25541] vt_reset_unicode+0x2b/0x1a0 [ 1422.008068][T25541] reset_vc+0x68/0x1b0 [ 1422.013686][T25541] vc_init+0x70/0x4a0 [ 1422.019269][T25541] con_init+0x385/0x9c0 [ 1422.024984][T25541] console_init+0xfc/0x3f0 [ 1422.030952][T25541] start_kernel+0x24d/0x400 [ 1422.037021][T25541] x86_64_start_reservations+0x24/0x30 [ 1422.044029][T25541] x86_64_start_kernel+0x143/0x1c0 [ 1422.050713][T25541] common_startup_64+0x13e/0x147 [ 1422.057205][T25541] } [ 1422.059690][T25541] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1422.067485][T25541] [ 1422.067485][T25541] the dependencies between the lock to be acquired [ 1422.067494][T25541] and SOFTIRQ-irq-unsafe lock: [ 1422.081086][T25541] -> (tasklist_lock){.+.?}-{3:3} { [ 1422.086461][T25541] HARDIRQ-ON-R at: [ 1422.090683][T25541] lock_acquire+0x117/0x340 [ 1422.097343][T25541] _raw_read_lock+0x36/0x50 [ 1422.104003][T25541] __do_wait+0xde/0x740 [ 1422.110312][T25541] do_wait+0x1e8/0x4f0 [ 1422.116575][T25541] kernel_wait+0xab/0x170 [ 1422.123074][T25541] call_usermodehelper_exec_work+0xbe/0x230 [ 1422.131127][T25541] process_one_work+0x93a/0x15a0 [ 1422.138231][T25541] worker_thread+0x9b0/0xee0 [ 1422.144981][T25541] kthread+0x711/0x8a0 [ 1422.151202][T25541] ret_from_fork+0x599/0xb30 [ 1422.157956][T25541] ret_from_fork_asm+0x1a/0x30 [ 1422.164879][T25541] IN-SOFTIRQ-R at: [ 1422.169162][T25541] lock_acquire+0x117/0x340 [ 1422.175823][T25541] _raw_read_lock+0x36/0x50 [ 1422.182479][T25541] send_sigurg+0x12b/0x420 [ 1422.189051][T25541] sk_send_sigurg+0x6c/0x2e0 [ 1422.195797][T25541] tcp_check_urg+0x200/0x760 [ 1422.202563][T25541] tcp_urg+0x164/0x3f0 [ 1422.208790][T25541] tcp_rcv_established+0xf4c/0x2580 [ 1422.216143][T25541] tcp_v4_do_rcv+0xa90/0x1430 [ 1422.222976][T25541] tcp_v4_rcv+0x2675/0x2f20 [ 1422.229629][T25541] ip_protocol_deliver_rcu+0x221/0x440 [ 1422.237243][T25541] ip_local_deliver_finish+0x3bb/0x6f0 [ 1422.244859][T25541] NF_HOOK+0x30c/0x3a0 [ 1422.251083][T25541] NF_HOOK+0x30c/0x3a0 [ 1422.257304][T25541] __netif_receive_skb+0x143/0x380 [ 1422.264569][T25541] process_backlog+0x622/0x1500 [ 1422.271577][T25541] __napi_poll+0xae/0x320 [ 1422.278058][T25541] net_rx_action+0x672/0xe50 [ 1422.284800][T25541] handle_softirqs+0x27d/0x850 [ 1422.291721][T25541] do_softirq+0xec/0x180 [ 1422.298116][T25541] __local_bh_enable_ip+0x17d/0x1c0 [ 1422.305554][T25541] sk_stream_wait_memory+0x71f/0xf70 [ 1422.312997][T25541] tcp_sendmsg_locked+0x1dfb/0x5520 [ 1422.320351][T25541] tcp_sendmsg+0x2f/0x50 [ 1422.326753][T25541] sock_sendmsg_nosec+0x128/0x1d0 [ 1422.333934][T25541] __sys_sendto+0x3ce/0x540 [ 1422.340676][T25541] __x64_sys_sendto+0xde/0x100 [ 1422.347593][T25541] do_syscall_64+0xfa/0xf80 [ 1422.354250][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.362295][T25541] SOFTIRQ-ON-R at: [ 1422.366523][T25541] lock_acquire+0x117/0x340 [ 1422.373182][T25541] _raw_read_lock+0x36/0x50 [ 1422.379840][T25541] __do_wait+0xde/0x740 [ 1422.386153][T25541] do_wait+0x1e8/0x4f0 [ 1422.392376][T25541] kernel_wait+0xab/0x170 [ 1422.398861][T25541] call_usermodehelper_exec_work+0xbe/0x230 [ 1422.406917][T25541] process_one_work+0x93a/0x15a0 [ 1422.414011][T25541] worker_thread+0x9b0/0xee0 [ 1422.420759][T25541] kthread+0x711/0x8a0 [ 1422.427068][T25541] ret_from_fork+0x599/0xb30 [ 1422.433830][T25541] ret_from_fork_asm+0x1a/0x30 [ 1422.440747][T25541] INITIAL USE at: [ 1422.444889][T25541] lock_acquire+0x117/0x340 [ 1422.451461][T25541] _raw_write_lock_irq+0xa2/0xf0 [ 1422.458462][T25541] copy_process+0x2185/0x3950 [ 1422.465224][T25541] kernel_clone+0x21e/0x820 [ 1422.471908][T25541] user_mode_thread+0xdd/0x140 [ 1422.478751][T25541] rest_init+0x23/0x300 [ 1422.484981][T25541] start_kernel+0x3a7/0x400 [ 1422.491555][T25541] x86_64_start_reservations+0x24/0x30 [ 1422.499083][T25541] x86_64_start_kernel+0x143/0x1c0 [ 1422.506351][T25541] common_startup_64+0x13e/0x147 [ 1422.513458][T25541] INITIAL READ USE at: [ 1422.518031][T25541] lock_acquire+0x117/0x340 [ 1422.525047][T25541] _raw_read_lock+0x36/0x50 [ 1422.532053][T25541] __do_wait+0xde/0x740 [ 1422.538801][T25541] do_wait+0x1e8/0x4f0 [ 1422.545371][T25541] kernel_wait+0xab/0x170 [ 1422.552199][T25541] call_usermodehelper_exec_work+0xbe/0x230 [ 1422.560596][T25541] process_one_work+0x93a/0x15a0 [ 1422.568041][T25541] worker_thread+0x9b0/0xee0 [ 1422.575140][T25541] kthread+0x711/0x8a0 [ 1422.581712][T25541] ret_from_fork+0x599/0xb30 [ 1422.588830][T25541] ret_from_fork_asm+0x1a/0x30 [ 1422.596102][T25541] } [ 1422.598849][T25541] ... key at: [] tasklist_lock+0x18/0x40 [ 1422.606818][T25541] ... acquired at: [ 1422.610861][T25541] _raw_read_lock+0x36/0x50 [ 1422.615524][T25541] send_sigurg+0x12b/0x420 [ 1422.620098][T25541] sk_send_sigurg+0x6c/0x2e0 [ 1422.624848][T25541] tcp_check_urg+0x200/0x760 [ 1422.629604][T25541] tcp_urg+0x164/0x3f0 [ 1422.633831][T25541] tcp_rcv_established+0xf4c/0x2580 [ 1422.639188][T25541] tcp_v4_do_rcv+0xa90/0x1430 [ 1422.644030][T25541] __release_sock+0x265/0x3a0 [ 1422.648869][T25541] release_sock+0x5f/0x1f0 [ 1422.653446][T25541] sk_stream_wait_memory+0x71f/0xf70 [ 1422.658896][T25541] tcp_sendmsg_locked+0x1dfb/0x5520 [ 1422.664255][T25541] tcp_sendmsg+0x2f/0x50 [ 1422.668660][T25541] sock_sendmsg_nosec+0x128/0x1d0 [ 1422.673850][T25541] __sys_sendto+0x3ce/0x540 [ 1422.678513][T25541] __x64_sys_sendto+0xde/0x100 [ 1422.683433][T25541] do_syscall_64+0xfa/0xf80 [ 1422.688094][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.694139][T25541] [ 1422.696443][T25541] -> (&f_owner->lock){...-}-{3:3} { [ 1422.701814][T25541] IN-SOFTIRQ-R at: [ 1422.705958][T25541] lock_acquire+0x117/0x340 [ 1422.712447][T25541] _raw_read_lock_irqsave+0xaf/0x100 [ 1422.719720][T25541] send_sigurg+0x55/0x420 [ 1422.726037][T25541] sk_send_sigurg+0x6c/0x2e0 [ 1422.732624][T25541] tcp_check_urg+0x200/0x760 [ 1422.739213][T25541] tcp_urg+0x164/0x3f0 [ 1422.745281][T25541] tcp_rcv_established+0xf4c/0x2580 [ 1422.752464][T25541] tcp_v4_do_rcv+0xa90/0x1430 [ 1422.759127][T25541] tcp_v4_rcv+0x2675/0x2f20 [ 1422.765609][T25541] ip_protocol_deliver_rcu+0x221/0x440 [ 1422.773062][T25541] ip_local_deliver_finish+0x3bb/0x6f0 [ 1422.780512][T25541] NF_HOOK+0x30c/0x3a0 [ 1422.786587][T25541] NF_HOOK+0x30c/0x3a0 [ 1422.792641][T25541] __netif_receive_skb+0x143/0x380 [ 1422.799731][T25541] process_backlog+0x622/0x1500 [ 1422.806562][T25541] __napi_poll+0xae/0x320 [ 1422.812875][T25541] net_rx_action+0x672/0xe50 [ 1422.819620][T25541] handle_softirqs+0x27d/0x850 [ 1422.826369][T25541] do_softirq+0xec/0x180 [ 1422.832611][T25541] __local_bh_enable_ip+0x17d/0x1c0 [ 1422.839796][T25541] sk_stream_wait_memory+0x71f/0xf70 [ 1422.847150][T25541] tcp_sendmsg_locked+0x1dfb/0x5520 [ 1422.854340][T25541] tcp_sendmsg+0x2f/0x50 [ 1422.860564][T25541] sock_sendmsg_nosec+0x128/0x1d0 [ 1422.867574][T25541] __sys_sendto+0x3ce/0x540 [ 1422.874066][T25541] __x64_sys_sendto+0xde/0x100 [ 1422.880830][T25541] do_syscall_64+0xfa/0xf80 [ 1422.887330][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.895213][T25541] INITIAL USE at: [ 1422.899266][T25541] lock_acquire+0x117/0x340 [ 1422.905665][T25541] _raw_write_lock_irq+0xa2/0xf0 [ 1422.912497][T25541] __f_setown+0x67/0x370 [ 1422.918634][T25541] fcntl_dirnotify+0x3fa/0x6a0 [ 1422.925471][T25541] do_fcntl+0x745/0x1a50 [ 1422.931609][T25541] __se_sys_fcntl+0xc8/0x150 [ 1422.938109][T25541] do_syscall_64+0xfa/0xf80 [ 1422.944539][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.952339][T25541] INITIAL READ USE at: [ 1422.956839][T25541] lock_acquire+0x117/0x340 [ 1422.963767][T25541] _raw_read_lock_irqsave+0xaf/0x100 [ 1422.971381][T25541] send_sigio+0x38/0x370 [ 1422.977958][T25541] dnotify_handle_event+0x169/0x440 [ 1422.985492][T25541] fsnotify+0x180b/0x1ab0 [ 1422.992193][T25541] fsnotify_create+0x122/0x180 [ 1422.999289][T25541] vfs_symlink+0x2c3/0x2d0 [ 1423.006051][T25541] do_symlinkat+0x1f5/0x3c0 [ 1423.012902][T25541] __x64_sys_symlink+0x7a/0x90 [ 1423.020011][T25541] do_syscall_64+0xfa/0xf80 [ 1423.026848][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.035160][T25541] } [ 1423.037819][T25541] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1423.046844][T25541] ... acquired at: [ 1423.050819][T25541] _raw_read_lock_irqsave+0xaf/0x100 [ 1423.056272][T25541] send_sigio+0x38/0x370 [ 1423.060674][T25541] kill_fasync+0x24d/0x4d0 [ 1423.065248][T25541] lease_break_callback+0x26/0x30 [ 1423.070429][T25541] __break_lease+0x730/0x1620 [ 1423.075267][T25541] do_dentry_open+0x73a/0x1420 [ 1423.080189][T25541] vfs_open+0x3b/0x340 [ 1423.084416][T25541] path_openat+0x340e/0x3dd0 [ 1423.089167][T25541] do_filp_open+0x1fa/0x410 [ 1423.093826][T25541] do_open_execat+0x135/0x560 [ 1423.098662][T25541] open_exec+0x40/0x60 [ 1423.102884][T25541] load_script+0x6e9/0x860 [ 1423.107456][T25541] bprm_execve+0x92e/0x1400 [ 1423.112113][T25541] do_execveat_common+0x510/0x6a0 [ 1423.117293][T25541] __x64_sys_execveat+0xc4/0xe0 [ 1423.122396][T25541] do_syscall_64+0xfa/0xf80 [ 1423.127055][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.133101][T25541] [ 1423.135404][T25541] -> (&new->fa_lock){...-}-{3:3} { [ 1423.140598][T25541] IN-SOFTIRQ-R at: [ 1423.144651][T25541] lock_acquire+0x117/0x340 [ 1423.150965][T25541] _raw_read_lock_irqsave+0xaf/0x100 [ 1423.158059][T25541] kill_fasync+0x199/0x4d0 [ 1423.164291][T25541] sock_wake_async+0x137/0x160 [ 1423.170869][T25541] sk_send_sigurg+0x1f1/0x2e0 [ 1423.177368][T25541] tcp_check_urg+0x200/0x760 [ 1423.183820][T25541] tcp_urg+0x164/0x3f0 [ 1423.189715][T25541] tcp_rcv_established+0xf4c/0x2580 [ 1423.196733][T25541] tcp_v4_do_rcv+0xa90/0x1430 [ 1423.203226][T25541] tcp_v4_rcv+0x2675/0x2f20 [ 1423.209627][T25541] ip_protocol_deliver_rcu+0x221/0x440 [ 1423.216906][T25541] ip_local_deliver_finish+0x3bb/0x6f0 [ 1423.224180][T25541] NF_HOOK+0x30c/0x3a0 [ 1423.230058][T25541] NF_HOOK+0x30c/0x3a0 [ 1423.236023][T25541] __netif_receive_skb+0x143/0x380 [ 1423.242940][T25541] process_backlog+0x622/0x1500 [ 1423.249597][T25541] __napi_poll+0xae/0x320 [ 1423.255731][T25541] net_rx_action+0x672/0xe50 [ 1423.262125][T25541] handle_softirqs+0x27d/0x850 [ 1423.268702][T25541] do_softirq+0xec/0x180 [ 1423.274753][T25541] __local_bh_enable_ip+0x17d/0x1c0 [ 1423.281761][T25541] sk_wait_data+0x1fe/0x4a0 [ 1423.288076][T25541] tcp_recvmsg_locked+0xd6f/0x3670 [ 1423.294998][T25541] tcp_recvmsg+0x210/0x810 [ 1423.301242][T25541] inet_recvmsg+0x147/0x250 [ 1423.307557][T25541] sock_recvmsg_nosec+0x11d/0x1c0 [ 1423.314393][T25541] __sys_recvfrom+0x23f/0x380 [ 1423.320876][T25541] __x64_sys_recvfrom+0xde/0x100 [ 1423.327622][T25541] do_syscall_64+0xfa/0xf80 [ 1423.334026][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.341726][T25541] INITIAL USE at: [ 1423.345690][T25541] lock_acquire+0x117/0x340 [ 1423.351916][T25541] _raw_write_lock_irq+0xa2/0xf0 [ 1423.358571][T25541] fasync_remove_entry+0xf1/0x1c0 [ 1423.365317][T25541] __fput+0x8a2/0xa70 [ 1423.371027][T25541] task_work_run+0x1d4/0x260 [ 1423.377339][T25541] exit_to_user_mode_loop+0xff/0x4f0 [ 1423.384349][T25541] do_syscall_64+0x2e3/0xf80 [ 1423.390753][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.398370][T25541] INITIAL READ USE at: [ 1423.402766][T25541] lock_acquire+0x117/0x340 [ 1423.409426][T25541] _raw_read_lock_irqsave+0xaf/0x100 [ 1423.416862][T25541] kill_fasync+0x199/0x4d0 [ 1423.423555][T25541] anon_pipe_read+0xf06/0x1040 [ 1423.430468][T25541] fifo_pipe_read+0x22/0xd0 [ 1423.437142][T25541] vfs_read+0x55a/0xa30 [ 1423.443647][T25541] ksys_read+0x145/0x250 [ 1423.450048][T25541] do_syscall_64+0xfa/0xf80 [ 1423.456707][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.464838][T25541] } [ 1423.467404][T25541] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1423.476159][T25541] ... acquired at: [ 1423.480042][T25541] _raw_read_lock_irqsave+0xaf/0x100 [ 1423.485513][T25541] kill_fasync+0x199/0x4d0 [ 1423.490088][T25541] __start_tty+0x18c/0x220 [ 1423.494665][T25541] start_tty+0x2b/0x70 [ 1423.498896][T25541] n_tty_set_termios+0xa7c/0x10c0 [ 1423.504075][T25541] tty_set_termios+0xda4/0x17e0 [ 1423.509088][T25541] set_termios+0x516/0x6c0 [ 1423.513662][T25541] tty_mode_ioctl+0x47e/0x740 [ 1423.518492][T25541] tty_ioctl+0x9c6/0xde0 [ 1423.522927][T25541] __se_sys_ioctl+0xfc/0x170 [ 1423.527674][T25541] do_syscall_64+0xfa/0xf80 [ 1423.532331][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.538379][T25541] [ 1423.540686][T25541] -> (&tty->flow.lock){....}-{3:3} { [ 1423.545969][T25541] INITIAL USE at: [ 1423.549866][T25541] lock_acquire+0x117/0x340 [ 1423.555921][T25541] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1423.562669][T25541] start_tty+0x20/0x70 [ 1423.568284][T25541] n_tty_set_termios+0xa7c/0x10c0 [ 1423.574869][T25541] tty_set_termios+0xda4/0x17e0 [ 1423.581263][T25541] set_termios+0x516/0x6c0 [ 1423.587225][T25541] tty_mode_ioctl+0x47e/0x740 [ 1423.593452][T25541] tty_ioctl+0x9c6/0xde0 [ 1423.599268][T25541] __se_sys_ioctl+0xfc/0x170 [ 1423.605407][T25541] do_syscall_64+0xfa/0xf80 [ 1423.611585][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.619027][T25541] } [ 1423.621506][T25541] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1423.630161][T25541] ... acquired at: [ 1423.633942][T25541] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1423.639295][T25541] stop_tty+0x2f/0x150 [ 1423.643522][T25541] kbd_event+0x2b9f/0x3fa0 [ 1423.648102][T25541] input_handle_events_default+0xd4/0x1a0 [ 1423.653978][T25541] input_pass_values+0x288/0x890 [ 1423.659070][T25541] input_event_dispose+0x330/0x6b0 [ 1423.664338][T25541] input_inject_event+0x1dd/0x340 [ 1423.669520][T25541] evdev_write+0x2fc/0x480 [ 1423.674094][T25541] vfs_write+0x27e/0xb30 [ 1423.678492][T25541] ksys_write+0x145/0x250 [ 1423.682982][T25541] do_syscall_64+0xfa/0xf80 [ 1423.687649][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.693700][T25541] [ 1423.696006][T25541] [ 1423.696006][T25541] stack backtrace: [ 1423.701892][T25541] CPU: 1 UID: 0 PID: 25541 Comm: syz.9.5681 Tainted: G L syzkaller #0 PREEMPT(full) [ 1423.701916][T25541] Tainted: [L]=SOFTLOCKUP [ 1423.701921][T25541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1423.701930][T25541] Call Trace: [ 1423.701939][T25541] [ 1423.701945][T25541] dump_stack_lvl+0x189/0x250 [ 1423.701963][T25541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1423.701975][T25541] ? __pfx__printk+0x10/0x10 [ 1423.701996][T25541] __lock_acquire+0x2a95/0x2cf0 [ 1423.702021][T25541] ? stop_tty+0x2f/0x150 [ 1423.702035][T25541] lock_acquire+0x117/0x340 [ 1423.702052][T25541] ? stop_tty+0x2f/0x150 [ 1423.702069][T25541] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1423.702082][T25541] ? stop_tty+0x2f/0x150 [ 1423.702096][T25541] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1423.702110][T25541] ? atomic_notifier_call_chain+0x26/0x180 [ 1423.702125][T25541] stop_tty+0x2f/0x150 [ 1423.702139][T25541] kbd_event+0x2b9f/0x3fa0 [ 1423.702159][T25541] ? __pfx_kbd_event+0x10/0x10 [ 1423.702176][T25541] ? finish_task_switch+0x302/0x940 [ 1423.702192][T25541] ? rcu_is_watching+0x15/0xb0 [ 1423.702205][T25541] ? trace_sched_exit_tp+0x36/0xf0 [ 1423.702221][T25541] ? __pfx_blake2s_compress+0x10/0x10 [ 1423.702235][T25541] ? do_raw_spin_lock+0x121/0x290 [ 1423.702250][T25541] ? __lock_acquire+0x6b6/0x2cf0 [ 1423.702267][T25541] ? __lock_acquire+0x6b6/0x2cf0 [ 1423.702287][T25541] ? __lock_acquire+0x6b6/0x2cf0 [ 1423.702303][T25541] ? input_pass_values+0x8d/0x890 [ 1423.702317][T25541] ? input_pass_values+0x8d/0x890 [ 1423.702329][T25541] input_handle_events_default+0xd4/0x1a0 [ 1423.702346][T25541] ? input_pass_values+0x8d/0x890 [ 1423.702357][T25541] input_pass_values+0x288/0x890 [ 1423.702371][T25541] ? input_handle_event+0x70c/0xf30 [ 1423.702388][T25541] input_event_dispose+0x330/0x6b0 [ 1423.702406][T25541] input_inject_event+0x1dd/0x340 [ 1423.702423][T25541] ? input_inject_event+0xb6/0x340 [ 1423.702439][T25541] evdev_write+0x2fc/0x480 [ 1423.702454][T25541] ? __pfx_evdev_write+0x10/0x10 [ 1423.702468][T25541] ? bpf_lsm_file_permission+0x9/0x20 [ 1423.702485][T25541] ? security_file_permission+0x75/0x290 [ 1423.702500][T25541] ? rw_verify_area+0x255/0x4d0 [ 1423.702516][T25541] ? __pfx_evdev_write+0x10/0x10 [ 1423.702529][T25541] vfs_write+0x27e/0xb30 [ 1423.702547][T25541] ? __pfx_vfs_write+0x10/0x10 [ 1423.702563][T25541] ? __fget_files+0x2a/0x420 [ 1423.702577][T25541] ? __fget_files+0x2a/0x420 [ 1423.702591][T25541] ? __fget_files+0x3a0/0x420 [ 1423.702604][T25541] ? __fget_files+0x2a/0x420 [ 1423.702620][T25541] ksys_write+0x145/0x250 [ 1423.702637][T25541] ? __pfx_ksys_write+0x10/0x10 [ 1423.702654][T25541] ? do_syscall_64+0xbe/0xf80 [ 1423.702669][T25541] do_syscall_64+0xfa/0xf80 [ 1423.702684][T25541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.702697][T25541] ? clear_bhb_loop+0x60/0xb0 [ 1423.702711][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.702724][T25541] RIP: 0033:0x7ff345f8f749 [ 1423.702739][T25541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1423.702750][T25541] RSP: 002b:00007ff346e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1423.702765][T25541] RAX: ffffffffffffffda RBX: 00007ff3461e6090 RCX: 00007ff345f8f749 [ 1423.702776][T25541] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000007 [ 1423.702785][T25541] RBP: 00007ff346013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1423.702794][T25541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.702803][T25541] R13: 00007ff3461e6128 R14: 00007ff3461e6090 R15: 00007ffc7ce579c8 [ 1423.702817][T25541] [ 1424.059918][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.076196][T25537] overlayfs: statfs failed on './file0' [ 1424.412073][ T75] IPVS: stop unused estimator thread 0... [ 1427.593904][ T5199] udevd[5199]: worker [16194] /devices/virtual/block/nbd0 timeout; kill it [ 1427.602852][ T5199] udevd[5199]: seq 32159 '/devices/virtual/block/nbd0' killed