last executing test programs: 7m1.50681902s ago: executing program 32 (id=30): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4000, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x200000, 0x80}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x200, 0x20000000007fff}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0xf0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000100)) 6m33.869736749s ago: executing program 33 (id=71): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2400, 0x4) sendto(r0, &(0x7f00000000c0)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x68}}, 0x4000000) 5m52.448731641s ago: executing program 34 (id=239): syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/cgroup\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x1000, 0x1080, &(0x7f0000000000/0x1000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x2c040, 0x0) mount(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='nfs4\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f00000009c0)=ANY=[@ANYRES16=r3, @ANYBLOB="12010000a4d2ff78704ca5168cada440f3054002241b0102030109021b00010000000009040000014eaf32000905d657ad9a94af01db18fce75dbdbc35cce237fbd0f3cab0e39604ecce778028c3190be46ef21126061accfe39010a7d146416"], 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x20, 0x0) r4 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xfc6e, 0x80, 0x0, 0x186}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000400)=@IORING_OP_OPENAT={0x12, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1881, 0x23456}) r8 = getpid() syz_pidfd_open(r8, 0x0) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000840), 0x82300, 0x0) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f0000000880)) syz_clone3(&(0x7f00000004c0)={0x80000, &(0x7f00000000c0), &(0x7f0000000200)=0x0, &(0x7f00000002c0), {0x37}, &(0x7f0000000300)=""/8, 0x8, &(0x7f0000000340)=""/182, &(0x7f0000000480)=[r8, r8, r8, r8, r8, r8, r8, r8, r8, r8], 0xa}, 0x58) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='ext4\x00', 0x10, &(0x7f0000000800)='ns/cgroup\x00') syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000140)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x5, 0x9c2, 0x0, 0x0, 0x1000, 0x369a, r10, 0x0, 0x2a}}}, &(0x7f00000001c0)) 5m43.89103038s ago: executing program 35 (id=282): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa1001, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x88841, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x4000, 0x0, 0x68, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'PO', 0x20, '16', ' 1 discard_zeroes_cow'}}]}) 5m28.505619365s ago: executing program 36 (id=329): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) write$char_usb(r0, &(0x7f0000000040)="5cdf01f5ec836963006d95229d604ea5612b63518b242eea18d8633a0457fb138a2c748c0a4197aaa057318e3ecd965cc46e666173ba738f5360e5c2a3676b04302edb1203c55a5eee34d52a44d9102f2b8636f8b8c7961e4f8efa54c481889ae864e45bca2da1f557c56776074621bc8ee8220946f6aa92af45b048699cbdf18e31eec8448593fa02e0cacbb7fc0988f0c52435c65a684efbe0706a4fed2dcfbf16c1ddf090bceacea17161742c0d5c8ed29c0d95c174992ff195b998f72c85783cf1f714ef463e67ebd50f96b1898142850dabc757e365eb82", 0xda) socket$phonet_pipe(0x23, 0x5, 0x2) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m20.440020853s ago: executing program 8 (id=384): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000380)) ptrace$cont(0x21, r0, 0x5, 0x7) creat(&(0x7f00000001c0)='./file0\x00', 0x81) mount$afs(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x7ff, 0x12) 5m20.013817685s ago: executing program 8 (id=423): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @fda={0x66646185, 0x2}, @child_ptr={0x70742a85, 0x1, &(0x7f0000000540)=[r0, r1], 0x8, 0x0, 0x8}}, &(0x7f0000000580)={0x0, 0x18, 0x38}}, 0x40}]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) setrlimit(0x40000000000008, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000500)=0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@filename='mtd0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f00000002c0)='2', 0xfdef, 0xe7c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/can/rcvlist_all\x00', 0x0, 0x10) read(r4, &(0x7f0000001a40)=""/4096, 0x1000) setns(r2, 0x20000000) r5 = socket$rds(0x15, 0x5, 0x0) connect(r4, &(0x7f00000005c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80) bind$rds(r5, &(0x7f00000009c0)={0x2, 0x4e21, @local}, 0x10) 5m19.685033897s ago: executing program 37 (id=355): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x42, 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x2000000, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 5m4.953613032s ago: executing program 38 (id=423): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @fda={0x66646185, 0x2}, @child_ptr={0x70742a85, 0x1, &(0x7f0000000540)=[r0, r1], 0x8, 0x0, 0x8}}, &(0x7f0000000580)={0x0, 0x18, 0x38}}, 0x40}]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) setrlimit(0x40000000000008, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000500)=0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@filename='mtd0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f00000002c0)='2', 0xfdef, 0xe7c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/can/rcvlist_all\x00', 0x0, 0x10) read(r4, &(0x7f0000001a40)=""/4096, 0x1000) setns(r2, 0x20000000) r5 = socket$rds(0x15, 0x5, 0x0) connect(r4, &(0x7f00000005c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80) bind$rds(r5, &(0x7f00000009c0)={0x2, 0x4e21, @local}, 0x10) 4m6.25779697s ago: executing program 7 (id=825): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000380)) mount$afs(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x7ff, 0x12) 4m4.682799332s ago: executing program 7 (id=836): openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f80041700000800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x10048947}, 0x4) 3m49.566929203s ago: executing program 39 (id=836): openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f80041700000800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x10048947}, 0x4) 3m31.84877468s ago: executing program 40 (id=930): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x60000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000300)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x1000, @broadcast}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) mq_open(&(0x7f00000001c0)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x33) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x9) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f0000000140)) 3m16.681802668s ago: executing program 4 (id=1062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r4, 0xae80, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c42, 0x0) 3m15.600358128s ago: executing program 4 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x11}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0xc090) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000380)={0xffe}, 0x10) write(0xffffffffffffffff, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', r4, 0x8000, 0x7800, 0x6, 0x8, {{0x1c, 0x4, 0x1, 0x6, 0x70, 0x68, 0x0, 0xdf, 0x0, 0x0, @broadcast, @multicast2, {[@end, @cipso={0x86, 0x59, 0x3, [{0x5, 0x2}, {0x5, 0x7, "c48982accc"}, {0x0, 0xd, "3934d5a727f515e539ed6e"}, {0x0, 0x8, "78e3d0d7e8b1"}, {0x2, 0xc, "71cbfa4146b59890b56e"}, {0x0, 0x9, "88b74457f7b8ce"}, {0x1, 0x8, "2a2c8d93df37"}, {0x6, 0xd, "5b0bea8ed39c7ca04c92af"}, {0x0, 0xb, "3acfe666a4c6395731"}]}]}}}}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) r6 = syz_open_dev$video(&(0x7f0000000400), 0xfffffffffffffffa, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000440)={0xa, 0x101, 0x6, {0x3, 0x1000, 0xfc, 0x1a8}}) sendto$inet6(r5, &(0x7f0000000240)='.', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m15.438488284s ago: executing program 4 (id=1071): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000380)) mount$afs(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x7ff, 0x12) 3m14.48521737s ago: executing program 4 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="50010000100001040000000000000000ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="6faf0f01c5ba420066ed66b8020000000f23c00f21f8663501000a000f23f866b95603000066b82900000066ba000000000f30b810008ec0660f3882b2090066b9d10b00000f32baa100b80300ef", 0x4e}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) 2m59.157273794s ago: executing program 41 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="50010000100001040000000000000000ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="6faf0f01c5ba420066ed66b8020000000f23c00f21f8663501000a000f23f866b95603000066b82900000066ba000000000f30b810008ec0660f3882b2090066b9d10b00000f32baa100b80300ef", 0x4e}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) 2m50.383717632s ago: executing program 42 (id=1111): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x1014906, 0x4) 2m40.330655544s ago: executing program 43 (id=1141): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101301) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000129bd70002506000000"], 0x14}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000e2793f10d10501200028000000010902120001000000000904"], 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)=""/98, 0x100000}], 0x1, &(0x7f0000000200)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyUSB0\x00', 0x2, 0x0) 1m41.630671682s ago: executing program 6 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x0) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x8016, 0x2904c, 0x17, 0x10003, '\x00', [{0x0, 0x5, 0xcd, 0xffffffffffffffff, 0x0, 0x10000000}, {0xffffffff, 0x0, 0x8001}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write$eventfd(r1, &(0x7f00000008c0)=0xfffffffffffffff1, 0x8) 1m41.510212345s ago: executing program 6 (id=1419): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x400000, 0x5e}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xff97, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m41.313069557s ago: executing program 6 (id=1420): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0x3, 0x3, {0x1, 0x1}, {0x60, 0x2}, @rumble={0x0, 0xf931}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000840)='\\x', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)={0x34, 0x10, 0x1, 0x70bd2d, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0xc, 0x124, 0x0, 0x1, [@nested={0x8, 0x13, 0x0, 0x1, [@generic="2a46d478"]}]}, @nested={0xc, 0x1c, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @fd}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r3, &(0x7f0000000080)="b9", 0x1) r4 = syz_open_dev$loop(&(0x7f0000000880), 0x4, 0x108701) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000008c0)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f0000000700)={0x1, 0x1, 0x7, 0x3, r6}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff010000000000140000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)="240000001e005f0214f6fffffffff807000000000000000000a600000000800d00000000", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000a40)) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc, 0x3}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) socket$key(0xf, 0x3, 0x2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000540)=""/124, 0x7c}], 0x1, 0x3, 0x2) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r8, &(0x7f0000000b80)="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", 0x1000) 1m40.802825712s ago: executing program 6 (id=1422): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x1bf, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0xf000, 0x0, 0x0) 1m39.482390288s ago: executing program 6 (id=1424): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000380)) mount$afs(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x7ff, 0x12) 1m38.20494422s ago: executing program 6 (id=1427): r0 = openat$nsim_port_qreset(0xffffff9c, &(0x7f0000001dc0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x10031, 0xffffffffffffffff, 0x35f0c000) write$nsim_port_qreset(r0, &(0x7f0000001e40)={0x30, 0x20, 0x30}, 0x3) chdir(&(0x7f0000000040)='./file0\x00') 1m36.671767169s ago: executing program 5 (id=1431): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a38feb26fd7b61e1cdccdeac55"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x20008801}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2900) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 1m36.486433974s ago: executing program 5 (id=1432): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0x1}) (fail_nth: 6) 1m36.419961523s ago: executing program 5 (id=1433): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d4, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0x1}) 1m36.295222748s ago: executing program 5 (id=1434): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x2b0, [0x0, 0x2000000004c0, 0x2000000005d8, 0x200000000740], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x10, 0x806, 'batadv0\x00', 'macvtap0\x00', 'xfrm0\x00', 'pimreg1\x00', @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x80000000000, 0xd2d, 0x80000001, 0xffffffff}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'batadv0\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x108, 0x138, [], [@common=@ERROR={'ERROR\x00', 0x20, {"07881c8d76dafa3eb6c5e02d322f58d9954fdb3e7c24aab8a289b1bc1491"}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x9, {0x9}}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x328) 1m36.046510843s ago: executing program 5 (id=1435): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000380)) mount$afs(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x7ff, 0x12) 1m35.05319858s ago: executing program 5 (id=1436): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000000040)=0xd, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0xffffc000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000480)={&(0x7f00000004c0)={0x1d, r4}, 0x10, &(0x7f0000000500)={&(0x7f0000000540)=@can={{0x0, 0x0, 0x0, 0x1}, 0xde, 0x0, 0x4, 0x0, "d0d5000c7b7dfeff"}, 0x10}, 0x1, 0x0, 0x0, 0x20010}, 0x0) gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000600)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="8211", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r8, &(0x7f0000000440), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000005c0)={0x82, 0x1, 0xf45}) sendmsg$can_j1939(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)='.', 0x1a000}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setuid(0xee01) bind$bt_l2cap(r9, &(0x7f0000000580)={0x1f, 0x1}, 0xe) dup(r5) close_range(r1, 0xffffffffffffffff, 0x0) 1m26.737803784s ago: executing program 44 (id=1415): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@my=0x0, 0x2}, @my=0x0, 0x0, 0x6, 0x61, 0x4, 0x1, 0x4000000, 0xffffefff}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xa, 0x46}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000300)={0x0, 0xc, 0x16, {0x16, 0x1, "8427faf42d03c614cc25318216d169da956a905b"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f00000003c0)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB=' \nc'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m22.847488448s ago: executing program 45 (id=1427): r0 = openat$nsim_port_qreset(0xffffff9c, &(0x7f0000001dc0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x10031, 0xffffffffffffffff, 0x35f0c000) write$nsim_port_qreset(r0, &(0x7f0000001e40)={0x30, 0x20, 0x30}, 0x3) chdir(&(0x7f0000000040)='./file0\x00') 1m19.92959379s ago: executing program 46 (id=1436): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000000040)=0xd, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0xffffc000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000480)={&(0x7f00000004c0)={0x1d, r4}, 0x10, &(0x7f0000000500)={&(0x7f0000000540)=@can={{0x0, 0x0, 0x0, 0x1}, 0xde, 0x0, 0x4, 0x0, "d0d5000c7b7dfeff"}, 0x10}, 0x1, 0x0, 0x0, 0x20010}, 0x0) gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000600)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="8211", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r8, &(0x7f0000000440), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000005c0)={0x82, 0x1, 0xf45}) sendmsg$can_j1939(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)='.', 0x1a000}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setuid(0xee01) bind$bt_l2cap(r9, &(0x7f0000000580)={0x1f, 0x1}, 0xe) dup(r5) close_range(r1, 0xffffffffffffffff, 0x0) 1m11.210877408s ago: executing program 3 (id=1466): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(0xfffffffffffff000, 0x188c, 0x3000004, 0x4002012, r1, 0x0) 1m11.129651574s ago: executing program 3 (id=1467): r0 = gettid() timer_create(0x0, &(0x7f0000000880)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000008c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000900)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x800000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0x58, 0xa) (fail_nth: 4) 1m10.599863478s ago: executing program 3 (id=1468): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x101000000000007, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r1, 0x8, 0x0, 0x30, 0x700, @in={0x1b, 0xfffc, @rand_addr=0x64010102}, @ib={0x1b, 0x7fff, 0x0, {"9d0000000000000000000700"}, 0xfffffffffffffffc, 0x100000000000001, 0x8}}}, 0x118) 1m10.402435639s ago: executing program 3 (id=1469): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000300)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) sendmmsg(r0, &(0x7f0000000340), 0x800001d, 0x0) 1m9.932751912s ago: executing program 3 (id=1470): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x123901, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='14', 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x10, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000680)=0x15) ioctl$TCSETS(r2, 0x40384708, &(0x7f00000006c0)={0x4, 0x1, 0xe, 0x5, 0x1, "000000010000000200"}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000280)=0x18) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, 0x0) r3 = fsopen(&(0x7f0000000000)='overlay\x00', 0x1) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./cgroup\x00', 0xa000032a) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02138100020c00002dbd7000fbdbdf25"], 0x10}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './cgroup\x00'}) readv(r8, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/256, 0x100}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x8000, 0x5a) write$cgroup_int(r8, &(0x7f00000004c0)=0x2, 0x12) syz_ublk_setup_io_uring(0x68e0, &(0x7f00000000c0)={0x0, 0x7000, 0x400, 0x0, 0x1005}, &(0x7f0000000140), 0x0, 0x0) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 1m9.241139864s ago: executing program 3 (id=1471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x40) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014) (async) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r7, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x28}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0xf0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x8e}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x4}}]}, 0x154}, 0x1, 0x0, 0x0, 0x400}, 0x4000) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x14467bc2be8d8582) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfd}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x59}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r9, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c4}, 0x5) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000001c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8c08000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000b80)={0x1060, 0x0, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x1ff}, 0x3, 0x8, 0xb, 0x1, 0x1c, 'syz0\x00', "ac0a41282db2511e2d4ce65da13ba29b553cd41abbb526922414f7657bff1ea7", "c0b9538799f32db140d8b515dd0f2b12f622b4906522decedebd33483498b562", [{0x0, 0xfff, {0x0, 0x9}}, {0x200, 0x3ff, {0x2, 0xfffffffd}}, {0x1, 0x3, {0x2, 0xb766}}, {0x6, 0x1, {0x2, 0x672a64c0}}, {0x6, 0x8, {0x1, 0x8}}, {0x0, 0x8000, {0x3, 0x6a3}}, {0x566, 0x3, {0x3, 0xffff}}, {0x5866, 0xf15, {0x2, 0x7}}, {0xfff8, 0x3ff, {0x0, 0x1d}}, {0x6145, 0x9, {0x3, 0x8000}}, {0x9, 0x3, {0x0, 0x8}}, {0xe, 0x0, {0x3}}, {0x53c6, 0xeef4, {0x1, 0x3}}, {0xf1, 0x7ff, {0x3, 0x9}}, {0x81, 0x7, {0x2, 0x172}}, {0x8e, 0x3, {0x1, 0xffff0001}}, {0x0, 0x86a, {0x1, 0x3}}, {0x5, 0x380, {0x2, 0x8}}, {0xfff0, 0xb2a2, {0x0, 0x6}}, {0x81, 0x4, {0x1, 0x3}}, {0x0, 0x401, {0x3, 0xe1e6063}}, {0x7, 0x2, {0x3, 0x449aea48}}, {0x8, 0x1, {0x2, 0x5}}, {0x1, 0x893, {0x2, 0x8}}, {0x9, 0x40, {0x3, 0x800}}, {0x3, 0x800, {0x3, 0xffffffff}}, {0xfff, 0xa, {0x4, 0x6}}, {0x5, 0x4, {0x3, 0x3}}, {0x100, 0xff, {0x1, 0x47e4}}, {0x101, 0x4, {0x1, 0x1}}, {0x3ff, 0x9, {0x2, 0x1}}, {0x9, 0x7, {0x3, 0x4b}}, {0x8001, 0x101, {0x3, 0x6}}, {0x9, 0x6, {0x2, 0x7}}, {0x1, 0xfff, {0x1, 0x5}}, {0xfffb, 0x0, {0x3, 0x4}}, {0x8cd8, 0x7ff, {0x3, 0xff}}, {0x2, 0x3, {0x0, 0x7f}}, {0x4, 0x6, {0x0, 0x4}}, {0x7f, 0x202, {0x2, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0xe8, 0x35, 0x5, 0x5, 0x1d, 'syz1\x00', "d6e1213df4ee0b0e0064fc80a47e25502651ed820c2ef12ca442d15655aa24b4", "733ba523ac87666d603f32fdcb82ac6bd99630ad47a31b0e8e693bcb737cbef0", [{0xf, 0x3, {0x0, 0x51b}}, {0x9, 0x400, {0x1}}, {0x7, 0x6, {0x1, 0x7}}, {0x401, 0x7, {0x3, 0x8}}, {0xffff, 0x7, {0x1, 0xbd}}, {0x7, 0x0, {0x1, 0xd}}, {0x9, 0x2, {0x0, 0x4}}, {0x2, 0x2, {0x2, 0x81}}, {0x7410, 0x101, {0x0, 0xffffffff}}, {0x7f, 0x8, {0x0, 0xa92}}, {0x2, 0x8, {0x1, 0x2}}, {0x4, 0x6, {0x1, 0x6}}, {0x8, 0x1, {0x1, 0xb}}, {0x7, 0x4, {0x1, 0x5}}, {0x5, 0x9, {0x2, 0xa}}, {0x3, 0x6, {0x3, 0x1ff}}, {0x51, 0x1, {0x1, 0x8}}, {0x7, 0x8, {0x3}}, {0x8, 0x0, {0x0, 0x7}}, {0x68, 0x6, {0x1, 0x8}}, {0x4000, 0xb, {0x0, 0xff800000}}, {0x96, 0x5c, {0x1, 0x1}}, {0xaf46, 0x4f, {0x2, 0x9}}, {0x8, 0x7, {0x0, 0x3}}, {0x6, 0x4, {0x3, 0x5f2e}}, {0xfffe, 0x6, {0x2}}, {0x91, 0x101, {0x3, 0x2}}, {0x8000, 0xa775, {0x3, 0x2}}, {0x8, 0x9, {0x1, 0x6}}, {0x53, 0x9, {0x1, 0x6b}}, {0x5, 0xa73e, {0x0, 0x5975}}, {0xff27, 0x3, {0x3, 0x1}}, {0x6, 0x2, {0x0, 0xda11}}, {0x8, 0x9, {0x1, 0x1}}, {0x1, 0x400, {0x0, 0xf}}, {0x81, 0x113f, {0x2, 0x5239}}, {0x2, 0x3, {0x3}}, {0x7db3, 0x1, {0x2, 0x19}}, {0x700, 0x171, {0x0, 0x1}}, {0x1, 0xd, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0xffff}, 0x3, 0x4, 0x7, 0x3, 0x8, 'syz1\x00', "e856eba81d93977067a7c3f65d3fa25c91a22f54ba43b561895d392aa4a49e6a", "139109d6f244d26ac0edcfbe636b62306dec7aba02282339adff55a404e122e3", [{0xfffa, 0xa42, {0x3, 0x9}}, {0xfffb, 0x401, {0x0, 0x7fff}}, {0x1, 0x2, {0x3, 0x29db}}, {0x8, 0xffff, {0x3, 0x8001}}, {0x9, 0x9, {0x3, 0x9}}, {0x3ff, 0xfa0a, {0x1}}, {0x21, 0x1ff, {0x2, 0x6}}, {0x5, 0x4, {0x0, 0x7}}, {0x0, 0x6, {0x1, 0x1}}, {0x0, 0x0, {0x1, 0xf71}}, {0x1, 0x400, {0x3, 0x1}}, {0x7f, 0x8, {0x1, 0x101}}, {0x3ff, 0x6, {0x0, 0x2}}, {0x1000, 0xd, {0x0, 0x7ff}}, {0xaf8e, 0x0, {0x2, 0x8000}}, {0x4, 0x9, {0x2, 0x401}}, {0x401, 0x4, {0x5, 0x77c78044}}, {0x7f, 0x2, {0x0, 0x6}}, {0xffff, 0xfff, {0x0, 0x6}}, {0x9, 0x3, {0x1, 0x6}}, {0x6, 0xd, {0x0, 0x1}}, {0x8, 0x0, {0x2, 0x8}}, {0x81, 0x81, {0x3, 0x6}}, {0x7, 0x5, {0x3, 0x1babda1b}}, {0x7, 0x1ff, {0x2, 0x7}}, {0x0, 0x6, {0x0, 0x2}}, {0x6, 0x7, {0x0, 0x1}}, {0x0, 0x2, {0x0, 0x4}}, {0x3, 0xc, {0x1}}, {0x3, 0x81, {0x2, 0x4}}, {0x0, 0x5, {0x2, 0x4}}, {0x8001, 0x251, {0x3, 0x5}}, {0x6, 0x9, {0x0, 0x8}}, {0x9, 0x8, {0x0, 0x2}}, {0x9, 0xa, {0x0, 0x1}}, {0x5, 0x5, {0x0, 0x8}}, {0x800, 0x8000, {0x3, 0xca6fb0}}, {0xffe2, 0x5, {0x0, 0x5}}, {0x8001, 0x4, {0x0, 0x4}}, {0x7, 0x0, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x0, 0x19, 0x8, 0x3, 0x1, 'syz1\x00', "ad10cb91feb7d4cf7496308f7e28dcb2d85481e0442c1a3f8d1bb3e0b4e1adb6", "ee463e84c57cb737f16d82e1c22c9689198002c3fe80223d2e84bc312b2c6a84", [{0xff, 0xff, {0x1, 0x3f4c}}, {0x92d, 0x8, {0x0, 0x9}}, {0x9, 0xe8f6, {0x2, 0xa}}, {0x7, 0x2, {0x2, 0x40}}, {0x28, 0x5, {0x2, 0x1}}, {0x0, 0x3}, {0xdc, 0x3, {0x0, 0x81}}, {0x824d, 0x0, {0x0, 0x9}}, {0x100, 0x0, {0x2, 0x8000}}, {0x0, 0x0, {0x1, 0xdb}}, {0x7, 0x4, {0x1, 0x7}}, {0x8, 0x8001, {0x2, 0xf617}}, {0x7, 0x980, {0x0, 0x7}}, {0x3, 0x80, {0x0, 0x1}}, {0x9e, 0x67a1, {0x3, 0x6}}, {0xf245, 0x9}, {0x8, 0x4, {0x1, 0x7}}, {0x80, 0x3f, {0x0, 0x2}}, {0x0, 0x40, {0x3, 0x2}}, {0x401, 0xffff, {0x0, 0x7ff}}, {0x2, 0x2, {0x3, 0x1}}, {0x8, 0x8, {0x0, 0x401}}, {0xdb66, 0x7, {0x0, 0x4}}, {0x8, 0x3, {0x2, 0x2c}}, {0x1, 0x0, {0x1, 0x4}}, {0xe0, 0x1, {0x3, 0xffffffff}}, {0x0, 0x1, {0x3, 0xb92}}, {0x9, 0xcc, {0x1, 0xfc41}}, {0x5, 0x0, {0x0, 0x3}}, {0x7, 0x2, {0x2, 0x6}}, {0x3, 0x2}, {0x9, 0x4, {0x0, 0x1}}, {0x1, 0x1}, {0xfff, 0x0, {0x3, 0x90}}, {0x5, 0x4, {0x2, 0x2}}, {0x1, 0x6, {0x0, 0x1}}, {0x1, 0xbc, {0x1, 0x6}}, {0x5, 0xeb4, {0x1, 0x2}}, {0x200, 0x8, {0x1, 0xf}}, {0x5, 0x1, {0x0, 0x159}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x68, 0x9, 0x0, 0x0, 0x1e, 'syz0\x00', "32eca790dfff6f2295af30e623173253c0ccf315be2d437f0c58466d02bc5de5", "8b3b649533e4d3c22c5ff107288c0b1196a433913b5f0deafcebc88de31df976", [{0x3, 0x101, {0x3, 0x7}}, {0x2f3c, 0x4, {0x0, 0xffff}}, {0x7a62, 0x7fff, {0x3, 0x394}}, {0x4, 0x2, {0x3, 0x400}}, {0x54b, 0x7, {0x3, 0x80000001}}, {0x5, 0x7, {0x1, 0x3}}, {0x7f, 0x39cd, {0x3, 0x7f}}, {0x2, 0x7, {0x3}}, {0x7, 0x8000, {0x1, 0x4}}, {0x1, 0x53, {0x3}}, {0x2, 0x1, {0x2, 0x80}}, {0x5, 0x5, {0x2, 0x4}}, {0x6, 0x6, {0x1, 0x1}}, {0x5, 0xff76, {0x0, 0x4}}, {0x9, 0x1, {0x1, 0x6}}, {0x2, 0x8001, {0x2, 0xe}}, {0x4, 0x2, {0x3, 0x8}}, {0x2, 0xa71, {0x2, 0x9}}, {0xf, 0xf8f, {0x3, 0x301}}, {0xfff9, 0x7, {0x3, 0x9}}, {0x5, 0x4, {0x1, 0x1}}, {0xa, 0x40, {0x3, 0x6}}, {0xa2, 0x5e, {0x1, 0x3}}, {0x40, 0x875, {0x2, 0x5}}, {0x8, 0xd9, {0x0, 0xfffffff7}}, {0x6, 0x100, {0x2, 0x10}}, {0x1081, 0xc, {0x1, 0x4}}, {0xff79, 0xb4e, {0x0, 0x1}}, {0x6, 0x1, {0x2}}, {0x0, 0xa3, {0x1, 0x1}}, {0x5, 0x1ff, {0x2, 0x2}}, {0x6, 0x2, {0x3, 0x5}}, {0x7fff, 0xc87, {0x1, 0x3}}, {0x8, 0xf, {0x3, 0x10000}}, {0x8, 0x4, {0x0, 0x5}}, {0xfff8, 0x7f}, {0x4, 0x7, {0x1, 0x800}}, {0x1a6, 0x2000, {0x0, 0xfffffff0}}, {0x7, 0x3, {0x3, 0x10001}}, {0x7ff, 0x0, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x200}, 0x9, 0x5, 0x0, 0xa935, 0x1f, 'syz0\x00', "5c67223da6914196beb500f77997b8169b56013946159aa7c25e21211b7bc5ca", "b0ecfb1ae37a54d543513e1b6abc48f3672a9e76264e1e0bfedc765548134d98", [{0x1000, 0x5, {0x2, 0x100000}}, {0x6f6, 0x3, {0x3, 0xff}}, {0x7, 0x100, {0x1, 0xf33}}, {0xe2, 0x8, {0x2, 0x14}}, {0x12, 0x0, {0x3, 0x3}}, {0xcfe, 0x1, {0x0, 0x7f}}, {0x0, 0x3, {0x2, 0x3}}, {0x7, 0x9, {0x3, 0x4}}, {0x3bf2, 0x818d, {0x2, 0x7}}, {0x4, 0xe6, {0x2, 0x10}}, {0x5, 0x1, {0x0, 0x9}}, {0xb, 0x1ff, {0x0, 0x22ba}}, {0x800, 0x7, {0x3, 0x7822}}, {0x800, 0x3, {0x0, 0x1}}, {0x8, 0x8, {0x3, 0x4}}, {0x200, 0x9, {0x2, 0x800}}, {0x8c, 0xa, {0x0, 0x3}}, {0xfff7, 0x585, {0x1, 0x2}}, {0x3, 0x7ff, {0x2, 0x5}}, {0x1, 0x8001, {0x1, 0xfffffbff}}, {0x3, 0x0, {0x3, 0xeb64}}, {0x1, 0x9, {0x2, 0x1}}, {0x4, 0x4, {0x0, 0x80}}, {0x81, 0x6, {0x1, 0x4}}, {0x3, 0xefe3, {0x3, 0x1}}, {0x9, 0x2, {0x3, 0x4}}, {0x9ba1, 0x5, {0x3}}, {0x8, 0x1, {0x1}}, {0x4, 0xa, {0x0, 0xfffffffd}}, {0x1a17, 0x8001, {0x2, 0xe}}, {0x401, 0x2, {0x1, 0xdbfc}}, {0x3, 0x9, {0x3, 0x401}}, {0x3, 0x9, {0x0, 0x9}}, {0x27, 0x6, {0x1, 0x7}}, {0xc98a, 0x6, {0x1, 0x9}}, {0x9, 0x2, {0x2, 0xffffffc0}}, {0x7f, 0xf0, {0x2, 0x4d4}}, {0x1ff, 0x6, {0x2, 0x8}}, {0xf9a, 0x7fff, {0x2, 0x6}}, {0x35, 0xf1, {0x3, 0x6029}}]}}}, {{0x254, 0x1, {{0x0, 0x40}, 0xc, 0x40, 0x1, 0x7ff, 0x11, 'syz1\x00', "24709781cfcc99e8a17351f0c8c3cdbcbcb17a71e49b87036b29a7ae4708ee91", "908a1f9e780fee5f81388a3c922ffc7215640cbc026f81b5666e07f1ca710eec", [{0xd, 0x7a, {0x0, 0x6}}, {0x5, 0x69, {0x1, 0x5}}, {0x9, 0x0, {0x1, 0x5b4}}, {0x6, 0x6, {0x0, 0x4}}, {0x3, 0xfff8, {0x1, 0xdc30}}, {0x2, 0x7, {0x2, 0x6}}, {0xedd2, 0x5, {0x3, 0x450}}, {0x6, 0x3, {0x3, 0xec06}}, {0x7, 0x8001, {0x3, 0x4}}, {0xeff, 0x7, {0x3, 0x4}}, {0x7, 0x5, {0x0, 0x4}}, {0x6, 0x3ff, {0x0, 0xfffffffa}}, {0x5d1, 0x5, {0x2}}, {0x7, 0x6, {0x3, 0x7fffffff}}, {0x7, 0x6, {0x1, 0xff}}, {0x6, 0x5, {0x2, 0x80000000}}, {0x3, 0x5, {0x2}}, {0x269e, 0xfffd, {0x3}}, {0x8, 0x205, {0x3, 0x8b76}}, {0x8, 0x1000, {0x0, 0x32e4}}, {0x7f, 0x5, {0x2, 0xffffffb8}}, {0x8dad, 0x0, {0x1, 0x6}}, {0xf7, 0xe, {0x3, 0xfffffff9}}, {0xe01, 0xff, {0x2, 0x3}}, {0x8, 0x6, {0x3, 0x9}}, {0x100, 0x800, {0x0, 0x8}}, {0x2, 0x28, {0x2, 0x7}}, {0xe, 0x4, {0x3, 0x200}}, {0x3, 0x4941, {0x1, 0x401}}, {0xff, 0x800, {0x1, 0x1000}}, {0x5, 0xf986, {0x0, 0xee6}}, {0x5, 0x7, {0x3, 0x748b}}, {0x2, 0x5, {0x0, 0x193}}, {0x196, 0x5, {0x0, 0x4}}, {0xd465, 0x8000, {0x2, 0x1}}, {0x0, 0x8001, {0x0, 0x6}}, {0x0, 0x8, {0x0, 0xffff}}, {0x5, 0xd, {0x3, 0x5}}, {0x88d, 0xca9, {0x0, 0x4}}, {0x400, 0x7, {0x0, 0x5}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001cc0), r6) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x28, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) (async) mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xe0, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6c}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfd}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x3c, r9, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "6c445557406ae69947e1d38578e76189"}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x7c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x101}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24048844) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002300), r6) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4687c0ded62a91e0}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, r12, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) 1m4.273428787s ago: executing program 8 (id=1450): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xdcdf, @loopback}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={r2, 0x5}, 0x8) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/138, 0x8a}], 0x1, 0x6, 0x45) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x6}, &(0x7f0000000340)=0x90) 1m3.97455509s ago: executing program 8 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (fail_nth: 5) 1m3.48676562s ago: executing program 8 (id=1473): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, 0x0) mount$afs(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x7ff, 0x12) 1m2.414929344s ago: executing program 8 (id=1474): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x2e) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000010c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./dev\x00', &(0x7f0000000ec0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./mnt\x00', 0x0) mount(&(0x7f0000001380)=@filename='./dev/sda1\x00', &(0x7f00000013c0)='./mnt\x00', &(0x7f0000001400)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000001480)={0x80}) sendmmsg$inet(r1, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x33e) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x57e, 0x200e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x6, 0x80, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x3, 0x1}}}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0xb8, 0xf8, 0x2, 0x8, 0x1}, 0x5, &(0x7f0000000980)={0x5, 0xf, 0x5}, 0xa, [{0xe5, &(0x7f00000009c0)=@string={0xe5, 0x3, "dc1b422d216b25b9deb2505d16fd3ecba1d6a6317dbae947831e20249b81605d2a61bd24156c990bf6f58cd56a4c310008dccdd8e69888365b3c91ca9cf757f2eca07fe0acb08064bbda5ee9b774e715f2f52c3f65a65cd725aca78dec7fd435b3557243939626daab1ca9261cff48fd6609ecb99031269b46583b1467cc99f08bf8dbfffa853749b6468bf1198363ecdf06816d61e1777acdbcd51eb2fc31d32fd5707e2bc2dd4aed7eb4b6bb8b8267c58e36783bac3339bceaa5e2a4b9c8fd1b00130ebb9f986a0813f0479dd7abf2a76163f45047acc7da3678ac72313daf670a3b"}}, {0x2c, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3815}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x438}}, {0xf1, &(0x7f0000000b80)=@string={0xf1, 0x3, "9e83af4076f32517cbcdceafd1abb59e5bac4b3cece7a5c9002685fe222052af73e03a32d93033675cb23f0ac250c58284da8abe6c6e175129c65dde030b927bc0887c5619d2206ff8b4b95157a80854b7f5831a4ab1e40b43ba600efafb3311b78ad3600753ac37b7793aaa35b7d255486569ed089910898d4e2b6a96e15d25f03735913428a8f4b3ebbff9acc807f25fdf8ef887c6762ff35090409668d6038ac84f08e36f40b394a14a191ffee685557112576d97fc6de0bc4bfc54a3efd99479243cbf3c91ff556a72d703dbb8fd6f85370cfd04f71895651c7ebd998ab7064a4ad77fc3fb33c4f0fa0b9bad6e"}}, {0xf0, &(0x7f0000000c80)=ANY=[@ANYBLOB="f003a2d0da661b2f74fd36073b874814b5836382428af3285094b7e52035f7d5f0b1b65f6cc795977ca999995dba1390b43f19072ad2eb6b4c3fddd470afc5711f06d4afd665e5169c878ee170e91d063be8e8ce2b3c67966068d5f89768e60dba7c5ef5a0f856913c01009339d2f1af4d7506eb30c5b8f33ac4cad55a1cc82c71e852fd80ec9d5dd611cfe25f5f41c8399fa15d0c541c24740616b38b8441f07f33f73e156284e5125b3f05031c592b787e847fa1752a7888d9f6ddf4c71c0e2b3ce8e9f0ad157618c5e7dcd4043751a3e68643077a98a29a95e9d358a69420fb8c024e730a3a019dab94ee819aa228"]}, {0xa2, &(0x7f0000000d80)=@string={0xa2, 0x3, "06d334fe8787d08ad255ddf63d7ee027f0830c9cc1e6d1261a7264edccedad0c69405b2fd198fdee4f8dbfa1454f62cd0b276123a22df422fdcc48555852bcb1863713bac591c2dcbbcbeaee6b866616b30f3113c63bdd71f8230eeada6310b01b66c537f71220fbf03cc79345eb4d23f1d3071e758581f935ec954e306f830d6bc525400e9c6232957f3dec395dacb530eb3df25de41c84cdfd025f4a188564"}}, {0xb5, &(0x7f0000001200)=ANY=[@ANYBLOB="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"]}, {0x27, &(0x7f0000000f00)=@string={0x27, 0x3, "2f8199dba30a3cae74a9dca4a841948daa3e77cc4adac36dfe4ea74404f14bf7c72ed7161a"}}, {0xa6, &(0x7f0000000f40)=@string={0xa6, 0x3, "b7f10bdd460490dc4ba20242cedaa7f91c4526337c0541877ea09b377dd03255cb4a3f1c0833faefeb49f33c64f679d37e82e975b46f7439f517cc7be2d870a9111558c63aa58da510049f532fe3fc3d1a4c6a5f524dae602e43d86b4f51582e46b6d8c3d8c0301081be05fd61f030dc1973e4a440e1098cebe8b93dca23e402cb39395cfda86fca0dc70c08553a5077b73a0df2afa6549c155884df3d6a72e325f023c6"}}]}) syz_usb_connect(0x1, 0x3d, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f0000001180)=[{&(0x7f00000011c0)="d6", 0x1}], 0x1) read$char_usb(r3, &(0x7f0000001540)=""/231, 0xe7) read$char_usb(r3, &(0x7f0000000200)=""/186, 0x110) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000300)=0x8, 0x4) sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000100)="ca973d1ed19f48a899c06d053fb72720cabcae327dff2abf889d39ccb577201f8de8e72b80d05d34be8296dcbe6a5c45dc5965ea4841a15391d95378bb10e85dee523d12ebb247c4da7ee001889aa391df60cffe97f15b2bdff9dffc81d17dfb48a5051ee067"}, {&(0x7f00000003c0)="a6cb4aeff9229ae770242816a69df429838adb4cf3b77bd7984cf258d08a4f32b537f80d271cef21b62377ae157db0db48fb1eb61dcff814438ccbdbbf749cae8bceb82ed9e8f83047d9d71c23fea36f025237cf3b0487d36cf634499691388dcc65509ee43ac319d2e6cd5a6f1df8d86a2b42aec2a2c03c3a3f236bfa9c05632b05f945a738bfb900eb4eb5c6f81d62c55bcdc04313e4c5cf10630487519b5013cafcaba2c273f004"}, {&(0x7f0000000480)="930b5189cb9f4d623f1c37b7ced558fb71dae947176dc74efa0c46a46a128ecab2f7e0dc8fa40f54f391cadb7a510212b2e30493d0fcae29ee6da39fc96aa64ca3047245bf222a93e4deca7fbe9d64df08e03fa2a44c9a67c49252959b2e5587116588d5615ff335db52d1cc08a112148a2897c55b5b8f62984da82973a46d"}, {&(0x7f0000000500)="24eb9f447da48d41b20ee41d07f8ef1b0c8eaa512fab1add25e727ef9ff800be294b17e4a87b0e58623c5e98a4d0dc2f02aca3415670819d81d63d521fe999c9635d83ee806f"}, {&(0x7f0000000580)="d040ac375a99de0f502addca1286f2a4dea02efd924e2c6b"}, {&(0x7f00000005c0)="2c7cfa2ac38969957f99c55165e74cbe4f9de09b6a733f1ab5726f9019cec21a9fd8fc5a0b12c72d40ded6c1ba05754e8f57f2b697bc138c38807e067140fb705b40c2a5fbd60845e6dc618e47fe9637ef682ff4fd6645b2d2f7d4cb7fca6329a0d4a255383adce73c46954b9d32b2c461e2bb04a8872df11b6409c768dddc70021287e31f3b7dc7af25e546240a6c3d1d5e91202f2b31f2e954b5deba7118d316a04bf63bfb6785901f887120a2cba0cc17481f2112dee2b4f9531afa066e"}], 0x0, 0x0, 0xffffffffffffff8c}}], 0x1, 0x40000) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0xe1499000) syz_usb_disconnect(0xffffffffffffffff) r6 = memfd_create(&(0x7f0000000000)='%\x00', 0x3) fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010004000000000002000600", @ANYRES32=0x0, @ANYBLOB="040000000000000010000364b232bd0020000000000000aa"], 0x34, 0x2) syz_usb_disconnect(0xffffffffffffffff) 1m1.173240029s ago: executing program 7 (id=1453): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000880)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000940)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000000cc0)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1", 0xe7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m0.778333734s ago: executing program 7 (id=1475): r0 = gettid() timer_create(0x0, &(0x7f0000000880)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f00000008c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000900)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x2000090, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/../file0\x00', 0x240) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0x58, 0xa) 59.754229713s ago: executing program 7 (id=1478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0x10, &(0x7f00000018c0)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000001940)=0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a", 0x25, 0x4008040, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='nfs\x00', 0x0, &(0x7f0000000540)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00r1}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r6, 0x40}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0) write(r7, &(0x7f0000000400)='3', 0x1) write$FUSE_BMAP(r7, &(0x7f0000000440)={0x18, 0x0, 0x0, {0x80000000}}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001a40)={r1, 0x20, &(0x7f0000001980)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000001a80)=0x10) 59.372295184s ago: executing program 7 (id=1479): socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/reboot/type\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') sendfile(r0, r0, 0x0, 0xffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_create_resource$futex(&(0x7f0000000000)) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, 0x0) 58.6842608s ago: executing program 47 (id=1479): socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/reboot/type\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') sendfile(r0, r0, 0x0, 0xffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_create_resource$futex(&(0x7f0000000000)) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, 0x0) 53.955626719s ago: executing program 48 (id=1471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x40) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014) (async) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r7, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x28}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0xf0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x8e}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x4}}]}, 0x154}, 0x1, 0x0, 0x0, 0x400}, 0x4000) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x14467bc2be8d8582) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfd}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x59}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r9, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c4}, 0x5) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000001c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8c08000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000b80)={0x1060, 0x0, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x1ff}, 0x3, 0x8, 0xb, 0x1, 0x1c, 'syz0\x00', "ac0a41282db2511e2d4ce65da13ba29b553cd41abbb526922414f7657bff1ea7", "c0b9538799f32db140d8b515dd0f2b12f622b4906522decedebd33483498b562", [{0x0, 0xfff, {0x0, 0x9}}, {0x200, 0x3ff, {0x2, 0xfffffffd}}, {0x1, 0x3, {0x2, 0xb766}}, {0x6, 0x1, {0x2, 0x672a64c0}}, {0x6, 0x8, {0x1, 0x8}}, {0x0, 0x8000, {0x3, 0x6a3}}, {0x566, 0x3, {0x3, 0xffff}}, {0x5866, 0xf15, {0x2, 0x7}}, {0xfff8, 0x3ff, {0x0, 0x1d}}, {0x6145, 0x9, {0x3, 0x8000}}, {0x9, 0x3, {0x0, 0x8}}, {0xe, 0x0, {0x3}}, {0x53c6, 0xeef4, {0x1, 0x3}}, {0xf1, 0x7ff, {0x3, 0x9}}, {0x81, 0x7, {0x2, 0x172}}, {0x8e, 0x3, {0x1, 0xffff0001}}, {0x0, 0x86a, {0x1, 0x3}}, {0x5, 0x380, {0x2, 0x8}}, {0xfff0, 0xb2a2, {0x0, 0x6}}, {0x81, 0x4, {0x1, 0x3}}, {0x0, 0x401, {0x3, 0xe1e6063}}, {0x7, 0x2, {0x3, 0x449aea48}}, {0x8, 0x1, {0x2, 0x5}}, {0x1, 0x893, {0x2, 0x8}}, {0x9, 0x40, {0x3, 0x800}}, {0x3, 0x800, {0x3, 0xffffffff}}, {0xfff, 0xa, {0x4, 0x6}}, {0x5, 0x4, {0x3, 0x3}}, {0x100, 0xff, {0x1, 0x47e4}}, {0x101, 0x4, {0x1, 0x1}}, {0x3ff, 0x9, {0x2, 0x1}}, {0x9, 0x7, {0x3, 0x4b}}, {0x8001, 0x101, {0x3, 0x6}}, {0x9, 0x6, {0x2, 0x7}}, {0x1, 0xfff, {0x1, 0x5}}, {0xfffb, 0x0, {0x3, 0x4}}, {0x8cd8, 0x7ff, {0x3, 0xff}}, {0x2, 0x3, {0x0, 0x7f}}, {0x4, 0x6, {0x0, 0x4}}, {0x7f, 0x202, {0x2, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0xe8, 0x35, 0x5, 0x5, 0x1d, 'syz1\x00', "d6e1213df4ee0b0e0064fc80a47e25502651ed820c2ef12ca442d15655aa24b4", "733ba523ac87666d603f32fdcb82ac6bd99630ad47a31b0e8e693bcb737cbef0", [{0xf, 0x3, {0x0, 0x51b}}, {0x9, 0x400, {0x1}}, {0x7, 0x6, {0x1, 0x7}}, {0x401, 0x7, {0x3, 0x8}}, {0xffff, 0x7, {0x1, 0xbd}}, {0x7, 0x0, {0x1, 0xd}}, {0x9, 0x2, {0x0, 0x4}}, {0x2, 0x2, {0x2, 0x81}}, {0x7410, 0x101, {0x0, 0xffffffff}}, {0x7f, 0x8, {0x0, 0xa92}}, {0x2, 0x8, {0x1, 0x2}}, {0x4, 0x6, {0x1, 0x6}}, {0x8, 0x1, {0x1, 0xb}}, {0x7, 0x4, {0x1, 0x5}}, {0x5, 0x9, {0x2, 0xa}}, {0x3, 0x6, {0x3, 0x1ff}}, {0x51, 0x1, {0x1, 0x8}}, {0x7, 0x8, {0x3}}, {0x8, 0x0, {0x0, 0x7}}, {0x68, 0x6, {0x1, 0x8}}, {0x4000, 0xb, {0x0, 0xff800000}}, {0x96, 0x5c, {0x1, 0x1}}, {0xaf46, 0x4f, {0x2, 0x9}}, {0x8, 0x7, {0x0, 0x3}}, {0x6, 0x4, {0x3, 0x5f2e}}, {0xfffe, 0x6, {0x2}}, {0x91, 0x101, {0x3, 0x2}}, {0x8000, 0xa775, {0x3, 0x2}}, {0x8, 0x9, {0x1, 0x6}}, {0x53, 0x9, {0x1, 0x6b}}, {0x5, 0xa73e, {0x0, 0x5975}}, {0xff27, 0x3, {0x3, 0x1}}, {0x6, 0x2, {0x0, 0xda11}}, {0x8, 0x9, {0x1, 0x1}}, {0x1, 0x400, {0x0, 0xf}}, {0x81, 0x113f, {0x2, 0x5239}}, {0x2, 0x3, {0x3}}, {0x7db3, 0x1, {0x2, 0x19}}, {0x700, 0x171, {0x0, 0x1}}, {0x1, 0xd, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0xffff}, 0x3, 0x4, 0x7, 0x3, 0x8, 'syz1\x00', "e856eba81d93977067a7c3f65d3fa25c91a22f54ba43b561895d392aa4a49e6a", "139109d6f244d26ac0edcfbe636b62306dec7aba02282339adff55a404e122e3", [{0xfffa, 0xa42, {0x3, 0x9}}, {0xfffb, 0x401, {0x0, 0x7fff}}, {0x1, 0x2, {0x3, 0x29db}}, {0x8, 0xffff, {0x3, 0x8001}}, {0x9, 0x9, {0x3, 0x9}}, {0x3ff, 0xfa0a, {0x1}}, {0x21, 0x1ff, {0x2, 0x6}}, {0x5, 0x4, {0x0, 0x7}}, {0x0, 0x6, {0x1, 0x1}}, {0x0, 0x0, {0x1, 0xf71}}, {0x1, 0x400, {0x3, 0x1}}, {0x7f, 0x8, {0x1, 0x101}}, {0x3ff, 0x6, {0x0, 0x2}}, {0x1000, 0xd, {0x0, 0x7ff}}, {0xaf8e, 0x0, {0x2, 0x8000}}, {0x4, 0x9, {0x2, 0x401}}, {0x401, 0x4, {0x5, 0x77c78044}}, {0x7f, 0x2, {0x0, 0x6}}, {0xffff, 0xfff, {0x0, 0x6}}, {0x9, 0x3, {0x1, 0x6}}, {0x6, 0xd, {0x0, 0x1}}, {0x8, 0x0, {0x2, 0x8}}, {0x81, 0x81, {0x3, 0x6}}, {0x7, 0x5, {0x3, 0x1babda1b}}, {0x7, 0x1ff, {0x2, 0x7}}, {0x0, 0x6, {0x0, 0x2}}, {0x6, 0x7, {0x0, 0x1}}, {0x0, 0x2, {0x0, 0x4}}, {0x3, 0xc, {0x1}}, {0x3, 0x81, {0x2, 0x4}}, {0x0, 0x5, {0x2, 0x4}}, {0x8001, 0x251, {0x3, 0x5}}, {0x6, 0x9, {0x0, 0x8}}, {0x9, 0x8, {0x0, 0x2}}, {0x9, 0xa, {0x0, 0x1}}, {0x5, 0x5, {0x0, 0x8}}, {0x800, 0x8000, {0x3, 0xca6fb0}}, {0xffe2, 0x5, {0x0, 0x5}}, {0x8001, 0x4, {0x0, 0x4}}, {0x7, 0x0, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x0, 0x19, 0x8, 0x3, 0x1, 'syz1\x00', "ad10cb91feb7d4cf7496308f7e28dcb2d85481e0442c1a3f8d1bb3e0b4e1adb6", "ee463e84c57cb737f16d82e1c22c9689198002c3fe80223d2e84bc312b2c6a84", [{0xff, 0xff, {0x1, 0x3f4c}}, {0x92d, 0x8, {0x0, 0x9}}, {0x9, 0xe8f6, {0x2, 0xa}}, {0x7, 0x2, {0x2, 0x40}}, {0x28, 0x5, {0x2, 0x1}}, {0x0, 0x3}, {0xdc, 0x3, {0x0, 0x81}}, {0x824d, 0x0, {0x0, 0x9}}, {0x100, 0x0, {0x2, 0x8000}}, {0x0, 0x0, {0x1, 0xdb}}, {0x7, 0x4, {0x1, 0x7}}, {0x8, 0x8001, {0x2, 0xf617}}, {0x7, 0x980, {0x0, 0x7}}, {0x3, 0x80, {0x0, 0x1}}, {0x9e, 0x67a1, {0x3, 0x6}}, {0xf245, 0x9}, {0x8, 0x4, {0x1, 0x7}}, {0x80, 0x3f, {0x0, 0x2}}, {0x0, 0x40, {0x3, 0x2}}, {0x401, 0xffff, {0x0, 0x7ff}}, {0x2, 0x2, {0x3, 0x1}}, {0x8, 0x8, {0x0, 0x401}}, {0xdb66, 0x7, {0x0, 0x4}}, {0x8, 0x3, {0x2, 0x2c}}, {0x1, 0x0, {0x1, 0x4}}, {0xe0, 0x1, {0x3, 0xffffffff}}, {0x0, 0x1, {0x3, 0xb92}}, {0x9, 0xcc, {0x1, 0xfc41}}, {0x5, 0x0, {0x0, 0x3}}, {0x7, 0x2, {0x2, 0x6}}, {0x3, 0x2}, {0x9, 0x4, {0x0, 0x1}}, {0x1, 0x1}, {0xfff, 0x0, {0x3, 0x90}}, {0x5, 0x4, {0x2, 0x2}}, {0x1, 0x6, {0x0, 0x1}}, {0x1, 0xbc, {0x1, 0x6}}, {0x5, 0xeb4, {0x1, 0x2}}, {0x200, 0x8, {0x1, 0xf}}, {0x5, 0x1, {0x0, 0x159}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x68, 0x9, 0x0, 0x0, 0x1e, 'syz0\x00', "32eca790dfff6f2295af30e623173253c0ccf315be2d437f0c58466d02bc5de5", "8b3b649533e4d3c22c5ff107288c0b1196a433913b5f0deafcebc88de31df976", [{0x3, 0x101, {0x3, 0x7}}, {0x2f3c, 0x4, {0x0, 0xffff}}, {0x7a62, 0x7fff, {0x3, 0x394}}, {0x4, 0x2, {0x3, 0x400}}, {0x54b, 0x7, {0x3, 0x80000001}}, {0x5, 0x7, {0x1, 0x3}}, {0x7f, 0x39cd, {0x3, 0x7f}}, {0x2, 0x7, {0x3}}, {0x7, 0x8000, {0x1, 0x4}}, {0x1, 0x53, {0x3}}, {0x2, 0x1, {0x2, 0x80}}, {0x5, 0x5, {0x2, 0x4}}, {0x6, 0x6, {0x1, 0x1}}, {0x5, 0xff76, {0x0, 0x4}}, {0x9, 0x1, {0x1, 0x6}}, {0x2, 0x8001, {0x2, 0xe}}, {0x4, 0x2, {0x3, 0x8}}, {0x2, 0xa71, {0x2, 0x9}}, {0xf, 0xf8f, {0x3, 0x301}}, {0xfff9, 0x7, {0x3, 0x9}}, {0x5, 0x4, {0x1, 0x1}}, {0xa, 0x40, {0x3, 0x6}}, {0xa2, 0x5e, {0x1, 0x3}}, {0x40, 0x875, {0x2, 0x5}}, {0x8, 0xd9, {0x0, 0xfffffff7}}, {0x6, 0x100, {0x2, 0x10}}, {0x1081, 0xc, {0x1, 0x4}}, {0xff79, 0xb4e, {0x0, 0x1}}, {0x6, 0x1, {0x2}}, {0x0, 0xa3, {0x1, 0x1}}, {0x5, 0x1ff, {0x2, 0x2}}, {0x6, 0x2, {0x3, 0x5}}, {0x7fff, 0xc87, {0x1, 0x3}}, {0x8, 0xf, {0x3, 0x10000}}, {0x8, 0x4, {0x0, 0x5}}, {0xfff8, 0x7f}, {0x4, 0x7, {0x1, 0x800}}, {0x1a6, 0x2000, {0x0, 0xfffffff0}}, {0x7, 0x3, {0x3, 0x10001}}, {0x7ff, 0x0, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x200}, 0x9, 0x5, 0x0, 0xa935, 0x1f, 'syz0\x00', "5c67223da6914196beb500f77997b8169b56013946159aa7c25e21211b7bc5ca", "b0ecfb1ae37a54d543513e1b6abc48f3672a9e76264e1e0bfedc765548134d98", [{0x1000, 0x5, {0x2, 0x100000}}, {0x6f6, 0x3, {0x3, 0xff}}, {0x7, 0x100, {0x1, 0xf33}}, {0xe2, 0x8, {0x2, 0x14}}, {0x12, 0x0, {0x3, 0x3}}, {0xcfe, 0x1, {0x0, 0x7f}}, {0x0, 0x3, {0x2, 0x3}}, {0x7, 0x9, {0x3, 0x4}}, {0x3bf2, 0x818d, {0x2, 0x7}}, {0x4, 0xe6, {0x2, 0x10}}, {0x5, 0x1, {0x0, 0x9}}, {0xb, 0x1ff, {0x0, 0x22ba}}, {0x800, 0x7, {0x3, 0x7822}}, {0x800, 0x3, {0x0, 0x1}}, {0x8, 0x8, {0x3, 0x4}}, {0x200, 0x9, {0x2, 0x800}}, {0x8c, 0xa, {0x0, 0x3}}, {0xfff7, 0x585, {0x1, 0x2}}, {0x3, 0x7ff, {0x2, 0x5}}, {0x1, 0x8001, {0x1, 0xfffffbff}}, {0x3, 0x0, {0x3, 0xeb64}}, {0x1, 0x9, {0x2, 0x1}}, {0x4, 0x4, {0x0, 0x80}}, {0x81, 0x6, {0x1, 0x4}}, {0x3, 0xefe3, {0x3, 0x1}}, {0x9, 0x2, {0x3, 0x4}}, {0x9ba1, 0x5, {0x3}}, {0x8, 0x1, {0x1}}, {0x4, 0xa, {0x0, 0xfffffffd}}, {0x1a17, 0x8001, {0x2, 0xe}}, {0x401, 0x2, {0x1, 0xdbfc}}, {0x3, 0x9, {0x3, 0x401}}, {0x3, 0x9, {0x0, 0x9}}, {0x27, 0x6, {0x1, 0x7}}, {0xc98a, 0x6, {0x1, 0x9}}, {0x9, 0x2, {0x2, 0xffffffc0}}, {0x7f, 0xf0, {0x2, 0x4d4}}, {0x1ff, 0x6, {0x2, 0x8}}, {0xf9a, 0x7fff, {0x2, 0x6}}, {0x35, 0xf1, {0x3, 0x6029}}]}}}, {{0x254, 0x1, {{0x0, 0x40}, 0xc, 0x40, 0x1, 0x7ff, 0x11, 'syz1\x00', "24709781cfcc99e8a17351f0c8c3cdbcbcb17a71e49b87036b29a7ae4708ee91", "908a1f9e780fee5f81388a3c922ffc7215640cbc026f81b5666e07f1ca710eec", [{0xd, 0x7a, {0x0, 0x6}}, {0x5, 0x69, {0x1, 0x5}}, {0x9, 0x0, {0x1, 0x5b4}}, {0x6, 0x6, {0x0, 0x4}}, {0x3, 0xfff8, {0x1, 0xdc30}}, {0x2, 0x7, {0x2, 0x6}}, {0xedd2, 0x5, {0x3, 0x450}}, {0x6, 0x3, {0x3, 0xec06}}, {0x7, 0x8001, {0x3, 0x4}}, {0xeff, 0x7, {0x3, 0x4}}, {0x7, 0x5, {0x0, 0x4}}, {0x6, 0x3ff, {0x0, 0xfffffffa}}, {0x5d1, 0x5, {0x2}}, {0x7, 0x6, {0x3, 0x7fffffff}}, {0x7, 0x6, {0x1, 0xff}}, {0x6, 0x5, {0x2, 0x80000000}}, {0x3, 0x5, {0x2}}, {0x269e, 0xfffd, {0x3}}, {0x8, 0x205, {0x3, 0x8b76}}, {0x8, 0x1000, {0x0, 0x32e4}}, {0x7f, 0x5, {0x2, 0xffffffb8}}, {0x8dad, 0x0, {0x1, 0x6}}, {0xf7, 0xe, {0x3, 0xfffffff9}}, {0xe01, 0xff, {0x2, 0x3}}, {0x8, 0x6, {0x3, 0x9}}, {0x100, 0x800, {0x0, 0x8}}, {0x2, 0x28, {0x2, 0x7}}, {0xe, 0x4, {0x3, 0x200}}, {0x3, 0x4941, {0x1, 0x401}}, {0xff, 0x800, {0x1, 0x1000}}, {0x5, 0xf986, {0x0, 0xee6}}, {0x5, 0x7, {0x3, 0x748b}}, {0x2, 0x5, {0x0, 0x193}}, {0x196, 0x5, {0x0, 0x4}}, {0xd465, 0x8000, {0x2, 0x1}}, {0x0, 0x8001, {0x0, 0x6}}, {0x0, 0x8, {0x0, 0xffff}}, {0x5, 0xd, {0x3, 0x5}}, {0x88d, 0xca9, {0x0, 0x4}}, {0x400, 0x7, {0x0, 0x5}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001cc0), r6) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x28, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) (async) mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xe0, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6c}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfd}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x3c, r9, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "6c445557406ae69947e1d38578e76189"}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x7c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x101}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24048844) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002300), r6) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4687c0ded62a91e0}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, r12, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) 46.812685055s ago: executing program 49 (id=1474): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x2e) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000010c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./dev\x00', &(0x7f0000000ec0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./mnt\x00', 0x0) mount(&(0x7f0000001380)=@filename='./dev/sda1\x00', &(0x7f00000013c0)='./mnt\x00', &(0x7f0000001400)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000001480)={0x80}) sendmmsg$inet(r1, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x33e) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x57e, 0x200e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x6, 0x80, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x3, 0x1}}}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0xb8, 0xf8, 0x2, 0x8, 0x1}, 0x5, &(0x7f0000000980)={0x5, 0xf, 0x5}, 0xa, [{0xe5, &(0x7f00000009c0)=@string={0xe5, 0x3, "dc1b422d216b25b9deb2505d16fd3ecba1d6a6317dbae947831e20249b81605d2a61bd24156c990bf6f58cd56a4c310008dccdd8e69888365b3c91ca9cf757f2eca07fe0acb08064bbda5ee9b774e715f2f52c3f65a65cd725aca78dec7fd435b3557243939626daab1ca9261cff48fd6609ecb99031269b46583b1467cc99f08bf8dbfffa853749b6468bf1198363ecdf06816d61e1777acdbcd51eb2fc31d32fd5707e2bc2dd4aed7eb4b6bb8b8267c58e36783bac3339bceaa5e2a4b9c8fd1b00130ebb9f986a0813f0479dd7abf2a76163f45047acc7da3678ac72313daf670a3b"}}, {0x2c, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3815}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x438}}, {0xf1, &(0x7f0000000b80)=@string={0xf1, 0x3, "9e83af4076f32517cbcdceafd1abb59e5bac4b3cece7a5c9002685fe222052af73e03a32d93033675cb23f0ac250c58284da8abe6c6e175129c65dde030b927bc0887c5619d2206ff8b4b95157a80854b7f5831a4ab1e40b43ba600efafb3311b78ad3600753ac37b7793aaa35b7d255486569ed089910898d4e2b6a96e15d25f03735913428a8f4b3ebbff9acc807f25fdf8ef887c6762ff35090409668d6038ac84f08e36f40b394a14a191ffee685557112576d97fc6de0bc4bfc54a3efd99479243cbf3c91ff556a72d703dbb8fd6f85370cfd04f71895651c7ebd998ab7064a4ad77fc3fb33c4f0fa0b9bad6e"}}, {0xf0, &(0x7f0000000c80)=ANY=[@ANYBLOB="f003a2d0da661b2f74fd36073b874814b5836382428af3285094b7e52035f7d5f0b1b65f6cc795977ca999995dba1390b43f19072ad2eb6b4c3fddd470afc5711f06d4afd665e5169c878ee170e91d063be8e8ce2b3c67966068d5f89768e60dba7c5ef5a0f856913c01009339d2f1af4d7506eb30c5b8f33ac4cad55a1cc82c71e852fd80ec9d5dd611cfe25f5f41c8399fa15d0c541c24740616b38b8441f07f33f73e156284e5125b3f05031c592b787e847fa1752a7888d9f6ddf4c71c0e2b3ce8e9f0ad157618c5e7dcd4043751a3e68643077a98a29a95e9d358a69420fb8c024e730a3a019dab94ee819aa228"]}, {0xa2, &(0x7f0000000d80)=@string={0xa2, 0x3, "06d334fe8787d08ad255ddf63d7ee027f0830c9cc1e6d1261a7264edccedad0c69405b2fd198fdee4f8dbfa1454f62cd0b276123a22df422fdcc48555852bcb1863713bac591c2dcbbcbeaee6b866616b30f3113c63bdd71f8230eeada6310b01b66c537f71220fbf03cc79345eb4d23f1d3071e758581f935ec954e306f830d6bc525400e9c6232957f3dec395dacb530eb3df25de41c84cdfd025f4a188564"}}, {0xb5, &(0x7f0000001200)=ANY=[@ANYBLOB="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"]}, {0x27, &(0x7f0000000f00)=@string={0x27, 0x3, "2f8199dba30a3cae74a9dca4a841948daa3e77cc4adac36dfe4ea74404f14bf7c72ed7161a"}}, {0xa6, &(0x7f0000000f40)=@string={0xa6, 0x3, "b7f10bdd460490dc4ba20242cedaa7f91c4526337c0541877ea09b377dd03255cb4a3f1c0833faefeb49f33c64f679d37e82e975b46f7439f517cc7be2d870a9111558c63aa58da510049f532fe3fc3d1a4c6a5f524dae602e43d86b4f51582e46b6d8c3d8c0301081be05fd61f030dc1973e4a440e1098cebe8b93dca23e402cb39395cfda86fca0dc70c08553a5077b73a0df2afa6549c155884df3d6a72e325f023c6"}}]}) syz_usb_connect(0x1, 0x3d, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f0000001180)=[{&(0x7f00000011c0)="d6", 0x1}], 0x1) read$char_usb(r3, &(0x7f0000001540)=""/231, 0xe7) read$char_usb(r3, &(0x7f0000000200)=""/186, 0x110) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000300)=0x8, 0x4) sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000100)="ca973d1ed19f48a899c06d053fb72720cabcae327dff2abf889d39ccb577201f8de8e72b80d05d34be8296dcbe6a5c45dc5965ea4841a15391d95378bb10e85dee523d12ebb247c4da7ee001889aa391df60cffe97f15b2bdff9dffc81d17dfb48a5051ee067"}, {&(0x7f00000003c0)="a6cb4aeff9229ae770242816a69df429838adb4cf3b77bd7984cf258d08a4f32b537f80d271cef21b62377ae157db0db48fb1eb61dcff814438ccbdbbf749cae8bceb82ed9e8f83047d9d71c23fea36f025237cf3b0487d36cf634499691388dcc65509ee43ac319d2e6cd5a6f1df8d86a2b42aec2a2c03c3a3f236bfa9c05632b05f945a738bfb900eb4eb5c6f81d62c55bcdc04313e4c5cf10630487519b5013cafcaba2c273f004"}, {&(0x7f0000000480)="930b5189cb9f4d623f1c37b7ced558fb71dae947176dc74efa0c46a46a128ecab2f7e0dc8fa40f54f391cadb7a510212b2e30493d0fcae29ee6da39fc96aa64ca3047245bf222a93e4deca7fbe9d64df08e03fa2a44c9a67c49252959b2e5587116588d5615ff335db52d1cc08a112148a2897c55b5b8f62984da82973a46d"}, {&(0x7f0000000500)="24eb9f447da48d41b20ee41d07f8ef1b0c8eaa512fab1add25e727ef9ff800be294b17e4a87b0e58623c5e98a4d0dc2f02aca3415670819d81d63d521fe999c9635d83ee806f"}, {&(0x7f0000000580)="d040ac375a99de0f502addca1286f2a4dea02efd924e2c6b"}, {&(0x7f00000005c0)="2c7cfa2ac38969957f99c55165e74cbe4f9de09b6a733f1ab5726f9019cec21a9fd8fc5a0b12c72d40ded6c1ba05754e8f57f2b697bc138c38807e067140fb705b40c2a5fbd60845e6dc618e47fe9637ef682ff4fd6645b2d2f7d4cb7fca6329a0d4a255383adce73c46954b9d32b2c461e2bb04a8872df11b6409c768dddc70021287e31f3b7dc7af25e546240a6c3d1d5e91202f2b31f2e954b5deba7118d316a04bf63bfb6785901f887120a2cba0cc17481f2112dee2b4f9531afa066e"}], 0x0, 0x0, 0xffffffffffffff8c}}], 0x1, 0x40000) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0xe1499000) syz_usb_disconnect(0xffffffffffffffff) r6 = memfd_create(&(0x7f0000000000)='%\x00', 0x3) fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010004000000000002000600", @ANYRES32=0x0, @ANYBLOB="040000000000000010000364b232bd0020000000000000aa"], 0x34, 0x2) syz_usb_disconnect(0xffffffffffffffff) 35.272189979s ago: executing program 4 (id=1480): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000380)) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x7ff, 0x12) 34.197553356s ago: executing program 4 (id=1511): mkdirat(0xffffffffffffff9c, &(0x7f000001d880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f000001d8c0)='./proc\x00', &(0x7f000001d900)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000001d940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f000001d980)='27', 0x2) mkdirat(r0, 0x0, 0x20) syz_clone(0x0, 0x0, 0x500, 0x0, 0x0, 0x0) 19.002365177s ago: executing program 50 (id=1511): mkdirat(0xffffffffffffff9c, &(0x7f000001d880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f000001d8c0)='./proc\x00', &(0x7f000001d900)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000001d940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f000001d980)='27', 0x2) mkdirat(r0, 0x0, 0x20) syz_clone(0x0, 0x0, 0x500, 0x0, 0x0, 0x0) 5.284172716s ago: executing program 1 (id=1615): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="6400000010000106000000000000000010000308766574683000000000000000100012000800010076657468180002000a000100000002000000000df2a7a328bd2f8c7ef480152a7ab72205e2cf6c507907cb9ca3070010000300766574683100000000", 0x64}], 0x1}, 0x8804) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000300000010cc17691940000102030109026e000301221040080b0101012020070904000000010130000a2401060a0000080000090401"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 4.31872971s ago: executing program 9 (id=1620): r0 = syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x3, 0x4, 0x3, {0x9, @win={{0x3, 0x7fff, 0xb2df, 0x9}, 0x8, 0x3e, &(0x7f00000000c0)={{0x2, 0x9, 0x0, 0x400}, &(0x7f0000000080)={{0x8001, 0x7, 0x0, 0x1000}, &(0x7f0000000040)={{0x8001, 0x9, 0x4, 0xfffffff7}, &(0x7f0000000000)={{0x8, 0x81, 0x8, 0x7}}}}}, 0xf9ca, &(0x7f0000000100)="071529dcd182fec6efa7760ecd0a672bfd80dd4ded73c7cc20ae7ec01b1a62c217fdb22ae3624ec950c47a28cac4e552c6a07882fd10bc2d81d156619a3e269f9256ce42034f36dde036f239f7b6ef3b36e5533c5cbba7634cc7a0765ad9480e936b667b4e27b02286bcc347b72daf12db6906ed49ddfccb93a20d803cc2c9fb1ec7e68b22bb808a929133a9297e8644b3cef2d0ef68b5261e3a394cabcbab0100", 0x7}}, 0x6}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201e10000000040050be0170000000000010902"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="4400000010000104000000000000000000000000000000000000000000000000240012000a00010076786c616e00000014000200080009007b0000000800020001020304", 0x44}], 0x1}, 0x40004) r2 = syz_open_dev$loop(&(0x7f0000002240), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002280)='freezer.state\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x5, 0x2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000022c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xff, 0x0, 0x6, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4d60d9683dda11a77a858e20000030000000000000000000000000000000000007600", "2809e8dbe108598948224ad54afac11d875397bd9b2d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) 3.888828081s ago: executing program 1 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000080)={0x28, 0x2, 0x0, 0x0, 0x7, 0x1f, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 3.78848395s ago: executing program 1 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000000700)=""/64, 0x40}, {&(0x7f0000000740)=""/4097, 0x1001}, {&(0x7f0000001780)=""/151, 0x97}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) 3.702361334s ago: executing program 0 (id=1623): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) setgroups(0x400000000000026f, &(0x7f00000000c0)=[0x0, 0xee00]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x80000004, 0x4) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000240)={0xa, 0xce23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0xfffffff6}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000340)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x4, 0x7ffffc) bind$inet6(r8, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f00000004c0)={0xa, 0xe20, 0x0, @mcast1, 0x1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 2.917053632s ago: executing program 9 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2000) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000340)=""/19) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffee8, &(0x7f0000000180)=@any_dev={0x2, 0x48f, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xa1}}}, &(0x7f00000001c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000200)={0x0, 0x178d, 0x80, 0x1, 0x3ca, 0x0, r4}, 0x0, 0x4, &(0x7f0000000280)={0x2e, 0x5c, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x3, {}, 0x0, r1, '\x00', {0x0, 0x7d1, 0x0, 0x0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) 2.808993834s ago: executing program 1 (id=1625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000004c0)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="df0400000000fddbdf2513000000050029000c0000e409000600080211000001000005001301020000000600b500c90200000600bd0004000000"], 0x40}}, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) tee(r0, r0, 0xa, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)='{', 0x1}], 0x1}, 0x20048847) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x306, 0x80000001, 0xdb}, 0x9c) 2.638495641s ago: executing program 9 (id=1626): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000140), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000200)=""/253, 0xfd, 0x20, 0x0, 0xfffffffffffffdfc) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000540)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000640)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6600000096326dfdd1d89f74d9517f0e145b4a142cff6b35372089bf19d3dc904b96ae8e9b3f83923890de79cce4425a16aee9d2d0b12e1b81451653a87dac7869b616da43a9779bef4959c6341a3b2489909e23447eb9e8323d31f86e0e8a", @ANYRES16=r5, @ANYBLOB="bbdf26bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4) 2.471144457s ago: executing program 2 (id=1627): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x40040) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f00000002c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'nfc\x00'}}, 0x25) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="40020fa1"], 0x12) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001300)="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", 0x2a1}], 0x1}}], 0x1, 0x40000c4) 2.286100502s ago: executing program 9 (id=1628): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000040)=0x2, 0x9e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x29, 0x5, 0x0, 0x25dfdbfc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 2.05046788s ago: executing program 0 (id=1629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) close(0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x800, 0x7fffffffffffffff, 0x58f24867, 0x0, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x4, 0x8, 0x1], 0x54000, 0x100204}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xd0007, 0x0, {[0x5, 0x3, 0x1000000000003, 0x800000b7c, 0x9, 0x6, 0x9, 0x5]}}) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 2.027810899s ago: executing program 9 (id=1630): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x0, 0x42) read(r0, &(0x7f0000000100), 0x1000) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e0a902e04"], 0xd) 1.96722532s ago: executing program 2 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1c000000030601020000000000000000000008000500010007"], 0x1c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000380)='./mnt\x00') setxattr$incfs_id(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000003c0)={0x8, 0x2, {0x5167ac99, @struct={0x800, 0xffffff25}, 0x0, 0x43, 0xf48, 0x9, 0xa65a, 0x4, 0x80, @struct={0x7, 0xb27}, 0x1b, 0x1, [0x35a, 0x9, 0xd, 0xe1e, 0x10, 0x5]}, {0xe9, @usage, 0x0, 0xfffffffffffffe01, 0xa248, 0x824, 0x6, 0x9, 0x40, @usage=0x100, 0xf, 0x1, [0x8000000000000001, 0x9, 0x8, 0x83, 0x7, 0x8]}, {0x4, @struct={0x101, 0x8}, 0x0, 0x9f3, 0x7fff, 0x3, 0xfffffffffffffff5, 0x5, 0x400, @struct={0x200, 0xffff}, 0x2, 0x9ed, [0xf45, 0x9, 0x7, 0x9, 0x4, 0x7]}, {0x8000000000000000, 0x587, 0xfff}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000001a00)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001a40), 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000001a80)=0x80, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000007c0)={r4, "04f32d982971bd6ea2fe6510642b297e"}) 1.826335123s ago: executing program 0 (id=1632): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000240)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000280)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = syz_open_dev$ublk_chdev(&(0x7f00000009c0), r5, 0x80200) syz_ublk_setup_queues(r10, r7, &(0x7f00000005c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa295, 0x2, 0x1, 0x3aa}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r13) sendmsg$DEVLINK_CMD_PORT_GET(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r14, 0x701, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4048010) r15 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x50, 0xffffffffffffffff, 0x20000000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r9, r15, r11, r12, &(0x7f0000000900)={0x2e, 0x20, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@any_dev={0x3, 0xd28, 0x0, 0x0, 0x1000, 0x8000, r16, 0x0, 0x1}}}, &(0x7f0000000980)) 1.825836171s ago: executing program 1 (id=1633): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(r0, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x8000, 0x131) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e21, 0x5, @remote, 0x6}}, 0x4e24}, 0x90) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302", @ANYRESHEX=r0, @ANYRESHEX=r5], 0x0) 1.772924694s ago: executing program 2 (id=1634): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r0, 0x400, 0x0) lremovexattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@random={'btrfs.', '[*\'\'!\\\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140), 0x8) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000180)=0x7f, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x9, 0x8, "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", 0x0, 0x7, 0x8, 0x5, 0x2, 0x3, 0x8}}}, 0x120) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="484e8d6e5b28554045b9ebb57369bc0e75697781f197a4a8d2dcc12e1cb6057c9a75a022e85287d1e4b1f716105b81d059dd0c51017182bc4ba9bb5aad84b3eb846711fd34e978c8ebe6969fb6cc1394035d5da84a818aeb", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x400c054) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0xa, 0x0, &(0x7f0000000200)) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="5001", @ANYRESHEX=r7, @ANYRES16=r7], 0x14) 1.510206439s ago: executing program 2 (id=1635): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0xffffffffdf003fff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000041c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000004200)={0x1, 0x0, [{0x400000f3, 0x0, 0x400000000001}]}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000004140)=0x6) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) recvmsg(0xffffffffffffffff, 0x0, 0x40) r5 = socket$inet6(0xa, 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000020c0)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000004180)) setresuid(0x0, 0xee01, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) 1.182609338s ago: executing program 9 (id=1636): syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 991.672702ms ago: executing program 2 (id=1637): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x2000000}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 827.815924ms ago: executing program 0 (id=1638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="14fff5001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 598.256644ms ago: executing program 2 (id=1639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000300000020cd0cb1004000010203010902690003706e0109900d080b0002010c2008090400000001012000092401ffff040900ff09040100000102200009040101010102200009050109000200220808250100030807000904020000010220000904020101010220000905820910000908a008"], 0x0) sendmsg$key(r1, &(0x7f0000000d00)={0x700, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00000000000000000000000000000000000000000008000000000000000000080012000200"], 0xa0}}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r2, &(0x7f00000022c0)=[{&(0x7f0000000040)="adb4d9f9b9568e3591dd56f4376187f6f23ddb6dca605182ac22b897d1849184db6c141ecd3ccd880f6fe4bc324cc02201c99e4167c1a5e643a608a0dac7fe27d8f5da64534dc61c84f15b442d7f0ed41fd3e93468cca22068152d61cd8c5336c1598f7fab1bf3b2fe5cc9b5bc46ec43f28d383c25b973de1df3b8b081b8ec9c6e699a1446083c6cb2d4576d216dec7f749dae69942fd94cadde55b6a0790d8d3ee07dc12aed2f8b3f688a3acdcbb3feaac11363862ca372a0f27947da2e2b054baab61e39c898cc9f5b129de31bd80106289f84a7c3602fa49eef70ea8bdb185d1153620c5fd13ffe5b48182a0f823bc1f0f81daafbed3a", 0xf8}, {&(0x7f0000000140)="ba248683c7fab9b823c051ccd451ec518bc2811ffc0db502c39bbadf8d65a308c866a24264169f18e48b1cc6a09a0593aad9ee7d1edfaa3016d128c050b530c094161ac12edca6a2479bb6e9f13c6f6968e892d7dcedfccd21b4685388c023ad99d32251d713cf1a189e54324a6a2f704a6f928e010367d5e7d42a438da91daa5b", 0x81}, {&(0x7f0000000200)="398aed4a64cc9fd27cf8e361b2069e512c41f7f49fe58d194fcfa6de75d364a72ead041fa4323fd0717b9c3bec69bf87859fab5c0f3bbb887088e47447b5841615e95040d6b48e66b867af0da534eda8a89574cddf48d8249d37c380cafef06dabe8aa9c54e125ccc4a55dab2a505f987f3bd0da9f2d508507d871377a912995170587b90946adc26bd99185391a3b2161f81688877b5a40c5b38fe0211cd1fc3c917a6f7974e9c11d5876833d477fa5aab95bc389da3c403ff502ceb2193c95e4cf7a9a4d6a9300ed55795d257275bec3837bcf68b2359f067a392d54aaca8b8591c6f68778429ee4661717e5fb5b184415ef3ce478efd7de6d22c742ce01166a6d1886a323a1b253fc8edadca885dab803292eb1267186152201843c7a04c629221c5b47edacaa9e402bea0bf4e139c70296388871d45f3987a9fe0878bdf649de2e2b082b2e6d87cd5199318ea1c809a2218d6690286c83ab20608e5d218a16112f8813e78544d7728e30a238eb70e24997143083ba7279a2fa144ba35eedd760b892058d5ddbc46f63ab0546452740d918ea3f35e920635d53d95f6845416d0caf35c2501426e020c62cc33df4d3036430fe163cd51866bb47e66dc8239803bc0dbdcfe8ab7b3f9b3e1af8c19b7857d4c798454958cde168d63482acf53cb97d3b9f90ba7f09f0f2ccc5efd5c9c6983b938a914257d003886ee07e873ec02ee32dd4c8013e8f71e300cda0304b20f5149e2e57cce4f26783bd23f0f76ab4b75fa571ca680f62c2848c696ccf51e1b326ef3d0fb041346bc1eec5be2d46b94d961cafd7dda31fca68f7f36e9b07bef9b0b41500326ebc17a577ad5ee944da53f6ec86590662a465670dd2662dae4ecb0e05cf6ea101d5147e50040307e01a1ee6693c466f542bed15dee77d0b2be38c83bcc8cdc015ce64a9e4ab60895c5a119119ef9fcd9ba287126af80d4d10eed7e1da8e7e9b74b25ea3a1912bb4aba0bcae0184df3c0899bdc4677236cd61a2d4d396acea206db354b0d3b8ac2157b27ddf8dd0dff30cc4a773ed104ebdcd5634cf05c31aebfb45bd80d2ede1c1d2065813aa0cfe7a0374287a0cab27fd2ce87989a7b7ae04427e8574b2b3e6ddc630ef70afec99eaccd148e0e1e39565b52d37322e0e24ff0716ddfbb2e014365ad7727a1c76b5524e269a82d8d3c019468bce3cd30127c7b4818cec3039c26fb2722c11365839a2e5c2b8a67f5455e4c3fcdd7c259eadcb8c78c666eb4a4c6bf3d870e8694dbc1a4b9f153f695cf9e540a71cb51ff1ad1bcf8db39714e75f3a0174c1bbaec4f4fc2d9d9bb5431539015166fc331e7f7fc73a1f4ea872f9562fd727ff066aed7603e04c24ecd344c916258ee953c231089aae823cb8d8b21694ba38028d659b3947fc3223b75bd8fff149978b95cacd06c8136f21fa4c4d7894ff3b63e304c8132f12db6683ac962bd694d56b8812c148d3926930706079744b962fa48646769f5a808119c38faa7581551e04b609f535f1b8ae3a1f14638f8aa26faa73d2bfc9a309f808a9c0a1b6ddfdf3120504adb90d2252ae0962575afed9746efc109c03665626658db9d06a0d8fa886ca408d241d954c4576c9704bbf987b5b83edef06bc2d4efd52d058199e4ca7ff602579fefe4eb6600404278a3f9e8d3e3964f6cf513a9af6ab8b828267f9fa2476d1aef763b845421362a1fe7ddca45ce8ba7886e26ba0875b7ad826057da33505d6d88e77d9f4ca75f1d74ba9304375528f09a15cc69c981a9f56be417847bbbf55335b4f1560db0762bc615c4b5b29a5846a9aa26a9b828cf35a9b8982d61d3d72826388e1707e0814d84bd67750846c0cf2fe516d502e97e39746d5ed6a033b3331970d0dd532ed7c3bcccd34d2fd9287e8e842b55f21282f63205de1d73eb036ecabc4e9c678db96a26288e35507bd110228bc814bccbbb48a5487e753fe15b3bfa145e5dc9a1740a0ad313e7e1836b6d978f1efdd2d27595ed601edcfad8a9211ef0dd30a49af33e48e7476be211cd7dbcb4d24e93939d7c541d0ca6cca123b8cbd83d2c68726e44df134d9250c5bce0b51dc2571ebc267b886c27aba2181876743125a320672a5c7431addee8b9f5393f3da17ef3433d2eabd8c514df994443d2471ea7933ac01ff90bfb53a026a83493089ecb0151e1d9bbdb3c2488f47250431d5c2b943f486498a72b082dd872be98644d4065d524ddeef706460a4469e158cacd4a908064af92c010df0f769d66d78933f308c8ec57b2d1565c067c85f8eb0fcb1d75a6e75a8f7209844ba43784a1bbd9f504a2571c278f75e4fdd197f5ad6ba26b2bc2d3429d5ebb68cda458c531922c7ff9f2ac2b622034f4235212beccb309f29fc428ae9e9787098437f4a5bb5f805dbb30a50e9c28c6788c425ca90e8eea0d2f29b9031c41b453968daaf3ef314a9375440f64f5b81dc60f04ce8f329e6296be8b432b3781e3dd53e0e718d2471605785d7cabf6690c1dd4eb0185291419078f3395b5d2a5b198f875d8a138e5f0be024bf2e84678abadab0d4197bace9ce2fc378c01b199a571e3149c0abe69d754914becdad4e0715e687b360ba6060399e7b4e2a988820b4d9b334503f7252486cc3a85c083ba448c9af4d9c32bc8df31b38ef4a26d779718e66ec32fa301b9733644dc811317af6b5822dc6dcd2fd2e1e585ffdbd98f048e2bbea0b7dac440b5449a0c47bfec356bac70d76236027f7faec1b658e8356d54dd5bd09132e8190c0512ca5ab47ca4faf48796cf5209ebf7eb74aacb371a6e26e46d628f24c6a3a6d8ea726e5b8ab6f444f1b9a5084d8f0444f95e1a48099fff596a62660e418c45692411308b466eeeb60d020619bf77caa07b8bb5933dc4ee2f9258ce3a0b52bc9b1caff9d2ef4c7e4a2c2ea489761269206090d20b840b0c7357fdf6a57d25abaf12b3146de935479a0b8b104bd40cf7cbcba8611c72cf6a085db475394784f6dd14e39e725d96dae6ef87275b05ccc7c19c5a7edc7f1de4b333397cdbca93e083a558b08d99ac100d68bf064d0f3d4db28eb975283e2fcd33dad164d20a6038c70a53dec2efd50ec285900972980ed145b9399f17c0cb44d239e7aefb6a0588488b19793a4e9173d15354bba0fdf59ea2fc7d49dcbdf0f0af2c1c488b3bfee0aa3290d25abcff5bf88c530ffad731cf79ac2d0fcd06f374989db6eb3724cd7906e114b03a7cfdc3516c193f2918342c0991d2bfc8025fe316bab2bd65aa0d330b458a17ee69b651308c4b574d240881d6541fcc3b9742e30be5101dd5d41997ad3fd5868a195a1a0141e720950803d426e23deaa651c6992881245d5761e985553877aeda1880944519e2dd99525f042a72dab63423e69f50cf90c00d4bb3df03b47490f7882cc8f1f4dae44b68bd90281fb71a5a231b9f2499637d602463ce99af698e55a99c883879d6777ad59457fdb9a3ec50de3d70421799972ea72edb1bcb89bd595c5d6639bc0d1377daabb9073d3d86f0c16777d29482f7cd5a713bd38f7d80517c29592", 0x9d0}], 0x3) syz_usb_connect$uac3(0x0, 0x115, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103, 0x3, 0x1, 0x9, 0xf0, 0x5e, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x40, 0xa, 0x57, 0x5}, @as_header={0x17, 0x24, 0x1, 0x6, 0xffff, 0x7, 0x1007, 0x2, 0x0, 0x4, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x29, 0x1, 0xf, 0x7b}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x2, 0x9, 0x18, "23688e5d489d01"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x44, 0x1, 0x7, 0x2, "42afa4"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf8, 0x2, 0xc0, 0x7, "", "a2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0x6, 0x9, {0xa, 0x25, 0x25, 0x7fff, 0x31, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x1, 0x7, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf0, 0x1, 0xc, 0x82, "43ed"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x30, 0x9, "9591333e9e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x40, 0x3}, @as_header={0x17, 0x24, 0x1, 0xe1, 0x1, 0x8, 0x4, 0x7e, 0x7, 0x235, 0x14}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xbe, 0x4, 0x1, {0xa, 0x25, 0x25, 0x6, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x200, 0x9, 0xff, 0x3, 0x20, 0x6}, 0xbf, &(0x7f0000000f80)={0x5, 0xf, 0xbf, 0x1, [@generic={0xba, 0x10, 0x0, "ec6d0bfc97900771f8f62c1cb7acb3bcb4f4690a86814d5f01516d6d93b684e96fb0e7d7d5b6be79ca8e69fd3ad531ab7a60f6374723a964ac5ff6cd6f2681a7044d09632fecdfe0c5f1cfb885df0defaf883307a86fca093d79f80be0225ebe050c6c91eb8203ef832ca06e37342977bd12c0867c8112bc304e862603e1c4482142ab21709f9c2b2d6929e5124ef3c98b5151db4aecd6801ce1ffe98c5ec5fec6c75a7fbc07f913167a5b45e3702ee874488cf9669e99"}]}, 0x1, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0xc1a}}]}) 594.008133ms ago: executing program 0 (id=1640): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = fsopen(&(0x7f00000002c0)='bpf\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000006240)='./proc/thread-self/fail-nth\x00', 0x282, 0x6) write(r1, &(0x7f0000007500)='27', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x3000000000000) 497.375359ms ago: executing program 1 (id=1641): socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) write(r0, &(0x7f0000000380)='usbip-vudc.0', 0xc) write(r0, &(0x7f0000000500)='\n', 0x1) 0s ago: executing program 0 (id=1642): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x1}) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0xc0b41) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @scatter={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/21, 0x15}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000018c0)=""/212, 0xd4}]}, &(0x7f0000000280)="6a55af842621", 0x0, 0x8, 0x0, 0x1, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r3, 0x4048aecb, &(0x7f0000000180)=@other={0x2, &(0x7f00000001c0)=0x800}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000003b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003bc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032dbd7000fddbdf256f00000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000300000080000080500d600050000000a000600ffffffff0300010005007faff0c700000500d6000700ea7871bb97d85ef559d1fd1b73000000000000000000000000003abf53"], 0x54}, 0x1, 0x0, 0x0, 0x1001}, 0x4040001) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000001780)=0xd) (async) r9 = dup(r8) write$tun(r9, &(0x7f00000019c0)=ANY=[], 0x68) (async) read$FUSE(r9, &(0x7f0000001a00)={0x2020}, 0x2020) bind$netlink(r7, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) bind$netlink(r7, &(0x7f0000000600)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setresgid(0xffffffffffffffff, 0xee01, 0x0) (async) setfsgid(0xee01) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.stat\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x0, 'lo\x00', {0x3}, 0x6}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f0000001700)={{0x1, 0x1, 0x18, r1, {0xd400}}, './file0\x00'}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r11, 0xc008ae09, &(0x7f00000004c0)={0x6, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0xa, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x4, 0x200}]}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r10, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000000700)=""/4096, 0x1000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 8 length: 249 > 2 [ 431.719470][T13287] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.719887][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.719998][T13287] bridge_slave_0: entered allmulticast mode [ 431.759816][T13287] bridge_slave_0: entered promiscuous mode [ 431.773669][T13287] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.773729][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.773833][T13287] bridge_slave_1: entered allmulticast mode [ 431.805377][T13287] bridge_slave_1: entered promiscuous mode [ 432.067907][T13287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.103185][T13287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.158968][ T5638] Bluetooth: hci3: command tx timeout [ 432.242707][T13287] team0: Port device team_slave_0 added [ 432.246307][T13339] rxe_eth0 speed is unknown, defaulting to 1000 [ 432.289687][T13287] team0: Port device team_slave_1 added [ 432.382339][T13287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.382352][T13287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.382367][T13287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.437672][T13287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.437684][T13287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.437699][T13287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.471409][ T5741] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 432.620232][ T5741] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 432.640461][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.640479][ T5741] usb 4-1: Product: syz [ 432.640487][ T5741] usb 4-1: Manufacturer: syz [ 432.640495][ T5741] usb 4-1: SerialNumber: syz [ 432.643392][ T5741] usb 4-1: config 0 descriptor?? [ 432.800890][ T5638] Bluetooth: hci0: command tx timeout [ 432.861592][ T5741] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 433.035293][ T5868] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.041093][ T5638] Bluetooth: hci2: command tx timeout [ 433.116768][T13287] hsr_slave_0: entered promiscuous mode [ 433.117499][T13287] hsr_slave_1: entered promiscuous mode [ 433.117930][T13287] debugfs: 'hsr0' already exists in 'hsr' [ 433.117941][T13287] Cannot create hsr debugfs directory [ 433.229034][T13370] rxe_eth0 speed is unknown, defaulting to 1000 [ 433.337758][ T5868] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.419337][ T5868] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.440871][ T5638] Bluetooth: hci1: command tx timeout [ 433.567701][ T5868] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.883989][ T5741] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 434.240910][ T5638] Bluetooth: hci3: command tx timeout [ 434.556634][ T5868] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.743305][ T5868] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.879603][ T5638] Bluetooth: hci0: command tx timeout [ 434.930302][ T5868] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.984619][T13339] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.984738][T13339] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.985020][T13339] bridge_slave_0: entered allmulticast mode [ 435.006259][T13339] bridge_slave_0: entered promiscuous mode [ 435.111113][ T5868] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.150343][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.150434][T13339] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.150555][T13339] bridge_slave_1: entered allmulticast mode [ 435.153216][T13339] bridge_slave_1: entered promiscuous mode [ 435.235035][ T11] usb 4-1: USB disconnect, device number 46 [ 435.415528][T13339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.432035][T13339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.462055][T13444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 435.462071][T13444] block device autoloading is deprecated and will be removed. [ 435.518464][ T5638] Bluetooth: hci1: command tx timeout [ 435.767442][T13339] team0: Port device team_slave_0 added [ 435.810270][T13339] team0: Port device team_slave_1 added [ 436.026650][T13339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.026664][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.026678][T13339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.181290][T13370] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.181395][T13370] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.181511][T13370] bridge_slave_0: entered allmulticast mode [ 436.184085][T13370] bridge_slave_0: entered promiscuous mode [ 436.223080][T13370] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.223140][T13370] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.223259][T13370] bridge_slave_1: entered allmulticast mode [ 436.226665][T13370] bridge_slave_1: entered promiscuous mode [ 436.236715][T13339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.236725][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.236740][T13339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.318353][ T5638] Bluetooth: hci3: command tx timeout [ 436.401400][ T5868] bridge_slave_1: left allmulticast mode [ 436.401418][ T5868] bridge_slave_1: left promiscuous mode [ 436.401542][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.403502][ T5868] bridge_slave_0: left allmulticast mode [ 436.403516][ T5868] bridge_slave_0: left promiscuous mode [ 436.403664][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.422986][ T5741] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 436.470935][ T5868] bridge_slave_1: left allmulticast mode [ 436.470961][ T5868] bridge_slave_1: left promiscuous mode [ 436.471085][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.475830][ T5868] bridge_slave_0: left allmulticast mode [ 436.475847][ T5868] bridge_slave_0: left promiscuous mode [ 436.475957][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.583640][ T5741] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.584042][ T5741] usb 4-1: not running at top speed; connect to a high speed hub [ 436.584061][ T5741] usb 4-1: New USB device found: idVendor=17cc, idProduct=1011, bcdDevice=0.40 [ 436.584884][ T5741] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.584897][ T5741] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.587242][ T5741] usb 4-1: string descriptor 0 read error: -22 [ 436.587315][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.944096][ T5868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.946290][ T5868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.947351][ T5868] bond0 (unregistering): Released all slaves [ 436.958383][ T5638] Bluetooth: hci0: command tx timeout [ 437.066605][ T5741] usb 4-1: unable to issue vendor read request (ret = -71) [ 437.067517][ T5741] usb 4-1: unable to issue vendor read request (ret = -71) [ 437.084957][ T5741] usb 4-1: unable to issue vendor read request (ret = -71) [ 437.187396][ T5741] usb 4-1: USB disconnect, device number 47 [ 437.200493][ T5868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.205859][ T5868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.207845][ T5868] bond0 (unregistering): Released all slaves [ 437.327932][T13370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.351082][ T5301] 8021q: adding VLAN 0 to HW filter on device eth13 [ 437.400418][T13339] hsr_slave_0: entered promiscuous mode [ 437.401039][T13339] hsr_slave_1: entered promiscuous mode [ 437.407626][T13339] debugfs: 'hsr0' already exists in 'hsr' [ 437.407643][T13339] Cannot create hsr debugfs directory [ 437.434255][T13370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.592423][T13370] team0: Port device team_slave_0 added [ 437.607514][ T5638] Bluetooth: hci1: command tx timeout [ 437.717472][T13370] team0: Port device team_slave_1 added [ 437.907989][T13370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.908002][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.943698][T13370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.962664][T13370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.962677][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.962692][T13370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.037489][ T5741] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 438.221775][ T5741] usb 4-1: Using ep0 maxpacket: 8 [ 438.224205][T13474] FAULT_INJECTION: forcing a failure. [ 438.224205][T13474] name failslab, interval 1, probability 0, space 10, times 0 [ 438.224227][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.3.1463 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 438.224244][T13474] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 438.224249][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 438.224257][T13474] Call Trace: [ 438.224262][T13474] [ 438.224268][T13474] dump_stack_lvl+0xe8/0x150 [ 438.224290][T13474] should_fail_ex+0x3eb/0x540 [ 438.224312][T13474] should_failslab+0xa8/0x100 [ 438.224329][T13474] __kmalloc_noprof+0xf9/0x710 [ 438.224341][T13474] ? rcu_is_watching+0x16/0xb0 [ 438.224357][T13474] ? tomoyo_realpath_from_path+0xef/0x640 [ 438.224375][T13474] ? tomoyo_realpath_from_path+0xef/0x640 [ 438.224396][T13474] tomoyo_realpath_from_path+0xef/0x640 [ 438.224418][T13474] ? tomoyo_path_number_perm+0x219/0x5f0 [ 438.224432][T13474] tomoyo_path_number_perm+0x246/0x5f0 [ 438.224448][T13474] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 438.224462][T13474] ? __lock_acquire+0x747/0x2de0 [ 438.224494][T13474] ? __fget_files+0x2a/0x420 [ 438.224508][T13474] ? __fget_files+0x2a/0x420 [ 438.224520][T13474] ? __fget_files+0x2a/0x420 [ 438.224535][T13474] security_file_ioctl+0xc3/0x2a0 [ 438.224550][T13474] __se_sys_ioctl+0x47/0x170 [ 438.224567][T13474] do_syscall_64+0x166/0x520 [ 438.224582][T13474] ? trace_irq_disable+0x3b/0x140 [ 438.224596][T13474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.224607][T13474] ? clear_bhb_loop+0x70/0xc0 [ 438.224621][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.224632][T13474] RIP: 0033:0x7fc9b899f1eb [ 438.224644][T13474] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 438.224654][T13474] RSP: 002b:00007fc9b97d6f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.224666][T13474] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc9b899f1eb [ 438.224675][T13474] RDX: 00007fc9b97d7fd0 RSI: 0000000080085502 RDI: 0000000000000004 [ 438.224682][T13474] RBP: 00007fc9b97d7fd0 R08: 0000000000000012 R09: 00007fc9b97d6fc8 [ 438.224689][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 438.224696][T13474] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fc9b8a55a91 [ 438.224713][T13474] [ 438.224750][T13474] ERROR: Out of memory at tomoyo_realpath_from_path. [ 438.329717][ T5741] usb 4-1: unable to get BOS descriptor or descriptor too short [ 438.329756][ T5741] usb 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=d8.41 [ 438.342045][ T5741] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 438.342066][ T5741] usb 4-1: can't read configurations, error -71 [ 438.398645][ T5638] Bluetooth: hci3: command tx timeout [ 438.682699][T13370] hsr_slave_0: entered promiscuous mode [ 438.684982][T13370] hsr_slave_1: entered promiscuous mode [ 438.685541][T13370] debugfs: 'hsr0' already exists in 'hsr' [ 438.685555][T13370] Cannot create hsr debugfs directory [ 438.894883][T13287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 438.906603][T13287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.907288][T13287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 438.926006][T13287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.013786][T13287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 439.034884][T13287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.124662][T13287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 439.143987][T13287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.420681][T13339] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.680751][ T5638] Bluetooth: hci1: command tx timeout [ 439.763315][T13339] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.816815][ T5868] hsr_slave_0: left promiscuous mode [ 439.825216][ T5868] hsr_slave_1: left promiscuous mode [ 439.826110][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.826124][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.860547][T13502] FAULT_INJECTION: forcing a failure. [ 439.860547][T13502] name failslab, interval 1, probability 0, space 10, times 0 [ 439.860568][T13502] CPU: 0 UID: 0 PID: 13502 Comm: syz.3.1467 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 439.860585][T13502] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 439.860590][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.860597][T13502] Call Trace: [ 439.860601][T13502] [ 439.860607][T13502] dump_stack_lvl+0xe8/0x150 [ 439.860628][T13502] should_fail_ex+0x3eb/0x540 [ 439.860648][T13502] should_failslab+0xa8/0x100 [ 439.860664][T13502] __kmalloc_noprof+0xf9/0x710 [ 439.860680][T13502] ? copy_splice_read+0x16f/0xaa0 [ 439.860693][T13502] ? copy_splice_read+0x16f/0xaa0 [ 439.860709][T13502] copy_splice_read+0x16f/0xaa0 [ 439.860726][T13502] ? rcu_is_watching+0x16/0xb0 [ 439.860742][T13502] ? __pfx_copy_splice_read+0x10/0x10 [ 439.860753][T13502] ? trace_kmalloc+0x2a/0xf0 [ 439.860765][T13502] ? look_up_lock_class+0x57/0x110 [ 439.860788][T13502] ? register_lock_class+0x31/0x2e0 [ 439.860801][T13502] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 439.860819][T13502] ? alloc_pipe_info+0x358/0x4c0 [ 439.860834][T13502] ? __pfx_copy_splice_read+0x10/0x10 [ 439.860846][T13502] splice_direct_to_actor+0x48b/0xcb0 [ 439.860870][T13502] ? __pfx_direct_splice_actor+0x10/0x10 [ 439.860883][T13502] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 439.860901][T13502] do_splice_direct+0x195/0x290 [ 439.860916][T13502] ? __pfx_do_splice_direct+0x10/0x10 [ 439.860929][T13502] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 439.860947][T13502] ? rw_verify_area+0x203/0x4c0 [ 439.860959][T13502] ? fdget+0x1ac/0x250 [ 439.860972][T13502] do_sendfile+0x52e/0x7c0 [ 439.860993][T13502] ? __pfx_do_sendfile+0x10/0x10 [ 439.861011][T13502] ? __might_fault+0xaf/0x130 [ 439.861031][T13502] __se_sys_sendfile64+0xdf/0x1a0 [ 439.861048][T13502] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 439.861070][T13502] do_syscall_64+0x166/0x520 [ 439.861084][T13502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.861096][T13502] ? clear_bhb_loop+0x70/0xc0 [ 439.861109][T13502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.861119][T13502] RIP: 0033:0x7fc9b899f559 [ 439.861130][T13502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.861139][T13502] RSP: 002b:00007fc9b97d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 439.861151][T13502] RAX: ffffffffffffffda RBX: 00007fc9b8c25fa0 RCX: 00007fc9b899f559 [ 439.861159][T13502] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000004 [ 439.861166][T13502] RBP: 00007fc9b97d9090 R08: 0000000000000000 R09: 0000000000000000 [ 439.861173][T13502] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 439.861179][T13502] R13: 00007fc9b8c26038 R14: 00007fc9b8c25fa0 R15: 00007fffd5f01748 [ 439.861196][T13502] [ 439.865412][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.865426][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.085423][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.085460][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.227781][ T5868] hsr_slave_0: left promiscuous mode [ 440.236620][ T5868] hsr_slave_1: left promiscuous mode [ 440.237163][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.237176][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.237734][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.237745][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.294256][ T5868] veth1_macvtap: left promiscuous mode [ 440.294283][ T5868] veth0_macvtap: left promiscuous mode [ 440.294340][ T5868] veth1_vlan: left promiscuous mode [ 440.294379][ T5868] veth0_vlan: left promiscuous mode [ 440.326778][ T5868] veth1_macvtap: left promiscuous mode [ 440.326802][ T5868] veth0_macvtap: left promiscuous mode [ 440.326861][ T5868] veth1_vlan: left promiscuous mode [ 440.326900][ T5868] veth0_vlan: left promiscuous mode [ 440.478701][ T5638] Bluetooth: hci3: command tx timeout [ 441.016483][T13519] FAULT_INJECTION: forcing a failure. [ 441.016483][T13519] name failslab, interval 1, probability 0, space 10, times 0 [ 441.016505][T13519] CPU: 0 UID: 0 PID: 13519 Comm: syz.3.1470 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 441.016522][T13519] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 441.016527][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 441.016534][T13519] Call Trace: [ 441.016539][T13519] [ 441.016544][T13519] dump_stack_lvl+0xe8/0x150 [ 441.016567][T13519] should_fail_ex+0x3eb/0x540 [ 441.016588][T13519] should_failslab+0xa8/0x100 [ 441.016605][T13519] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 441.016621][T13519] ? kobject_set_name_vargs+0x61/0x110 [ 441.016632][T13519] ? kobject_set_name_vargs+0x61/0x110 [ 441.016648][T13519] kvasprintf+0xeb/0x1a0 [ 441.016678][T13519] ? __pfx_kvasprintf+0x10/0x10 [ 441.016696][T13519] ? __raw_spin_lock_init+0x45/0x100 [ 441.016716][T13519] ? kvasprintf_const+0xe1/0x240 [ 441.016735][T13519] kobject_set_name_vargs+0x61/0x110 [ 441.016749][T13519] device_create+0x23d/0x300 [ 441.016766][T13519] ? vgacon_build_attr+0x167/0x1f0 [ 441.016781][T13519] ? __pfx_vgacon_build_attr+0x10/0x10 [ 441.016796][T13519] ? __pfx_device_create+0x10/0x10 [ 441.016815][T13519] ? is_console_locked+0x9/0x20 [ 441.016830][T13519] ? csi_J+0x9d2/0xe80 [ 441.016849][T13519] vcs_make_sysfs+0x32/0x80 [ 441.016864][T13519] vc_allocate+0x61a/0x6f0 [ 441.016878][T13519] ? lock_acquire+0x115/0x350 [ 441.016892][T13519] ? __pfx_vc_allocate+0x10/0x10 [ 441.016908][T13519] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 441.016926][T13519] con_install+0x9f/0x770 [ 441.016940][T13519] ? __pfx_con_install+0x10/0x10 [ 441.016956][T13519] tty_init_dev+0xd7/0x4d0 [ 441.016975][T13519] tty_open+0x7de/0xd80 [ 441.016993][T13519] ? __pfx_tty_open+0x10/0x10 [ 441.017008][T13519] ? do_raw_spin_unlock+0xf5/0x200 [ 441.017026][T13519] chrdev_open+0x4d9/0x600 [ 441.017045][T13519] ? __pfx_chrdev_open+0x10/0x10 [ 441.017060][T13519] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 441.017077][T13519] ? devcgroup_check_permission+0x31/0x8f0 [ 441.017091][T13519] ? __pfx_chrdev_open+0x10/0x10 [ 441.017107][T13519] do_dentry_open+0x80e/0x1360 [ 441.017129][T13519] vfs_open_consume+0x4a/0x350 [ 441.017145][T13519] ? path_openat+0x16e1/0x20f0 [ 441.017162][T13519] path_openat+0x16fc/0x20f0 [ 441.017187][T13519] do_file_open+0x23e/0x4a0 [ 441.017204][T13519] ? __pfx_do_file_open+0x10/0x10 [ 441.017232][T13519] ? _raw_spin_unlock+0x28/0x50 [ 441.017244][T13519] ? alloc_fd+0x6af/0x760 [ 441.017263][T13519] do_sys_openat2+0x115/0x200 [ 441.017274][T13519] ? __se_sys_futex+0x3a8/0x450 [ 441.017291][T13519] ? __pfx_do_sys_openat2+0x10/0x10 [ 441.017305][T13519] ? rcu_is_watching+0x16/0xb0 [ 441.017322][T13519] __x64_sys_openat+0x138/0x170 [ 441.017337][T13519] do_syscall_64+0x166/0x520 [ 441.017351][T13519] ? trace_irq_disable+0x3b/0x140 [ 441.017365][T13519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.017377][T13519] ? clear_bhb_loop+0x70/0xc0 [ 441.017391][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.017402][T13519] RIP: 0033:0x7fc9b895fd8e [ 441.017414][T13519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.017424][T13519] RSP: 002b:00007fc9b97d8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 441.017437][T13519] RAX: ffffffffffffffda RBX: 00007fc9b97d96c0 RCX: 00007fc9b895fd8e [ 441.017445][T13519] RDX: 0000000000000002 RSI: 00007fc9b97d8c00 RDI: ffffffffffffff9c [ 441.017453][T13519] RBP: 00007fc9b8a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 441.017460][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.017467][T13519] R13: 00007fc9b8c26038 R14: 00007fc9b8c25fa0 R15: 00007fffd5f01748 [ 441.017485][T13519] [ 441.533276][ T5868] team0 (unregistering): Port device team_slave_1 removed [ 441.556024][ T5868] team0 (unregistering): Port device team_slave_0 removed [ 441.977743][ T5868] team0 (unregistering): Port device team_slave_1 removed [ 442.009428][ T5868] team0 (unregistering): Port device team_slave_0 removed [ 442.195300][ T5301] 8021q: adding VLAN 0 to HW filter on device eth14 [ 442.272684][T13339] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.423743][T13339] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.560628][ T5638] Bluetooth: hci3: command tx timeout [ 442.594344][T13287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.675438][T13287] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.698970][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.699034][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.728642][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.728703][ T5867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.541925][ T5868] IPVS: stop unused estimator thread 0... [ 443.542333][ T5868] IPVS: stop unused estimator thread 0... [ 443.940898][ T5301] 8021q: adding VLAN 0 to HW filter on device eth15 [ 444.411594][T13339] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 444.444047][T13339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.444600][T13339] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 444.465800][T13339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.478915][T13339] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 444.522053][T13339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.522658][T13339] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 444.525353][T13339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.586795][T13287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.638591][ T5638] Bluetooth: hci3: command tx timeout [ 444.906875][T13370] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 444.924535][T13370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.925142][T13370] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 444.946218][T13370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.970897][T13370] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 444.976170][T13370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.976755][T13370] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 445.008826][T13370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.122332][T13339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.195547][T13339] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.224998][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.225060][ T6915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.266422][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.266483][ T6913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.419120][T13370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.510057][T13370] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.549402][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.549465][ T6920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.584156][T13287] veth0_vlan: entered promiscuous mode [ 445.613954][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.614015][ T6920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.643216][T13287] veth1_vlan: entered promiscuous mode [ 445.792675][T13287] veth0_macvtap: entered promiscuous mode [ 445.828772][T13287] veth1_macvtap: entered promiscuous mode [ 445.895096][T13287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.925135][T13287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.989492][ T6920] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.001520][ T6913] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.002127][ T6913] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.002509][ T6920] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.278473][ T5867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.278489][ T5867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.436113][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.436128][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.718713][ T5638] Bluetooth: hci3: command tx timeout [ 446.986910][T13596] FAULT_INJECTION: forcing a failure. [ 446.986910][T13596] name failslab, interval 1, probability 0, space 10, times 0 [ 446.986933][T13596] CPU: 0 UID: 0 PID: 13596 Comm: syz.8.1472 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 446.986949][T13596] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 446.986954][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 446.986961][T13596] Call Trace: [ 446.986966][T13596] [ 446.986971][T13596] dump_stack_lvl+0xe8/0x150 [ 446.986993][T13596] should_fail_ex+0x3eb/0x540 [ 446.987013][T13596] should_failslab+0xa8/0x100 [ 446.987028][T13596] ? skb_clone+0x212/0x3a0 [ 446.987043][T13596] kmem_cache_alloc_noprof+0x9c/0x600 [ 446.987056][T13596] ? skb_clone+0x212/0x3a0 [ 446.987073][T13596] skb_clone+0x212/0x3a0 [ 446.987089][T13596] __netlink_deliver_tap+0x355/0x6e0 [ 446.987112][T13596] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.987124][T13596] netlink_deliver_tap+0x19c/0x1b0 [ 446.987135][T13596] netlink_unicast+0x8c1/0xa80 [ 446.987160][T13596] netlink_sendmsg+0x7f0/0xb20 [ 446.987174][T13596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.987187][T13596] ? aa_sock_msg_perm+0x144/0x210 [ 446.987206][T13596] ? apparmor_socket_sendmsg+0x18b/0x360 [ 446.987221][T13596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.987231][T13596] sock_sendmsg_nosec+0x14e/0x190 [ 446.987249][T13596] ____sys_sendmsg+0x54e/0x850 [ 446.987265][T13596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.987283][T13596] ? import_iovec+0x73/0xa0 [ 446.987302][T13596] ___sys_sendmsg+0x2a6/0x360 [ 446.987314][T13596] ? __lock_acquire+0x747/0x2de0 [ 446.987329][T13596] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.987362][T13596] ? __fget_files+0x3a2/0x420 [ 446.987373][T13596] ? __fget_files+0x2a/0x420 [ 446.987390][T13596] __x64_sys_sendmsg+0x1b1/0x290 [ 446.987405][T13596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.987430][T13596] do_syscall_64+0x166/0x520 [ 446.987445][T13596] ? trace_irq_disable+0x3b/0x140 [ 446.987459][T13596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.987470][T13596] ? clear_bhb_loop+0x70/0xc0 [ 446.987483][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.987494][T13596] RIP: 0033:0x7f7b6039f559 [ 446.987505][T13596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.987514][T13596] RSP: 002b:00007f7b6118d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.987526][T13596] RAX: ffffffffffffffda RBX: 00007f7b60625fa0 RCX: 00007f7b6039f559 [ 446.987534][T13596] RDX: 0000000024000840 RSI: 0000200000000400 RDI: 0000000000000003 [ 446.987541][T13596] RBP: 00007f7b6118d090 R08: 0000000000000000 R09: 0000000000000000 [ 446.987548][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.987554][T13596] R13: 00007f7b60626038 R14: 00007f7b60625fa0 R15: 00007fff133499d8 [ 446.987571][T13596] [ 447.482720][T13339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.762585][T13370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.483491][T13339] veth0_vlan: entered promiscuous mode [ 448.522182][T13339] veth1_vlan: entered promiscuous mode [ 448.656450][T13339] veth0_macvtap: entered promiscuous mode [ 448.699462][T13339] veth1_macvtap: entered promiscuous mode [ 448.783112][T13339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.798956][ T5638] Bluetooth: hci3: command tx timeout [ 448.831526][T13339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.859881][T13370] veth0_vlan: entered promiscuous mode [ 448.880761][ T6918] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.881696][ T6918] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.881789][ T6918] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.882005][ T6918] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.966752][T13370] veth1_vlan: entered promiscuous mode [ 449.243181][T13370] veth0_macvtap: entered promiscuous mode [ 449.272646][T13370] veth1_macvtap: entered promiscuous mode [ 449.275253][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.275266][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.456202][ T5869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.456218][ T5869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.495215][T13370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.530806][T13370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.601107][ T6918] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.601817][ T6918] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.602001][ T6918] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.602181][ T6918] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.995225][ T6918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.995240][ T6918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.151669][ T6918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.151686][ T6918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.435829][T13644] netlink: 'syz.9.1458': attribute type 28 has an invalid length. [ 450.878850][ T5638] Bluetooth: hci3: command tx timeout [ 452.012319][ T6919] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.386937][ T6919] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.704179][ T6919] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.785260][ T5646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.807120][ T5646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.816146][ T10] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 452.817356][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.834294][ T5646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.850106][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 452.958477][T13671] Bluetooth: hci3: command tx timeout [ 452.999911][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 453.003328][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 453.003351][ T10] usb 10-1: New USB device found: idVendor=07fd, idProduct=0001, bcdDevice=0.40 [ 453.006887][ T10] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 453.006924][ T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 453.006938][ T10] usb 10-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.073155][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.073172][ T10] usb 10-1: Product: syz [ 453.073180][ T10] usb 10-1: Manufacturer: syz [ 453.073188][ T10] usb 10-1: SerialNumber: syz [ 453.172900][ T6919] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.941144][ T6919] bridge_slave_1: left allmulticast mode [ 453.941163][ T6919] bridge_slave_1: left promiscuous mode [ 453.941328][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.993460][ T6919] bridge_slave_0: left allmulticast mode [ 453.993479][ T6919] bridge_slave_0: left promiscuous mode [ 453.993640][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.144497][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.146721][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 454.180125][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.444877][ T10] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 454.465942][ T10] usb 10-1: USB disconnect, device number 38 [ 454.549951][T13362] udevd[13362]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.874899][ T6919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.896367][ T6919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.913779][ T6919] bond0 (unregistering): Released all slaves [ 454.958927][T13671] Bluetooth: hci0: command tx timeout [ 455.040270][T13671] Bluetooth: hci3: command tx timeout [ 455.435708][T13669] rxe_eth0 speed is unknown, defaulting to 1000 [ 455.953036][ T6919] hsr_slave_0: left promiscuous mode [ 455.964281][ T6919] hsr_slave_1: left promiscuous mode [ 455.964890][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.964903][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.967090][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.967104][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.027569][ T6919] veth1_macvtap: left promiscuous mode [ 456.027595][ T6919] veth0_macvtap: left promiscuous mode [ 456.027655][ T6919] veth1_vlan: left promiscuous mode [ 456.027693][ T6919] veth0_vlan: left promiscuous mode [ 456.616073][T13719] netlink: 'syz.9.1485': attribute type 28 has an invalid length. [ 457.038186][T13289] Bluetooth: hci0: command tx timeout [ 457.081967][ T6919] team0 (unregistering): Port device team_slave_1 removed [ 457.118194][T13289] Bluetooth: hci3: command tx timeout [ 457.160344][ T6919] team0 (unregistering): Port device team_slave_0 removed [ 457.454899][ T5646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.469998][ T5646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.471054][ T5646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.473165][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.474510][ T5646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 459.119421][T13671] Bluetooth: hci0: command tx timeout [ 459.432759][ T6919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.455551][T13776] cpuidle: using governor haltpoll [ 459.598615][T13671] Bluetooth: hci4: command tx timeout [ 459.711006][ T5742] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 459.742617][ T6919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.800376][T13735] rxe_eth0 speed is unknown, defaulting to 1000 [ 459.803221][T13669] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.803283][T13669] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.803405][T13669] bridge_slave_0: entered allmulticast mode [ 459.809702][T13669] bridge_slave_0: entered promiscuous mode [ 459.853161][T13669] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.853222][T13669] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.853331][T13669] bridge_slave_1: entered allmulticast mode [ 459.857378][T13669] bridge_slave_1: entered promiscuous mode [ 459.865134][ T5742] usb 10-1: Using ep0 maxpacket: 32 [ 459.878848][ T5742] usb 10-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 459.899985][ T5742] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 459.900002][ T5742] usb 10-1: config 0 has no interface number 0 [ 459.900027][ T5742] usb 10-1: config 0 interface 184 has no altsetting 0 [ 459.933907][ T5742] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.933924][ T5742] usb 10-1: Product: syz [ 459.933932][ T5742] usb 10-1: Manufacturer: syz [ 459.933940][ T5742] usb 10-1: SerialNumber: syz [ 459.935466][ T5742] usb 10-1: config 0 descriptor?? [ 460.134182][ T6919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.186008][T13669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.207021][T13669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.392457][ T5742] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 460.392477][ T5742] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 460.392488][ T5742] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 460.392630][ T5742] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 460.454820][ T6919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.513971][T13669] team0: Port device team_slave_0 added [ 460.540136][T13669] team0: Port device team_slave_1 added [ 460.655035][T13669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.655048][T13669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.655063][T13669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.707690][T13669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.707701][T13669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.707716][T13669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.951309][T13669] hsr_slave_0: entered promiscuous mode [ 460.956987][T13669] hsr_slave_1: entered promiscuous mode [ 461.199082][T13671] Bluetooth: hci0: command tx timeout [ 461.378867][ T6919] bridge_slave_1: left allmulticast mode [ 461.378885][ T6919] bridge_slave_1: left promiscuous mode [ 461.379009][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.383952][ T6919] bridge_slave_0: left allmulticast mode [ 461.383986][ T6919] bridge_slave_0: left promiscuous mode [ 461.384115][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.681197][T13671] Bluetooth: hci4: command tx timeout [ 461.856894][ T6919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.870272][ T6919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.872817][ T6919] bond0 (unregistering): Released all slaves [ 462.568816][ T8160] usb 10-1: USB disconnect, device number 39 [ 462.813680][T13824] netlink: 'syz.9.1493': attribute type 28 has an invalid length. [ 463.210910][ T6919] hsr_slave_0: left promiscuous mode [ 463.211387][ T6919] hsr_slave_1: left promiscuous mode [ 463.211875][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.211888][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.213921][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.213934][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.276371][ T6919] veth1_macvtap: left promiscuous mode [ 463.276411][ T6919] veth0_macvtap: left promiscuous mode [ 463.276471][ T6919] veth1_vlan: left promiscuous mode [ 463.276509][ T6919] veth0_vlan: left promiscuous mode [ 463.559443][ T10] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 463.713643][ T10] usb 10-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.01 [ 463.714465][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.764748][T13671] Bluetooth: hci4: command tx timeout [ 463.951974][ T6919] team0 (unregistering): Port device team_slave_1 removed [ 463.968724][ T10] dln2 10-1:1.0: USB write failed: -110 [ 463.969027][ T10] dln2 10-1:1.0: failed to initialize hardware [ 463.995567][ T10] dln2 10-1:1.0: probe with driver dln2 failed with error -110 [ 464.028991][ T6919] team0 (unregistering): Port device team_slave_0 removed [ 464.179558][ T10] usb 10-1: USB disconnect, device number 40 [ 464.470896][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.489213][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.492077][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.515027][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.515364][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.888588][T13735] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.888763][T13735] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.888875][T13735] bridge_slave_0: entered allmulticast mode [ 464.903794][T13735] bridge_slave_0: entered promiscuous mode [ 464.937128][T13735] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.937189][T13735] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.963195][T13735] bridge_slave_1: entered allmulticast mode [ 464.976949][T13735] bridge_slave_1: entered promiscuous mode [ 465.327082][T13735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.345814][T13735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.503093][ T11] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 465.576275][T13735] team0: Port device team_slave_0 added [ 465.586967][T13735] team0: Port device team_slave_1 added [ 465.669306][ T11] usb 10-1: Using ep0 maxpacket: 16 [ 465.677740][ T11] usb 10-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 465.692203][ T11] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.692238][ T11] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.692253][ T11] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.692265][ T11] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 465.692278][ T11] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.696092][ T11] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 465.696108][ T11] usb 10-1: Manufacturer: syz [ 465.697738][ T11] usb 10-1: config 0 descriptor?? [ 465.796235][T13735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.796248][T13735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.796262][T13735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.843423][T13671] Bluetooth: hci4: command tx timeout [ 465.862590][T13735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.862602][T13735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.862618][T13735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.099345][ T11] rc_core: IR keymap rc-hauppauge not found [ 466.099458][ T11] Registered IR keymap rc-empty [ 466.099708][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.123808][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.139563][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 466.142970][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input46 [ 466.187907][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.199850][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.219809][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.244122][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.258346][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.281989][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.298278][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.321244][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.339705][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.368989][ T11] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 466.394019][ T11] mceusb 10-1:0.0: Registered 42 with mce emulator interface version 1 [ 466.394036][ T11] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 466.436270][ T6919] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.494718][ T5742] usb 10-1: USB disconnect, device number 41 [ 466.569846][T13735] hsr_slave_0: entered promiscuous mode [ 466.570531][T13735] hsr_slave_1: entered promiscuous mode [ 466.571094][T13735] debugfs: 'hsr0' already exists in 'hsr' [ 466.571106][T13735] Cannot create hsr debugfs directory [ 466.638580][T13671] Bluetooth: hci3: command tx timeout [ 466.793687][ T6919] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.825969][T13851] rxe_eth0 speed is unknown, defaulting to 1000 [ 467.005500][ T6919] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.183707][T13892] cramfs: checking physical address 0x0000000145a80000 for linear cramfs image [ 467.183854][T13892] cramfs: wrong magic [ 467.263595][T13892] cramfs: wrong magic [ 467.299988][ T6919] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.408857][T13896] netlink: 'syz.9.1499': attribute type 25 has an invalid length. [ 467.408875][T13896] netlink: 'syz.9.1499': attribute type 3 has an invalid length. [ 467.495126][T13669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.520535][T13669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.521123][T13669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 467.553365][T13669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.593959][T13899] netlink: 'syz.9.1500': attribute type 28 has an invalid length. [ 467.617416][T13669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.635024][T13669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.635614][T13669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.661547][T13669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.905937][T13912] FAULT_INJECTION: forcing a failure. [ 467.905937][T13912] name failslab, interval 1, probability 0, space 10, times 0 [ 467.905963][T13912] CPU: 0 UID: 0 PID: 13912 Comm: syz.9.1501 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 467.905984][T13912] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 467.905989][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 467.905996][T13912] Call Trace: [ 467.906002][T13912] [ 467.906007][T13912] dump_stack_lvl+0xe8/0x150 [ 467.906096][T13912] should_fail_ex+0x3eb/0x540 [ 467.906247][T13912] should_failslab+0xa8/0x100 [ 467.906310][T13912] __kmalloc_cache_noprof+0x9e/0x600 [ 467.906353][T13912] ? pcpu_alloc_noprof+0x1036/0x1900 [ 467.906421][T13912] ? mm_init_sched+0x56/0x350 [ 467.906454][T13912] ? mm_init_sched+0x56/0x350 [ 467.906472][T13912] mm_init_sched+0x56/0x350 [ 467.906491][T13912] mm_init+0x8e3/0xcb0 [ 467.906516][T13912] copy_mm+0xfc/0x470 [ 467.906538][T13912] copy_process+0x1ecc/0x44b0 [ 467.906558][T13912] ? copy_process+0xd17/0x44b0 [ 467.906581][T13912] ? __pfx_copy_process+0x10/0x10 [ 467.906601][T13912] kernel_clone+0x2d7/0x940 [ 467.906619][T13912] ? __pfx_kernel_clone+0x10/0x10 [ 467.906639][T13912] ? do_futex+0x3e7/0x4e0 [ 467.906667][T13912] __x64_sys_clone+0x1b6/0x230 [ 467.906683][T13912] ? __pfx___x64_sys_clone+0x10/0x10 [ 467.906706][T13912] ? rcu_is_watching+0x16/0xb0 [ 467.906734][T13912] do_syscall_64+0x166/0x520 [ 467.906828][T13912] ? trace_irq_disable+0x3b/0x140 [ 467.906847][T13912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.906868][T13912] ? clear_bhb_loop+0x70/0xc0 [ 467.906883][T13912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.906895][T13912] RIP: 0033:0x7f6a2a99f559 [ 467.906908][T13912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.906918][T13912] RSP: 002b:00007f6a2b892fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 467.906931][T13912] RAX: ffffffffffffffda RBX: 00007f6a2ac25fa0 RCX: 00007f6a2a99f559 [ 467.906940][T13912] RDX: 0000000000000000 RSI: 0000000000000500 RDI: 0000000000000000 [ 467.906948][T13912] RBP: 00007f6a2aa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 467.906955][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.906962][T13912] R13: 00007f6a2ac26038 R14: 00007f6a2ac25fa0 R15: 00007ffeb25de5a8 [ 467.906980][T13912] [ 468.549357][ T5742] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 468.626378][ T6919] bridge_slave_1: left allmulticast mode [ 468.626396][ T6919] bridge_slave_1: left promiscuous mode [ 468.626523][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.652393][ T6919] bridge_slave_0: left allmulticast mode [ 468.652409][ T6919] bridge_slave_0: left promiscuous mode [ 468.652550][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.699855][ T5742] usb 10-1: Using ep0 maxpacket: 8 [ 468.706222][ T5742] usb 10-1: New USB device found: idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 468.707104][ T5742] usb 10-1: config 3 has an invalid interface number: 45 but max is 0 [ 468.707119][ T5742] usb 10-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 468.707129][ T5742] usb 10-1: config 3 has no interface number 0 [ 468.707153][ T5742] usb 10-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.707166][ T5742] usb 10-1: config 3 interface 45 has no altsetting 0 [ 468.726062][T13671] Bluetooth: hci3: command tx timeout [ 468.780486][ T5742] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.780504][ T5742] usb 10-1: Product: syz [ 468.780512][ T5742] usb 10-1: Manufacturer: syz [ 468.780520][ T5742] usb 10-1: SerialNumber: syz [ 469.036888][ T5742] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.177226][ T5742] usb 10-1: USB disconnect, device number 42 [ 469.196237][ T6919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.212884][ T6919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.229375][ T6919] bond0 (unregistering): Released all slaves [ 469.383167][T13261] udevd[13261]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.711395][T13940] comedi comedi1: 8255: I/O base address not correctly aligned [ 469.715220][T13940] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 469.804409][T13671] Bluetooth: hci1: unexpected subevent 0x10 length: 5 > 2 [ 470.071746][T13669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.141910][T13669] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.188396][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.188458][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.245649][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.245710][ T6913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.611054][ T6919] hsr_slave_0: left promiscuous mode [ 470.611522][ T6919] hsr_slave_1: left promiscuous mode [ 470.611979][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.611991][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.612479][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.612490][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.667512][ T6919] veth1_macvtap: left promiscuous mode [ 470.667552][ T6919] veth0_macvtap: left promiscuous mode [ 470.667612][ T6919] veth1_vlan: left promiscuous mode [ 470.667651][ T6919] veth0_vlan: left promiscuous mode [ 470.799733][T13671] Bluetooth: hci3: command tx timeout [ 471.187186][ T6919] team0 (unregistering): Port device team_slave_1 removed [ 471.209913][ T7762] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 471.222812][ T6919] team0 (unregistering): Port device team_slave_0 removed [ 471.371696][ T7762] usb 10-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 471.372561][ T7762] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 471.372588][ T7762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.376818][T13971] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 471.579914][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.580035][T13851] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.580144][T13851] bridge_slave_0: entered allmulticast mode [ 471.582295][T13851] bridge_slave_0: entered promiscuous mode [ 471.650601][ T7762] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 471.651820][ T7762] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input47 [ 471.740895][ T7762] usb 10-1: USB disconnect, device number 43 [ 471.740976][ C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 471.819027][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.819089][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.819210][T13851] bridge_slave_1: entered allmulticast mode [ 471.820141][T13851] bridge_slave_1: entered promiscuous mode [ 472.027230][T13851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.052524][T13851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.075369][T13735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 472.104570][T13735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.117028][T13735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 472.133169][T13735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.195367][T13851] team0: Port device team_slave_0 added [ 472.214569][T13735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 472.248377][T13735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.248916][T13735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 472.297936][T13735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.309351][T13851] team0: Port device team_slave_1 added [ 472.414007][T13851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.414020][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.414035][T13851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.466145][T13851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.466158][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.466173][T13851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.649984][T13851] hsr_slave_0: entered promiscuous mode [ 472.655172][T13851] hsr_slave_1: entered promiscuous mode [ 472.655591][T13851] debugfs: 'hsr0' already exists in 'hsr' [ 472.655603][T13851] Cannot create hsr debugfs directory [ 472.879256][T13671] Bluetooth: hci3: command tx timeout [ 473.167026][T13735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.224761][T13735] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.357316][T13851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.414144][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.414207][ T6917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.456160][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.456221][ T6918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.606870][T13851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.747870][T13851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.786981][T13669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.953847][T13851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.533241][T13851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 474.555346][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.575603][T13851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.592931][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.609646][T13851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.616965][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.617594][T13851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.653006][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.696357][T13669] veth0_vlan: entered promiscuous mode [ 474.732918][T13669] veth1_vlan: entered promiscuous mode [ 474.837036][T13669] veth0_macvtap: entered promiscuous mode [ 474.866593][T13669] veth1_macvtap: entered promiscuous mode [ 474.917197][T13669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.951626][T13669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.995933][T13851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.018403][ T6919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.028999][ T6919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.029242][ T6919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.029265][ T6919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.105406][T13851] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.126609][T13735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.156472][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.156547][ T6919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.201068][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.201138][ T6919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.336734][ T6918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.336749][ T6918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.437268][T13735] veth0_vlan: entered promiscuous mode [ 475.456529][ T6918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.456544][ T6918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.507278][T13735] veth1_vlan: entered promiscuous mode [ 475.602216][T13735] veth0_macvtap: entered promiscuous mode [ 475.634824][T13735] veth1_macvtap: entered promiscuous mode [ 475.713326][T13735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.737650][T13735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.810492][ T6917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.810948][ T5868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.811296][ T5868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.811317][ T5868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.135574][ T6919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.135589][ T6919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.347062][T14070] netlink: 'syz.9.1516': attribute type 29 has an invalid length. [ 476.377225][T14070] netlink: 'syz.9.1516': attribute type 29 has an invalid length. [ 476.425051][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.425067][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.179087][T14093] schedule_timeout: wrong timeout value fffffffffffffed4 [ 477.179109][T14093] CPU: 0 UID: 0 PID: 14093 Comm: syz.2.1486 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 477.179127][T14093] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 477.179133][T14093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.179141][T14093] Call Trace: [ 477.179146][T14093] [ 477.179152][T14093] dump_stack_lvl+0xe8/0x150 [ 477.179173][T14093] schedule_timeout+0x22e/0x2c0 [ 477.179285][T14093] ? __pfx_schedule_timeout+0x10/0x10 [ 477.179305][T14093] ? sk_wait_data+0x20e/0x4d0 [ 477.179387][T14093] wait_woken+0xbc/0x1a0 [ 477.179404][T14093] ? wait_woken+0x39/0x1a0 [ 477.179422][T14093] sk_wait_data+0x29b/0x4d0 [ 477.179443][T14093] ? __pfx_sk_wait_data+0x10/0x10 [ 477.179459][T14093] ? __pfx_woken_wake_function+0x10/0x10 [ 477.179476][T14093] ? smc_accept+0x6f3/0xa20 [ 477.179529][T14093] ? __local_bh_enable_ip+0xd6/0x140 [ 477.179555][T14093] smc_accept+0x79b/0xa20 [ 477.179573][T14093] ? __pfx_smc_accept+0x10/0x10 [ 477.179587][T14093] ? __pfx_default_wake_function+0x10/0x10 [ 477.179604][T14093] ? __pfx_aa_sk_perm+0x10/0x10 [ 477.179660][T14093] ? inode_init_always_gfp+0x994/0xd30 [ 477.179731][T14093] ? apparmor_socket_accept+0x12f/0x200 [ 477.179785][T14093] do_accept+0x501/0x730 [ 477.179829][T14093] ? __pfx_do_accept+0x10/0x10 [ 477.179852][T14093] __sys_accept4+0x135/0x230 [ 477.179865][T14093] ? __pfx___sys_accept4+0x10/0x10 [ 477.179882][T14093] __x64_sys_accept4+0x9a/0xb0 [ 477.179895][T14093] do_syscall_64+0x166/0x520 [ 477.179910][T14093] ? trace_irq_disable+0x3b/0x140 [ 477.179924][T14093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.179935][T14093] ? clear_bhb_loop+0x70/0xc0 [ 477.179951][T14093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.179962][T14093] RIP: 0033:0x7f6ca0f9f559 [ 477.179975][T14093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.179985][T14093] RSP: 002b:00007f6c9f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 477.179998][T14093] RAX: ffffffffffffffda RBX: 00007f6ca1226090 RCX: 00007f6ca0f9f559 [ 477.180007][T14093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 477.180014][T14093] RBP: 00007f6ca1036b20 R08: 0000000000000000 R09: 0000000000000000 [ 477.180021][T14093] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 477.180028][T14093] R13: 00007f6ca1226128 R14: 00007f6ca1226090 R15: 00007ffed798b878 [ 477.180046][T14093] [ 477.650715][T13851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.806273][T13851] veth0_vlan: entered promiscuous mode [ 477.829521][ T7762] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 477.848780][T13851] veth1_vlan: entered promiscuous mode [ 477.931210][T13851] veth0_macvtap: entered promiscuous mode [ 477.955049][T13851] veth1_macvtap: entered promiscuous mode [ 478.009529][ T7762] usb 10-1: New USB device found: idVendor=04b3, idProduct=3109, bcdDevice=0.00 [ 478.010354][ T7762] usb 10-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 478.010378][ T7762] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.010393][ T7762] usb 10-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 478.010408][ T7762] usb 10-1: config 0 interface 0 has no altsetting 0 [ 478.010426][ T7762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.016126][T13851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.074408][ T7762] usb 10-1: config 0 descriptor?? [ 478.126568][T13851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.172378][ T6913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.172632][ T6913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.172655][ T6913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.172673][ T6913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.459544][ T6913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.459560][ T6913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.551090][ T7762] input: HID 04b3:3109 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:04B3:3109.0013/input/input48 [ 478.586334][ T5869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.586349][ T5869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.663167][ T7762] lenovo 0003:04B3:3109.0013: input,hidraw0: USB HID vd.8f Joystick [HID 04b3:3109] on usb-dummy_hcd.9-1/input0 [ 478.895889][ T7762] usb 10-1: USB disconnect, device number 44 [ 478.954298][T14117] fido_id[14117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 479.134766][T14128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.036631][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1526'. [ 480.322011][T14167] kvm: user requested TSC rate below hardware speed [ 480.340507][T14167] kvm: user requested TSC rate below hardware speed [ 480.340674][T14167] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 480.563828][T14152] ftl_cs: FTL header not found. [ 480.735248][T14176] rxe_eth0 speed is unknown, defaulting to 1000 [ 481.037340][T13735] svc: failed to register nfsdv3 RPC service (errno 5). [ 481.037353][T13735] failed to unregister tcp with rpcbind [ 481.206977][T14152] block2mtd: mtd1: [/dev/zram0] erase_size = 4KiB [4096] [ 481.383271][T14189] busy [ 481.889399][ T11] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 482.077945][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 482.086979][ T11] usb 3-1: not running at top speed; connect to a high speed hub [ 482.087015][ T11] usb 3-1: New USB device found: idVendor=0dba, idProduct=5000, bcdDevice=0.40 [ 482.110189][ T11] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 482.110205][ T11] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 482.139806][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.139824][ T11] usb 3-1: Product: syz [ 482.139832][ T11] usb 3-1: Manufacturer: syz [ 482.139840][ T11] usb 3-1: SerialNumber: syz [ 482.197237][T14209] team0: entered allmulticast mode [ 482.197253][T14209] team_slave_0: entered allmulticast mode [ 482.197265][T14209] team_slave_1: entered allmulticast mode [ 482.567568][T14212] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[13851] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[14212] [ 483.557194][ T11] usb 3-1: MBOX3: Invalid descriptor size=64. [ 483.576696][ T11] usb 3-1: MBOX3: Invalid descriptor size=64. [ 483.603616][ T11] usb 3-1: USB disconnect, device number 43 [ 484.013145][ T5301] 8021q: adding VLAN 0 to HW filter on device eth16 [ 484.821017][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 485.070438][T14274] FAULT_INJECTION: forcing a failure. [ 485.070438][T14274] name failslab, interval 1, probability 0, space 10, times 0 [ 485.070461][T14274] CPU: 0 UID: 0 PID: 14274 Comm: syz.0.1542 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 485.070487][T14274] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 485.070495][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.070507][T14274] Call Trace: [ 485.070511][T14274] [ 485.070517][T14274] dump_stack_lvl+0xe8/0x150 [ 485.070538][T14274] should_fail_ex+0x3eb/0x540 [ 485.070560][T14274] should_failslab+0xa8/0x100 [ 485.070576][T14274] ? vm_area_dup+0x32/0x8e0 [ 485.070692][T14274] kmem_cache_alloc_noprof+0x9c/0x600 [ 485.070706][T14274] ? vm_area_dup+0x32/0x8e0 [ 485.070725][T14274] vm_area_dup+0x32/0x8e0 [ 485.070743][T14274] __split_vma+0x2c2/0xa40 [ 485.070803][T14274] ? __pfx___split_vma+0x10/0x10 [ 485.070822][T14274] ? mas_find+0x6d6/0xcb0 [ 485.070907][T14274] vms_gather_munmap_vmas+0x4e3/0x1370 [ 485.070930][T14274] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 485.070947][T14274] ? mas_walk+0x37e/0x490 [ 485.070967][T14274] mmap_region+0x95a/0x2840 [ 485.070993][T14274] ? __pfx_mmap_region+0x10/0x10 [ 485.071007][T14274] ? lock_acquire+0x115/0x350 [ 485.071029][T14274] ? process_measurement+0x7b2/0x1c10 [ 485.071090][T14274] ? up_write+0x19d/0x4a0 [ 485.071108][T14274] ? __lock_acquire+0x747/0x2de0 [ 485.071167][T14274] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 485.071195][T14274] ? __lock_acquire+0x747/0x2de0 [ 485.071208][T14274] ? cap_mmap_addr+0xaa/0xf0 [ 485.071276][T14274] ? bpf_lsm_mmap_addr+0x9/0x50 [ 485.071326][T14274] ? security_mmap_addr+0x71/0x240 [ 485.071362][T14274] ? shmem_mapping+0xd/0x50 [ 485.071393][T14274] ? memfd_check_seals_mmap+0xc5/0x220 [ 485.071427][T14274] do_mmap+0xe0a/0x1300 [ 485.071464][T14274] ? get_pid_task+0x20/0x1f0 [ 485.071479][T14274] ? __pfx_do_mmap+0x10/0x10 [ 485.071500][T14274] ? vm_mmap_pgoff+0x1ed/0x520 [ 485.071533][T14274] ? down_write_killable+0x179/0x230 [ 485.071553][T14274] ? __pfx_down_write_killable+0x10/0x10 [ 485.071570][T14274] ? apparmor_mmap_file+0x2e7/0x390 [ 485.071586][T14274] vm_mmap_pgoff+0x27a/0x520 [ 485.071602][T14274] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 485.071614][T14274] ? __fget_files+0x2a/0x420 [ 485.071629][T14274] ? __fget_files+0x3a2/0x420 [ 485.071641][T14274] ? __fget_files+0x2a/0x420 [ 485.071655][T14274] ksys_mmap_pgoff+0x4dc/0x760 [ 485.071674][T14274] do_syscall_64+0x166/0x520 [ 485.071690][T14274] ? trace_irq_disable+0x3b/0x140 [ 485.071703][T14274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.071715][T14274] ? clear_bhb_loop+0x70/0xc0 [ 485.071728][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.071739][T14274] RIP: 0033:0x7f07f779f559 [ 485.071750][T14274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.071759][T14274] RSP: 002b:00007f07f85ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 485.071772][T14274] RAX: ffffffffffffffda RBX: 00007f07f7a25fa0 RCX: 00007f07f779f559 [ 485.071780][T14274] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 485.071787][T14274] RBP: 00007f07f85ed090 R08: 0000000000000003 R09: 0000000000002000 [ 485.071794][T14274] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 485.071801][T14274] R13: 00007f07f7a26038 R14: 00007f07f7a25fa0 R15: 00007fff03028698 [ 485.071818][T14274] [ 485.294511][ T8160] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 485.571007][ T8160] usb 3-1: Using ep0 maxpacket: 8 [ 485.572181][ T8160] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 485.574494][ T8160] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 485.574525][ T8160] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.574537][ T8160] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.574550][ T8160] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.574562][ T8160] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.574585][ T8160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.738411][T14284] FAULT_INJECTION: forcing a failure. [ 485.738411][T14284] name failslab, interval 1, probability 0, space 10, times 0 [ 485.738434][T14284] CPU: 0 UID: 0 PID: 14284 Comm: syz.0.1544 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 485.738451][T14284] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 485.738456][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.738463][T14284] Call Trace: [ 485.738468][T14284] [ 485.738474][T14284] dump_stack_lvl+0xe8/0x150 [ 485.738496][T14284] should_fail_ex+0x3eb/0x540 [ 485.738517][T14284] should_failslab+0xa8/0x100 [ 485.738537][T14284] __kmalloc_cache_noprof+0x9e/0x600 [ 485.738551][T14284] ? ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 485.738642][T14284] ? ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 485.738656][T14284] ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 485.738675][T14284] genl_family_rcv_msg_doit+0x233/0x340 [ 485.738735][T14284] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 485.738757][T14284] ? bpf_lsm_capable+0x9/0x20 [ 485.738802][T14284] ? security_capable+0x7e/0x2c0 [ 485.738821][T14284] genl_rcv_msg+0x614/0x7a0 [ 485.738839][T14284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.738852][T14284] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 485.738872][T14284] netlink_rcv_skb+0x226/0x4a0 [ 485.738910][T14284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.738925][T14284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.738951][T14284] ? down_read+0x2b9/0x320 [ 485.738971][T14284] genl_rcv+0x28/0x40 [ 485.738984][T14284] netlink_unicast+0x8ef/0xa80 [ 485.739009][T14284] netlink_sendmsg+0x7f0/0xb20 [ 485.739024][T14284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.739037][T14284] ? aa_sock_msg_perm+0x144/0x210 [ 485.739056][T14284] ? apparmor_socket_sendmsg+0x98/0x360 [ 485.739070][T14284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.739081][T14284] sock_sendmsg_nosec+0x14e/0x190 [ 485.739100][T14284] ____sys_sendmsg+0x54e/0x850 [ 485.739183][T14284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.739213][T14284] ? import_iovec+0x73/0xa0 [ 485.739317][T14284] ___sys_sendmsg+0x2a6/0x360 [ 485.739332][T14284] ? __lock_acquire+0x747/0x2de0 [ 485.739349][T14284] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.739365][T14284] ? futex_wait+0x2a2/0x390 [ 485.739394][T14284] ? __fget_files+0x3a2/0x420 [ 485.739407][T14284] ? __fget_files+0x2a/0x420 [ 485.739424][T14284] __x64_sys_sendmsg+0x1b1/0x290 [ 485.739440][T14284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.739466][T14284] do_syscall_64+0x166/0x520 [ 485.739482][T14284] ? trace_irq_disable+0x3b/0x140 [ 485.739496][T14284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.739507][T14284] ? clear_bhb_loop+0x70/0xc0 [ 485.739522][T14284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.739533][T14284] RIP: 0033:0x7f07f779f559 [ 485.739546][T14284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.739556][T14284] RSP: 002b:00007f07f85ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.739569][T14284] RAX: ffffffffffffffda RBX: 00007f07f7a25fa0 RCX: 00007f07f779f559 [ 485.739578][T14284] RDX: 0000000004008094 RSI: 0000200000000140 RDI: 0000000000000006 [ 485.739586][T14284] RBP: 00007f07f7836b20 R08: 0000000000000000 R09: 0000000000000000 [ 485.739594][T14284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.739601][T14284] R13: 00007f07f7a26038 R14: 00007f07f7a25fa0 R15: 00007fff03028698 [ 485.739623][T14284] [ 485.988562][ T8160] usb 3-1: GET_CAPABILITIES returned 0 [ 485.988594][ T8160] usbtmc 3-1:16.0: can't read capabilities [ 486.192418][T14284] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input49 [ 486.375155][ T5756] usb 3-1: USB disconnect, device number 44 [ 487.495255][T14310] Bluetooth: MGMT ver 1.23 [ 487.661138][T14322] FAULT_INJECTION: forcing a failure. [ 487.661138][T14322] name failslab, interval 1, probability 0, space 10, times 0 [ 487.661161][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.0.1552 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 487.661178][T14322] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 487.661183][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 487.661190][T14322] Call Trace: [ 487.661196][T14322] [ 487.661201][T14322] dump_stack_lvl+0xe8/0x150 [ 487.661223][T14322] should_fail_ex+0x3eb/0x540 [ 487.661243][T14322] should_failslab+0xa8/0x100 [ 487.661259][T14322] ? pidfs_register_pid_gfp+0xa6/0x1c0 [ 487.661312][T14322] kmem_cache_alloc_noprof+0x9c/0x600 [ 487.661326][T14322] ? pidfs_register_pid_gfp+0xa6/0x1c0 [ 487.661342][T14322] pidfs_register_pid_gfp+0xa6/0x1c0 [ 487.661356][T14322] __pidfs_register_pids+0x60/0xb0 [ 487.661370][T14322] prepare_peercred+0x167/0x290 [ 487.661429][T14322] unix_stream_connect+0x233/0x1000 [ 487.661447][T14322] ? bpf_lsm_socket_post_create+0x9/0x20 [ 487.661486][T14322] ? __pfx_unix_stream_connect+0x10/0x10 [ 487.661500][T14322] ? __sock_create+0x8ec/0xac0 [ 487.661549][T14322] p9_fd_create_unix+0x289/0x4f0 [ 487.661620][T14322] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 487.661642][T14322] ? __kmalloc_cache_noprof+0x31c/0x600 [ 487.661655][T14322] ? __kmalloc_cache_noprof+0x148/0x600 [ 487.661672][T14322] p9_client_create+0x3e5/0xc60 [ 487.661689][T14322] ? __pfx_p9_client_create+0x10/0x10 [ 487.661711][T14322] v9fs_session_init+0x46/0xd40 [ 487.661783][T14322] ? __kmalloc_cache_noprof+0x148/0x600 [ 487.661795][T14322] ? v9fs_get_tree+0xaa/0xac0 [ 487.661806][T14322] ? v9fs_get_tree+0xaa/0xac0 [ 487.661821][T14322] v9fs_get_tree+0xbd/0xac0 [ 487.661833][T14322] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 487.661850][T14322] ? __pfx_v9fs_get_tree+0x10/0x10 [ 487.661867][T14322] vfs_get_tree+0x92/0x2a0 [ 487.661909][T14322] do_new_mount+0x325/0xb00 [ 487.661966][T14322] ? __pfx_do_new_mount+0x10/0x10 [ 487.661979][T14322] ? ns_capable+0x84/0xe0 [ 487.661996][T14322] ? path_mount+0x647/0x1050 [ 487.662009][T14322] ? user_path_at+0xd4/0x160 [ 487.662063][T14322] __se_sys_mount+0x31d/0x420 [ 487.662079][T14322] ? __pfx___se_sys_mount+0x10/0x10 [ 487.662094][T14322] ? __x64_sys_mount+0x20/0xc0 [ 487.662108][T14322] do_syscall_64+0x166/0x520 [ 487.662124][T14322] ? trace_irq_disable+0x3b/0x140 [ 487.662137][T14322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.662148][T14322] ? clear_bhb_loop+0x70/0xc0 [ 487.662162][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.662173][T14322] RIP: 0033:0x7f07f779f559 [ 487.662185][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.662194][T14322] RSP: 002b:00007f07f85ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 487.662210][T14322] RAX: ffffffffffffffda RBX: 00007f07f7a25fa0 RCX: 00007f07f779f559 [ 487.662219][T14322] RDX: 0000200000002500 RSI: 00002000000024c0 RDI: 0000200000002480 [ 487.662227][T14322] RBP: 00007f07f7836b20 R08: 0000200000002540 R09: 0000000000000000 [ 487.662235][T14322] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 487.662242][T14322] R13: 00007f07f7a26038 R14: 00007f07f7a25fa0 R15: 00007fff03028698 [ 487.662260][T14322] [ 487.667679][T14322] 9pnet_fd: p9_fd_create_unix (14322): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 487.712670][ T5756] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 487.946243][ T5756] usb 10-1: Using ep0 maxpacket: 16 [ 488.065784][ T5756] usb 10-1: New USB device found: idVendor=28bd, idProduct=0074, bcdDevice=0.40 [ 488.078246][ T5756] usb 10-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.078266][ T5756] usb 10-1: config 1 interface 0 has no altsetting 0 [ 488.121608][ T5756] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.121626][ T5756] usb 10-1: Product: ᐌ [ 488.121634][ T5756] usb 10-1: Manufacturer: Ї [ 488.121643][ T5756] usb 10-1: SerialNumber: 皩쭤鼦君㛂짉퓑ﱖ倔떻籜欚吃懏卩팱풘獆讅龘㭳뮀͆准襫䬗佲ᣋᆛⒶ荃ꛪ繄灷婢顂奈逦颋뮷唻苐ฦ仦꼀臂ጢ饞뽶ｎꤧ롗ᔵ㪅䩪阄樮ᧈ蜂박ﳝ୛쓸튬좌頽ಥ禱쓮䐬闭푝郜ﳸ▕ [ 488.366695][T14324] fuse: Bad value for 'user_id' [ 488.366709][T14324] fuse: Bad value for 'user_id' [ 488.410360][ T5756] usbhid 10-1:1.0: can't add hid device: -71 [ 488.410429][ T5756] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 488.417175][ T5756] usb 10-1: USB disconnect, device number 45 [ 488.589659][ T7762] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 488.741570][ T7762] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 488.744109][ T7762] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 488.744126][ T7762] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 488.744136][ T7762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 488.744162][ T7762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 488.744175][ T7762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 488.745833][ T7762] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 488.745847][ T7762] usb 1-1: Product: syz [ 488.745855][ T7762] usb 1-1: Manufacturer: syz [ 488.839143][ T7762] cdc_wdm 1-1:1.0: skipping garbage [ 488.839157][ T7762] cdc_wdm 1-1:1.0: skipping garbage [ 488.847073][ T7762] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 488.847155][ T7762] cdc_wdm 1-1:1.0: Unknown control protocol [ 489.084611][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1557'. [ 489.106502][T13671] Bluetooth: hci1: Malformed HCI Event [ 489.112358][ T5301] 8021q: adding VLAN 0 to HW filter on device eth17 [ 489.150701][ T7762] usb 1-1: USB disconnect, device number 24 [ 489.528317][ T5756] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 489.682108][ T5756] usb 10-1: New USB device found: idVendor=046d, idProduct=0821, bcdDevice=1.00 [ 489.684351][ T5756] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.684366][ T5756] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.684390][ T5756] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.685966][ T5756] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.685980][ T5756] usb 10-1: Product: syz [ 489.685988][ T5756] usb 10-1: Manufacturer: syz [ 489.685996][ T5756] usb 10-1: SerialNumber: syz [ 489.774332][ T5756] uvcvideo 10-1:1.0: Found UVC 255.00 device syz (046d:0821) [ 489.774546][ T5756] uvcvideo 10-1:1.0: No streaming interface found for terminal 32770. [ 489.940992][ T5742] usb 10-1: USB disconnect, device number 46 [ 490.226100][ T5301] 8021q: adding VLAN 0 to HW filter on device eth18 [ 490.430745][ T5742] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 490.578166][ T5742] usb 3-1: Using ep0 maxpacket: 16 [ 490.578632][ T5742] usb 3-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 490.579430][ T5742] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.579448][ T5742] usb 3-1: config 0 interface 0 has no altsetting 0 [ 490.579467][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.594000][ T5742] usb 3-1: config 0 descriptor?? [ 491.076390][ T5742] mcp2221 0003:04D8:00DD.0014: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 491.501002][ T5742] usb 3-1: USB disconnect, device number 45 [ 491.541899][ T5301] 8021q: adding VLAN 0 to HW filter on device eth19 [ 492.236525][T14424] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1575'. [ 492.304891][ T5646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.327672][ T5646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.339197][ T5646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.346851][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.357668][ T5646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.540344][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 492.793173][ T5756] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 492.971155][ T5756] usb 3-1: New USB device found: idVendor=20d6, idProduct=cb17, bcdDevice=0.00 [ 492.972158][ T5756] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.972178][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 492.972201][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.024464][ T5756] usb 3-1: config 0 descriptor?? [ 493.379112][ T5869] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.485124][ T5756] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0015/input/input50 [ 493.519784][ T5301] 8021q: adding VLAN 0 to HW filter on device eth20 [ 493.784392][ T5756] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0015/input/input51 [ 493.826320][ T5756] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0015/input/input52 [ 493.827489][T14457] device-mapper: table: 248:10: crypt: Error allocating crypto tfm (-EINVAL) [ 493.827507][T14457] device-mapper: ioctl: error adding target to table [ 493.908677][ T5756] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0015/input/input53 [ 493.945882][ T5869] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.086472][ T5756] hid-udraw 0003:20D6:CB17.0015: hidraw0: USB HID v0.05 Joystick [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 494.280217][T14473] FAULT_INJECTION: forcing a failure. [ 494.280217][T14473] name failslab, interval 1, probability 0, space 10, times 0 [ 494.280255][T14473] CPU: 0 UID: 0 PID: 14473 Comm: syz.9.1582 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 494.280272][T14473] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 494.280276][T14473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.280283][T14473] Call Trace: [ 494.280289][T14473] [ 494.280294][T14473] dump_stack_lvl+0xe8/0x150 [ 494.280316][T14473] should_fail_ex+0x3eb/0x540 [ 494.280336][T14473] should_failslab+0xa8/0x100 [ 494.280353][T14473] __kmalloc_noprof+0xf9/0x710 [ 494.280364][T14473] ? rcu_is_watching+0x16/0xb0 [ 494.280381][T14473] ? tomoyo_realpath_from_path+0xef/0x640 [ 494.280508][T14473] ? tomoyo_realpath_from_path+0xef/0x640 [ 494.280528][T14473] tomoyo_realpath_from_path+0xef/0x640 [ 494.280572][T14473] ? tomoyo_path_number_perm+0x219/0x5f0 [ 494.280586][T14473] tomoyo_path_number_perm+0x246/0x5f0 [ 494.280601][T14473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.280614][T14473] ? __lock_acquire+0x747/0x2de0 [ 494.280646][T14473] ? __fget_files+0x2a/0x420 [ 494.280660][T14473] ? __fget_files+0x2a/0x420 [ 494.280672][T14473] ? __fget_files+0x2a/0x420 [ 494.280686][T14473] security_file_ioctl+0xc3/0x2a0 [ 494.280701][T14473] __se_sys_ioctl+0x47/0x170 [ 494.280719][T14473] do_syscall_64+0x166/0x520 [ 494.280735][T14473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.280747][T14473] ? clear_bhb_loop+0x70/0xc0 [ 494.280760][T14473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.280771][T14473] RIP: 0033:0x7f6a2a99f559 [ 494.280782][T14473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.280791][T14473] RSP: 002b:00007f6a2b893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.280804][T14473] RAX: ffffffffffffffda RBX: 00007f6a2ac25fa0 RCX: 00007f6a2a99f559 [ 494.280812][T14473] RDX: 0000200000000340 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 494.280819][T14473] RBP: 00007f6a2b893090 R08: 0000000000000000 R09: 0000000000000000 [ 494.280826][T14473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.280833][T14473] R13: 00007f6a2ac26038 R14: 00007f6a2ac25fa0 R15: 00007ffeb25de5a8 [ 494.280850][T14473] [ 494.280870][T14473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.402831][ T5646] Bluetooth: hci2: command tx timeout [ 494.663247][ T5869] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.725424][T14425] rxe_eth0 speed is unknown, defaulting to 1000 [ 494.834148][ T5869] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.872357][T14473] device-mapper: table: 248:11: crypt: Error allocating crypto tfm (-EINVAL) [ 494.872389][T14473] device-mapper: ioctl: error adding target to table [ 495.073070][T14487] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1583'. [ 495.092506][T14487] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1583'. [ 495.336144][ T9695] usb 3-1: USB disconnect, device number 46 [ 495.513211][ T5869] bridge_slave_1: left allmulticast mode [ 495.513232][ T5869] bridge_slave_1: left promiscuous mode [ 495.513367][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.560421][ T5869] bridge_slave_0: left allmulticast mode [ 495.560440][ T5869] bridge_slave_0: left promiscuous mode [ 495.560578][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.807351][ T33] kauditd_printk_skb: 9 callbacks suppressed [ 495.807367][ T33] audit: type=1804 audit(1793280225.368:408): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1587" name="/newroot/59/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4017 res=1 errno=0 [ 495.871490][ T10] kernel read not supported for file /per_cpu/cpu0/trace_pipe_raw (pid: 10 comm: kworker/0:0) [ 496.227876][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.246681][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.259309][ T5869] bond0 (unregistering): Released all slaves [ 496.268308][ T9695] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 496.332745][ T5301] 8021q: adding VLAN 0 to HW filter on device eth21 [ 496.432028][ T9695] usb 10-1: unable to get BOS descriptor or descriptor too short [ 496.432060][ T9695] usb 10-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 496.432907][ T9695] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.432921][ T9695] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.483972][ T5646] Bluetooth: hci2: command tx timeout [ 496.492214][ T9695] usb 10-1: string descriptor 0 read error: -22 [ 496.492290][ T9695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.534957][ T9695] usb 10-1: selecting invalid altsetting 1 [ 496.535623][ T9695] usb 10-1: unit 6 not found! [ 497.162888][T14510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.163181][T14510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.184623][ T9695] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 497.345437][T14526] kvm: pic: single mode not supported [ 497.460610][ T9695] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 497.490062][ T9695] usb 10-1: USB disconnect, device number 47 [ 497.605938][ T33] audit: type=1800 audit(1793280227.168:409): pid=14526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1591" name="bus" dev="overlay" ino=167 res=0 errno=-22 [ 497.651420][ T5869] hsr_slave_0: left promiscuous mode [ 497.660519][ T5869] hsr_slave_1: left promiscuous mode [ 497.663038][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.663053][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.665300][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.665314][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.723592][ T5869] veth1_macvtap: left promiscuous mode [ 497.723619][ T5869] veth0_macvtap: left promiscuous mode [ 497.723678][ T5869] veth1_vlan: left promiscuous mode [ 497.723716][ T5869] veth0_vlan: left promiscuous mode [ 498.082244][T14546] gadgetfs: bound to dummy_udc driver [ 498.287125][ T5869] team0 (unregistering): Port device team_slave_1 removed [ 498.305804][ T5869] team0 (unregistering): Port device team_slave_0 removed [ 498.328206][ T5756] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 498.328426][ C0] gadgetfs: connected [ 498.330371][ T5756] gadgetfs: disconnected [ 498.378257][ T7762] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 498.456041][ T5301] 8021q: adding VLAN 0 to HW filter on device eth22 [ 498.478319][ C0] gadgetfs: connected [ 498.479063][ T5756] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 498.479334][ T5756] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 498.479356][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.482620][ C0] gadgetfs: configuration #1 [ 498.555436][ T7762] usb 10-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 498.556398][ T7762] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 498.556419][ T7762] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 498.556457][ T7762] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 498.556481][ T7762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.558616][ T5646] Bluetooth: hci2: command tx timeout [ 498.620227][T14549] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 498.620292][T14549] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 498.654081][ T7762] pl2303 10-1:1.0: pl2303 converter detected [ 498.691209][ T7762] usb 10-1: pl2303 converter now attached to ttyUSB0 [ 498.826396][T14425] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.826473][T14425] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.826567][T14425] bridge_slave_0: entered allmulticast mode [ 498.864084][T14425] bridge_slave_0: entered promiscuous mode [ 498.893811][T14425] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.893884][T14425] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.894017][T14425] bridge_slave_1: entered allmulticast mode [ 498.922849][T14425] bridge_slave_1: entered promiscuous mode [ 499.002921][T14546] pl2303 10-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 499.012113][T14546] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 499.012694][T14546] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 499.016238][T14546] pl2303 10-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 499.016861][T14546] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 499.100009][T14425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.219955][T14425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.279339][T14546] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 499.325688][T14546] pl2303 ttyUSB0: error sending break = -32 [ 499.390203][T14425] team0: Port device team_slave_0 added [ 499.423811][T14425] team0: Port device team_slave_1 added [ 499.474174][ T5742] usb 10-1: USB disconnect, device number 48 [ 499.505519][T14544] gadgetfs: suspended from state 3 [ 499.505663][T14544] gadgetfs: disconnected [ 499.526337][ T5756] usb 1-1: can't set config #1, error -71 [ 499.546815][ T5742] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 499.547282][ T5742] pl2303 10-1:1.0: device disconnected [ 499.562836][ T5756] usb 1-1: USB disconnect, device number 25 [ 499.617781][T14425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.617794][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.617808][T14425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.687644][T14425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.687658][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.687674][T14425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.014041][T14425] hsr_slave_0: entered promiscuous mode [ 500.017098][T14425] hsr_slave_1: entered promiscuous mode [ 500.143978][T14581] CIFS mount error: No usable UNC path provided in device string! [ 500.143978][T14581] [ 500.144178][T14581] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 500.248364][ T5742] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 500.415195][ T5742] usb 3-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 500.430503][ T5742] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.452077][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.452095][ T5742] usb 3-1: Product: syz [ 500.452103][ T5742] usb 3-1: Manufacturer: syz [ 500.452111][ T5742] usb 3-1: SerialNumber: syz [ 500.453820][ T5742] usb 3-1: config 0 descriptor?? [ 500.533308][ T5301] 8021q: adding VLAN 0 to HW filter on device eth23 [ 500.640043][ T5646] Bluetooth: hci2: command tx timeout [ 500.699129][ T5742] usb 3-1: USB disconnect, device number 47 [ 501.173259][T14425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.177096][T14425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.177896][T14425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.212312][T14425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.215235][T14425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.237403][T14425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.247519][T14425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.262661][T14425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.345189][ T5301] 8021q: adding VLAN 0 to HW filter on device eth24 [ 501.513965][T14611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.514224][T14611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.530036][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.530072][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.596954][T14425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.644444][T14425] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.669868][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.669940][ T6917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.708053][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.708116][ T5867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.739853][ T5756] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 501.868422][ T5756] usb 1-1: device descriptor read/64, error -71 [ 502.109457][ T5756] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 502.239801][ T5756] usb 1-1: device descriptor read/64, error -71 [ 502.350428][ T5756] usb usb1-port1: attempt power cycle [ 502.427342][ T6913] IPVS: starting estimator thread 0... [ 502.508630][T14635] IPVS: using max 52 ests per chain, 124800 per kthread [ 502.678401][ T9695] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 502.697130][ T5756] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 502.709904][ T5756] usb 1-1: device descriptor read/8, error -71 [ 502.830164][ T9695] usb 3-1: Using ep0 maxpacket: 32 [ 502.833670][ T9695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 502.833704][ T9695] usb 3-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40 [ 502.864464][ T9695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.864480][ T9695] usb 3-1: Product: syz [ 502.864488][ T9695] usb 3-1: Manufacturer: syz [ 502.864497][ T9695] usb 3-1: SerialNumber: syz [ 502.919096][ T33] audit: type=1326 audit(1793280232.488:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 502.920709][ T33] audit: type=1326 audit(1793280232.488:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 502.923206][ T33] audit: type=1326 audit(1793280232.488:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 502.923235][ T33] audit: type=1326 audit(1793280232.488:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 502.923272][ T33] audit: type=1326 audit(1793280232.488:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 502.923456][ T33] audit: type=1326 audit(1793280232.488:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 502.924161][ T33] audit: type=1326 audit(1793280232.488:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 502.924186][ T33] audit: type=1326 audit(1793280232.488:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 502.953704][ T5756] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 503.038652][ T5756] usb 1-1: device descriptor read/8, error -71 [ 503.155045][ T5756] usb usb1-port1: unable to enumerate USB device [ 503.155666][ T33] audit: type=1326 audit(1793280232.718:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 503.155695][ T33] audit: type=1326 audit(1793280232.718:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.9.1605" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a99f559 code=0x7ffc0000 [ 503.253733][ T9695] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 503.257940][ T9695] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 503.306069][T14627] tmpfs: Bad value for 'mpol' [ 503.329766][T14425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.447503][T14425] veth0_vlan: entered promiscuous mode [ 503.482560][ T9695] usb 3-1: USB disconnect, device number 48 [ 503.495009][T14425] veth1_vlan: entered promiscuous mode [ 503.596516][T14425] veth0_macvtap: entered promiscuous mode [ 503.620549][T13362] udevd[13362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.651417][T14425] veth1_macvtap: entered promiscuous mode [ 503.706160][T14425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.741564][T14425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.819524][ T5869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.820255][ T5869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.820459][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.820499][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.064386][ T6918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.064403][ T6918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.222708][ T6913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.222724][ T6913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.266112][T14662] FAULT_INJECTION: forcing a failure. [ 504.266112][T14662] name failslab, interval 1, probability 0, space 10, times 0 [ 504.266134][T14662] CPU: 0 UID: 0 PID: 14662 Comm: syz.9.1610 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 504.266151][T14662] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 504.266155][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 504.266162][T14662] Call Trace: [ 504.266167][T14662] [ 504.266172][T14662] dump_stack_lvl+0xe8/0x150 [ 504.266193][T14662] should_fail_ex+0x3eb/0x540 [ 504.266213][T14662] should_failslab+0xa8/0x100 [ 504.266231][T14662] __kvmalloc_node_noprof+0x171/0x820 [ 504.266247][T14662] ? nf_hook_entries_grow+0x287/0x740 [ 504.266308][T14662] ? nf_hook_entries_grow+0x287/0x740 [ 504.266321][T14662] ? __pfx___mutex_lock+0x10/0x10 [ 504.266339][T14662] nf_hook_entries_grow+0x287/0x740 [ 504.266360][T14662] __nf_register_net_hook+0x26f/0x940 [ 504.266379][T14662] nf_register_net_hook+0xb2/0x190 [ 504.266393][T14662] nf_register_net_hooks+0x44/0x1b0 [ 504.266407][T14662] nf_defrag_ipv4_enable+0x87/0x120 [ 504.266481][T14662] nf_ct_netns_do_get+0x18c/0x5c0 [ 504.266526][T14662] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 504.266540][T14662] ? trace_kmalloc+0x2a/0xf0 [ 504.266550][T14662] ? __bitmap_set+0x12f/0x170 [ 504.266564][T14662] ? nf_ct_netns_get+0xe9/0x320 [ 504.266579][T14662] nft_ct_get_init+0x5bf/0x9c0 [ 504.266643][T14662] nf_tables_newrule+0x179e/0x28a0 [ 504.266714][T14662] ? __pfx_nf_tables_newrule+0x10/0x10 [ 504.266730][T14662] ? lock_acquire+0x115/0x350 [ 504.266743][T14662] ? nfnl_pernet+0x23/0x240 [ 504.266793][T14662] ? __nla_parse+0x40/0x60 [ 504.266808][T14662] nfnetlink_rcv+0x1288/0x28c0 [ 504.266843][T14662] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 504.266884][T14662] ? skb_clone+0x246/0x3a0 [ 504.266929][T14662] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.266939][T14662] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.266953][T14662] netlink_unicast+0x8ef/0xa80 [ 504.266979][T14662] netlink_sendmsg+0x7f0/0xb20 [ 504.266994][T14662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.267007][T14662] ? aa_sock_msg_perm+0x144/0x210 [ 504.267027][T14662] ? apparmor_socket_sendmsg+0x98/0x360 [ 504.267042][T14662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.267052][T14662] sock_sendmsg_nosec+0x14e/0x190 [ 504.267070][T14662] ____sys_sendmsg+0x54e/0x850 [ 504.267087][T14662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.267106][T14662] ? import_iovec+0x73/0xa0 [ 504.267124][T14662] ___sys_sendmsg+0x2a6/0x360 [ 504.267136][T14662] ? __lock_acquire+0x747/0x2de0 [ 504.267152][T14662] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.267186][T14662] ? __fget_files+0x3a2/0x420 [ 504.267198][T14662] ? __fget_files+0x2a/0x420 [ 504.267216][T14662] __x64_sys_sendmsg+0x1b1/0x290 [ 504.267231][T14662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.267258][T14662] do_syscall_64+0x166/0x520 [ 504.267272][T14662] ? trace_irq_disable+0x3b/0x140 [ 504.267286][T14662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.267297][T14662] ? clear_bhb_loop+0x70/0xc0 [ 504.267311][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.267322][T14662] RIP: 0033:0x7f6a2a99f559 [ 504.267333][T14662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.267343][T14662] RSP: 002b:00007f6a2b893028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.267355][T14662] RAX: ffffffffffffffda RBX: 00007f6a2ac25fa0 RCX: 00007f6a2a99f559 [ 504.267363][T14662] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 504.267370][T14662] RBP: 00007f6a2b893090 R08: 0000000000000000 R09: 0000000000000000 [ 504.267377][T14662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.267383][T14662] R13: 00007f6a2ac26038 R14: 00007f6a2ac25fa0 R15: 00007ffeb25de5a8 [ 504.267401][T14662] [ 504.887638][T14663] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 504.909645][ T5646] Bluetooth: Unexpected continuation frame (len 59) [ 505.017345][T14667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 505.033722][T14667] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 505.033748][T14667] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 505.628305][ T9695] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 505.651814][T14700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1615'. [ 505.651830][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 505.759775][ T9695] usb 3-1: device descriptor read/64, error -71 [ 505.940401][ T5742] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 506.000308][ T9695] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 506.090245][ T5742] usb 2-1: Using ep0 maxpacket: 16 [ 506.091919][ T5742] usb 2-1: unable to get BOS descriptor or descriptor too short [ 506.091950][ T5742] usb 2-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=0.40 [ 506.092804][ T5742] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.092817][ T5742] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.094536][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.094550][ T5742] usb 2-1: Product: syz [ 506.094557][ T5742] usb 2-1: Manufacturer: syz [ 506.094565][ T5742] usb 2-1: SerialNumber: syz [ 506.154078][ T9695] usb 3-1: device descriptor read/64, error -71 [ 506.196170][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 506.196296][T14718] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 506.196607][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 506.196617][T14717] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 506.258501][ T9695] usb usb3-port1: attempt power cycle [ 506.456867][ T5646] Bluetooth: hci1: connection err: -111 [ 506.513105][ T5742] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 506.516857][ T5742] usb 2-1: selecting invalid altsetting 1 [ 506.516921][ T5742] snd-usb-caiaq 2-1:1.0: can't set alt interface. [ 506.516991][ T5742] usb 2-1: unable to init card! (ret=-5) [ 506.517408][ T5742] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 506.566218][ T5742] usb 2-1: selecting invalid altsetting 1 [ 506.566233][ T5742] snd-usb-caiaq 2-1:1.1: can't set alt interface. [ 506.566242][ T5742] usb 2-1: unable to init card! (ret=-5) [ 506.588885][ T5742] snd-usb-caiaq 2-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 506.594856][ T5742] usb 2-1: USB disconnect, device number 21 [ 506.621718][ T9695] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 506.649263][ T9695] usb 3-1: device descriptor read/8, error -71 [ 506.675775][T13362] udevd[13362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.891260][ T9695] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 506.910486][ T9695] usb 3-1: device descriptor read/8, error -71 [ 506.948324][ T10] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 507.021882][ T9695] usb usb3-port1: unable to enumerate USB device [ 507.098682][ T10] usb 10-1: New USB device found: idVendor=0b05, idProduct=17e0, bcdDevice=0.00 [ 507.099165][ T10] usb 10-1: config 0 has no interfaces? [ 507.099185][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.129955][ T10] usb 10-1: config 0 descriptor?? [ 507.356447][ T9695] usb 10-1: USB disconnect, device number 49 [ 507.449079][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 507.602681][ T10] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 507.602727][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 507.603516][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.603544][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.603558][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.604331][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.604358][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.604371][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.605129][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.605155][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.605169][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.605910][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.605936][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.605950][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.606690][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.606716][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.606730][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.656107][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.656138][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.656153][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.805284][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.805315][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.805330][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.806148][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.806177][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.806191][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 507.807892][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 507.807907][ T10] usb 1-1: Product: syz [ 507.807915][ T10] usb 1-1: Manufacturer: syz [ 507.807923][ T10] usb 1-1: SerialNumber: syz [ 507.897022][ T10] usb 1-1: config 0 descriptor?? [ 507.922537][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 508.172405][ T10] usb 1-1: USB disconnect, device number 30 [ 508.201725][ T10] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 509.346362][ T5742] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 509.512103][ T5742] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 509.513051][ T5742] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 509.513075][ T5742] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.513094][ T5742] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 509.513108][ T5742] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 509.513971][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.513985][ T5742] usb 2-1: SerialNumber: syz [ 509.578816][T14802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.846517][ T5742] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 509.864653][ T5742] usb 2-1: USB disconnect, device number 22 [ 510.032434][ T10] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 510.188244][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 510.207619][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 510.207654][ T10] usb 10-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 510.233997][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.234013][ T10] usb 10-1: Product: syz [ 510.234022][ T10] usb 10-1: Manufacturer: syz [ 510.234030][ T10] usb 10-1: SerialNumber: syz [ 510.405626][T14845] FAULT_INJECTION: forcing a failure. [ 510.405626][T14845] name failslab, interval 1, probability 0, space 10, times 0 [ 510.405653][T14845] CPU: 0 UID: 0 PID: 14845 Comm: syz.0.1640 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 510.405672][T14845] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 510.405677][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 510.405684][T14845] Call Trace: [ 510.405689][T14845] [ 510.405695][T14845] dump_stack_lvl+0xe8/0x150 [ 510.405718][T14845] should_fail_ex+0x3eb/0x540 [ 510.405739][T14845] should_failslab+0xa8/0x100 [ 510.405757][T14845] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 510.405770][T14845] ? __d_alloc+0x37/0x820 [ 510.405784][T14845] ? __d_alloc+0x37/0x820 [ 510.405801][T14845] __d_alloc+0x37/0x820 [ 510.405817][T14845] d_alloc+0x4b/0x190 [ 510.405829][T14845] ? lookup_one_qstr_excl+0xc4/0x360 [ 510.405845][T14845] lookup_one_qstr_excl+0xd8/0x360 [ 510.405859][T14845] ? lookup_noperm_common+0x245/0x430 [ 510.405874][T14845] start_dirop+0x5c/0x90 [ 510.405887][T14845] simple_start_creating+0xcc/0x110 [ 510.405974][T14845] ? __pfx_simple_start_creating+0x10/0x10 [ 510.405991][T14845] ? __asan_memcpy+0x40/0x70 [ 510.406006][T14845] bpf_fill_super+0x503/0xce0 [ 510.406038][T14845] ? __pfx_bpf_fill_super+0x10/0x10 [ 510.406063][T14845] ? __pfx_bpf_fill_super+0x10/0x10 [ 510.406081][T14845] get_tree_nodev+0xbb/0x150 [ 510.406097][T14845] vfs_get_tree+0x92/0x2a0 [ 510.406114][T14845] vfs_cmd_create+0xa2/0x200 [ 510.406133][T14845] __se_sys_fsconfig+0x6b9/0x810 [ 510.406154][T14845] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 510.406172][T14845] ? rcu_is_watching+0x16/0xb0 [ 510.406191][T14845] ? __x64_sys_fsconfig+0x20/0xc0 [ 510.406209][T14845] do_syscall_64+0x166/0x520 [ 510.406225][T14845] ? trace_irq_disable+0x3b/0x140 [ 510.406239][T14845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.406250][T14845] ? clear_bhb_loop+0x70/0xc0 [ 510.406264][T14845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.406275][T14845] RIP: 0033:0x7f07f779f559 [ 510.406295][T14845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.406305][T14845] RSP: 002b:00007f07f85ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 510.406319][T14845] RAX: ffffffffffffffda RBX: 00007f07f7a25fa0 RCX: 00007f07f779f559 [ 510.406328][T14845] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 510.406335][T14845] RBP: 00007f07f7836b20 R08: 0003000000000000 R09: 0000000000000000 [ 510.406343][T14845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.406350][T14845] R13: 00007f07f7a26038 R14: 00007f07f7a25fa0 R15: 00007fff03028698 [ 510.406370][T14845] [ 510.612554][ T9695] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 510.735161][T14827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.735477][T14827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.766324][ T10] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 510.768220][ T10] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 510.790071][ T9695] usb 3-1: Using ep0 maxpacket: 32 [ 510.852748][T14844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.853036][T14844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.894961][ T9695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 510.894995][ T9695] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b1, bcdDevice=0.40 [ 510.896755][ T9695] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 510.896778][ T9695] usb 3-1: can't read configurations, error -71 [ 511.023100][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 511.048634][T14848] ------------[ cut here ]------------ [ 511.048645][T14848] kernel BUG at net/core/dev.c:11597! [ 511.048769][T14848] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 511.065790][T14848] CPU: 0 UID: 0 PID: 14848 Comm: syz.1.1641 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 511.076791][T14848] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 511.082566][T14848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 511.092599][T14848] RIP: 0010:register_netdevice+0x2225/0x2280 [ 511.098651][T14848] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 de 30 5b f8 e9 16 fb ff ff e8 34 1d e4 f7 90 0f 0b e8 2c 1d e4 f7 90 <0f> 0b e8 24 1d e4 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 511.118242][T14848] RSP: 0018:ffffc90004777580 EFLAGS: 00010287 [ 511.124291][T14848] RAX: ffffffff89e52c24 RBX: 1ffff920008eeec4 RCX: 0000000000080000 [ 511.132246][T14848] RDX: ffffc900057d1000 RSI: 000000000000063b RDI: 000000000000063c [ 511.140198][T14848] RBP: ffffc900047776f0 R08: ffffffff916bf8c7 R09: 1ffffffff22d7f18 [ 511.148159][T14848] R10: dffffc0000000000 R11: fffffbfff22d7f19 R12: ffff888052a587a8 [ 511.156108][T14848] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888052a58000 [ 511.164058][T14848] FS: 00007fa04a3c76c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 511.172965][T14848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.179535][T14848] CR2: 000000110c3135ab CR3: 000000007b69a000 CR4: 00000000003526f0 [ 511.187485][T14848] Call Trace: [ 511.190743][T14848] [ 511.193656][T14848] ? __mutex_lock+0x305/0x15a0 [ 511.198411][T14848] ? kernfs_activate_one+0x22d/0x340 [ 511.203760][T14848] ? __pfx___mutex_lock+0x10/0x10 [ 511.208769][T14848] ? __pfx_register_netdevice+0x10/0x10 [ 511.214297][T14848] ? dev_addr_mod+0x174/0x350 [ 511.219013][T14848] ? dev_addr_mod+0x1ba/0x350 [ 511.223667][T14848] register_netdev+0x40/0x60 [ 511.228238][T14848] gether_register_netdev+0x84/0x180 [ 511.233637][T14848] ecm_bind+0x201/0xa30 [ 511.237771][T14848] ? rcu_is_watching+0x16/0xb0 [ 511.242519][T14848] usb_add_function+0x2e1/0x9f0 [ 511.247432][T14848] ? check_remote_wakeup_config+0x58/0x1c0 [ 511.253228][T14848] configfs_composite_bind+0xde0/0x1410 [ 511.258806][T14848] ? __pfx_configfs_composite_bind+0x10/0x10 [ 511.264770][T14848] gadget_bind_driver+0x2ca/0x9e0 [ 511.269777][T14848] ? __pfx_gadget_bind_driver+0x10/0x10 [ 511.275301][T14848] really_probe+0x254/0xae0 [ 511.279866][T14848] __driver_probe_device+0x1e8/0x360 [ 511.285135][T14848] driver_probe_device+0x4f/0x240 [ 511.290142][T14848] __driver_attach+0x34e/0x630 [ 511.294886][T14848] bus_for_each_dev+0x23b/0x2c0 [ 511.299738][T14848] ? __pfx___driver_attach+0x10/0x10 [ 511.305005][T14848] ? __pfx_bus_for_each_dev+0x10/0x10 [ 511.310356][T14848] ? do_raw_spin_unlock+0xf5/0x200 [ 511.315453][T14848] bus_add_driver+0x38f/0x6e0 [ 511.320110][T14848] driver_register+0x23a/0x320 [ 511.324867][T14848] usb_gadget_register_driver_owner+0xf9/0x270 [ 511.331003][T14848] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 511.336634][T14848] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 511.342790][T14848] configfs_write_iter+0x337/0x430 [ 511.347966][T14848] vfs_write+0x612/0xba0 [ 511.352234][T14848] ? __pfx_vfs_write+0x10/0x10 [ 511.356978][T14848] ? __fget_files+0x3a2/0x420 [ 511.361633][T14848] ? __fget_files+0x2a/0x420 [ 511.366205][T14848] ? fdget+0x1ac/0x250 [ 511.370255][T14848] ksys_write+0x150/0x270 [ 511.374569][T14848] ? __pfx_ksys_write+0x10/0x10 [ 511.379398][T14848] do_syscall_64+0x166/0x520 [ 511.383970][T14848] ? trace_irq_disable+0x3b/0x140 [ 511.388971][T14848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.395032][T14848] ? clear_bhb_loop+0x70/0xc0 [ 511.399704][T14848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.405575][T14848] RIP: 0033:0x7fa04959f559 [ 511.409992][T14848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.429591][T14848] RSP: 002b:00007fa04a3c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.437999][T14848] RAX: ffffffffffffffda RBX: 00007fa049825fa0 RCX: 00007fa04959f559 [ 511.445955][T14848] RDX: 000000000000000c RSI: 0000200000000380 RDI: 0000000000000004 [ 511.453919][T14848] RBP: 00007fa049636b20 R08: 0000000000000000 R09: 0000000000000000 [ 511.461869][T14848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.469834][T14848] R13: 00007fa049826038 R14: 00007fa049825fa0 R15: 00007fff882b7748 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 511.477790][T14848] [ 511.480795][T14848] Modules linked in: [ 511.486595][T14848] ---[ end trace 0000000000000000 ]--- [ 511.496942][ T10] usb 10-1: USB disconnect, device number 50 [ 511.555323][T13362] udevd[13362]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.657043][T14848] RIP: 0010:register_netdevice+0x2225/0x2280 [ 511.657075][T14848] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 de 30 5b f8 e9 16 fb ff ff e8 34 1d e4 f7 90 0f 0b e8 2c 1d e4 f7 90 <0f> 0b e8 24 1d e4 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 511.657085][T14848] RSP: 0018:ffffc90004777580 EFLAGS: 00010287 [ 511.657096][T14848] RAX: ffffffff89e52c24 RBX: 1ffff920008eeec4 RCX: 0000000000080000 [ 511.657105][T14848] RDX: ffffc900057d1000 RSI: 000000000000063b RDI: 000000000000063c [ 511.657112][T14848] RBP: ffffc900047776f0 R08: ffffffff916bf8c7 R09: 1ffffffff22d7f18 [ 511.657121][T14848] R10: dffffc0000000000 R11: fffffbfff22d7f19 R12: ffff888052a587a8 [ 511.657129][T14848] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888052a58000 [ 511.657137][T14848] FS: 00007fa04a3c76c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 511.657146][T14848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.657154][T14848] CR2: 00007f07f85aaf88 CR3: 000000007b69a000 CR4: 00000000003526f0 [ 511.657167][T14848] Kernel panic - not syncing: Fatal exception [ 511.757968][T14848] Kernel Offset: disabled [ 511.762284][T14848] Rebooting in 86400 seconds..