last executing test programs: 8m2.661778477s ago: executing program 0 (id=571): r0 = socket(0x2d, 0x2, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = syz_usbip_server_init(0x2) write$usbip_server(r4, &(0x7f0000000800)=@ret_unlink={{0x4, 0xfffffff8, 0x0, 0x0, 0x3}, {0xfffffffe}}, 0x30) r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000440)={0x101, 0x1, 0x56, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x3, 0x0) mq_timedreceive(r5, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f000000ae80)={0x50, 0x0, r6, {0x7, 0x2d, 0x3, 0x10020, 0x40, 0x3ff, 0x8, 0x9, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0xa, {0x3, 0x4, 0x45, 0x1, 0x44e, 0xc, {0x4, 0xc, 0xb, 0x1, 0x4, 0x7, 0x9, 0x7fffffff, 0x0, 0xa000, 0x4, r7, 0x0, 0x0, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r8, r8, r8) close(0x3) 8m1.358362493s ago: executing program 0 (id=578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x20, 0x1, 0x40, "6906001022366ccee4ba5686b4f801fef4372f2c74f6024305f11fd3454ad23d", 0x32314d48}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x2081) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x59, 0xd7, 0xad, 0x20, 0x106c, 0x1a45, 0x5666, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x8, 0x88, 0xa0, 0x8, "", [{{0x9, 0x4, 0x72, 0x5, 0x0, 0xff, 0xf1, 0xff, 0x7, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x37d}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x100, 0x8}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8001, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[], 0x1040}}, 0x0) r10 = syz_open_dev$loop(&(0x7f00000000c0), 0xe4e, 0x480) fcntl$F_SET_RW_HINT(r10, 0x40c, &(0x7f0000000040)=0x1) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x100, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000080), {[{{@arp={@multicast2, @empty, 0xff, 0xffffffff, 0x8, 0x8, {}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0xf827, 0xda, 0xc2c, 0x9, 0x6, 0x6, 'team_slave_0\x00', 'wg1\x00', {}, {}, 0x0, 0x44}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0d0b6d7ec3825daf5392b99242df8f95f67ab4104b21d8bb164815d80213"}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0xc, {0x2}}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x1ff, 0xd, 0x1, 0x0, "f85a6ba499789f9f790bf1d71481e9eefa628198b2354562a66ce206109e2952cd6bbd9672d6bbe91a54e9e26a40b85f8f4556e02fc5f41216b83eba25b98cfb"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200507a08a84d00810066006000451900140068000008119078ac14141ee0000001"], 0x2a) 7m58.933060783s ago: executing program 0 (id=586): openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x20080, 0x4, 0x4, 0x84100, 0x2, 0x1, 0x100, 0x0, 0x9, 0x7ffffffe, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2800000002, 0x0, 0x10000000000f48, 0x8, 0x24}) 7m57.193956327s ago: executing program 0 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x1e, 0x0, "098673c489fcab3a046f1bd28e3bf084804a91ecaeedb3587f57ac33ce2c7b23261634c3f4db5fb1629816f881c848b1ed7afbdc35d62d7f03cedb6460a3afc4f2bd9c5ce06ae6827e9dde6959f0b2ea"}, 0xd8) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x164, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x152, 0x2, 0x1, 0xfb, 0x10, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "8f9fd3"}, {0x5, 0x24, 0x0, 0x2768}, {0xd, 0x24, 0xf, 0x1, 0x68ca, 0x3, 0x1ff, 0x7}, {0x6, 0x24, 0x1a, 0xfff9, 0x29}, [@mdlm_detail={0xc7, 0x24, 0x13, 0x6, "2954312cf91ca1322943ad8dacd72229a6c371856a0d84c6b2e064116f7f1de49834fc31d8877efae5ab76582a6e3fe722be81799fc7e8ec25b5dce6ddbf2557f115ea25a08c43ff59212122106a6b6b18849f216bb85e13127a90150f384b78da84db27edff255d75ec45814a70b9475b0d04f0d8cb1bf6947554659fd2078384bc7d170643dcb0ad6dfe6f248ab619d6a01cd60f30e7886db37bfe1078b729b06ffc1f6186c0a671532d8fb421c3c5b8d6dea3f7a8f7d890143b742eff637910d3cb"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x4, [0x8001, 0x5, 0x5, 0x5, 0x1000, 0x1]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xb, 0xe3, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x6, 0x4b}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x4, 0x7f}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x3, 0x1, 0x5, 0xff, 0x4}, 0xce, &(0x7f0000000500)={0x5, 0xf, 0xce, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x0, 0xff0f, 0xfffa, [0x3f30, 0x180, 0xc030, 0xff0000, 0xff3f3f, 0xff0030]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x10, 0x2}, @generic={0x70, 0x10, 0xa, "c441c4d3fd4ed65b56d8558d86f4a9aaf51babaaff0e2ebd729d9e86781d16ed37d2dffd476ee8173c8f35c7c5d1af3a8037d0e99ad880197e3eab68283a1fa62d2b0a3b502910ad7c4a5d7f83d6bd134935a314aa0b6558e3a108002371ee75ac153217cb6a8d39c6f5a3ac47"}, @ss_container_id={0x14, 0x10, 0x4, 0x95, "49b4d958e093a6f2c021f45587d5920d"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2d1a32fa8d1a986451cf64aa4cc6a8c4"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc29}}]}) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x25, &(0x7f0000000140)="405b010a0274ae3fd4ff148aac5203a1e2ff18b158741de6609e1b30cb2ee6232f36941204") sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 7m54.955180378s ago: executing program 0 (id=599): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) connect$inet6(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x361) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x200c42, 0x0) fchmodat(r1, 0x0, 0x147) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 7m54.193264293s ago: executing program 0 (id=604): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3fff, 0x2, 0x400000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)="302d434f4e4659473dffffffff626c65640a", 0x12) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x0, 0x20045, [0x0, 0x89ff]}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001a0001002abd7000000000000a48fa812ec2e12060ebefb8d91bdbe071486219acd09f06415c0cb501d80f2403be106563a07634a2b598ab4cffeea2a13b8792f43e7952c9859a61de45824308d37b907d5b1207ea191cfa223cd84badb9ba2f34fa81aa967e1b18d9e2c9a8885a64971c8b356fea65b35ad10f983db1991aeb4b7c519e3a2647f9725a26b9ba1e13b1"], 0x78}], 0x1, 0x0, 0x0, 0x24400}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) poll(&(0x7f0000000180)=[{r2, 0x8}], 0x1, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002680)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_FILTER={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001340), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x62, 0x8, 0xfffffffa, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x80000, 0x4, 0x3, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0xf84e, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x2007, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0x3, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x2, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2100003, 0x1ed, 0x8, 0xfffffffb, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x0, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x7, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c4, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0xa40, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x2000001c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0x2000bb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x6, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0xfffc, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b9d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x992a, 0xffff3441, 0xfff]}, 0x45c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000041000701feffffffdeffffff2a51e116c6303b10cf276d318d017c", @ANYRES32=r6, @ANYBLOB='I\f\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xc2, &(0x7f0000000940)=ANY=[@ANYBLOB="1201100300000008410e0203010902b00003010a00040904000000010100000a2401020029000201020924060301010900810c24020600020102080020920a240702010004ac0003090401000001020000090401010101020000090501094000098c0b072501088007000904020000010200000904020101010200000a240202ab0a02000000092402010203b6026b08240201ff0487090924020103060481080d240201ae0106099d6fbb0419090582092000032e020725010c0606000000000000"], &(0x7f0000000d40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x201, 0x0, 0x7, 0xff, 0x8, 0xa}, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="14440007000e9dbe817f02"], 0xa, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x4817}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xfc9c}}, {0x4, &(0x7f0000000200)=@string={0x4, 0x3, 'K^'}}, {0x39, &(0x7f0000000300)=@string={0x39, 0x3, "6f289f5d1a5cf834ed547ef7ca252030e330b599f15bedf30fee51f95ec18cfab702bbc320b9414adeffc14d26888c00bbb5e6fdfe257c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc2c}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x44c}}, {0x0, 0xfffffffffffffffe}]}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="311a0600df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c76657273f16e6e3d3970323030302c1a"]) 7m38.43165249s ago: executing program 32 (id=604): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3fff, 0x2, 0x400000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)="302d434f4e4659473dffffffff626c65640a", 0x12) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x0, 0x20045, [0x0, 0x89ff]}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001a0001002abd7000000000000a48fa812ec2e12060ebefb8d91bdbe071486219acd09f06415c0cb501d80f2403be106563a07634a2b598ab4cffeea2a13b8792f43e7952c9859a61de45824308d37b907d5b1207ea191cfa223cd84badb9ba2f34fa81aa967e1b18d9e2c9a8885a64971c8b356fea65b35ad10f983db1991aeb4b7c519e3a2647f9725a26b9ba1e13b1"], 0x78}], 0x1, 0x0, 0x0, 0x24400}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) poll(&(0x7f0000000180)=[{r2, 0x8}], 0x1, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002680)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_FILTER={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001340), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x62, 0x8, 0xfffffffa, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x80000, 0x4, 0x3, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0xf84e, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x2007, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0x3, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x2, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2100003, 0x1ed, 0x8, 0xfffffffb, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x0, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x7, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c4, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0xa40, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x2000001c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0x2000bb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x6, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0xfffc, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b9d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x992a, 0xffff3441, 0xfff]}, 0x45c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000041000701feffffffdeffffff2a51e116c6303b10cf276d318d017c", @ANYRES32=r6, @ANYBLOB='I\f\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xc2, &(0x7f0000000940)=ANY=[@ANYBLOB="1201100300000008410e0203010902b00003010a00040904000000010100000a2401020029000201020924060301010900810c24020600020102080020920a240702010004ac0003090401000001020000090401010101020000090501094000098c0b072501088007000904020000010200000904020101010200000a240202ab0a02000000092402010203b6026b08240201ff0487090924020103060481080d240201ae0106099d6fbb0419090582092000032e020725010c0606000000000000"], &(0x7f0000000d40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x201, 0x0, 0x7, 0xff, 0x8, 0xa}, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="14440007000e9dbe817f02"], 0xa, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x4817}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xfc9c}}, {0x4, &(0x7f0000000200)=@string={0x4, 0x3, 'K^'}}, {0x39, &(0x7f0000000300)=@string={0x39, 0x3, "6f289f5d1a5cf834ed547ef7ca252030e330b599f15bedf30fee51f95ec18cfab702bbc320b9414adeffc14d26888c00bbb5e6fdfe257c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc2c}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x44c}}, {0x0, 0xfffffffffffffffe}]}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="311a0600df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c76657273f16e6e3d3970323030302c1a"]) 6m54.083606117s ago: executing program 4 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, 0x0, 0x40c4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000440)=0xade, 0x4) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x8000000000000000, 0x80840) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x4008044) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) 6m53.099892244s ago: executing program 4 (id=823): r0 = fanotify_init(0x0, 0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) clock_settime(0xfffff000, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 6m49.475525532s ago: executing program 4 (id=833): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x80842) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000180)={{0x7, 0x1b}, 'port1\x00', 0x48, 0x8, 0x4, 0x9, 0x4, 0xfffffff9, 0xf, 0x0, 0x0, 0x7}) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x9, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000280)=""/118) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000300)) ftruncate(r0, 0xffff) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000004c0)=""/97) read(r4, &(0x7f0000000540)=""/108, 0x6c) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000005c0)) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000600)=0x1) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000001980)={&(0x7f0000001900)=[{&(0x7f0000000640)="d38825ac9e7874bcd659e41cde8958b6d3d17316489177732f3a7f6b1a9717810463337a", 0x24}, {&(0x7f0000000680)="145200116aa3ce", 0x7}, {&(0x7f00000006c0)="b4d4d9c381263db9266fd578bbdeab23e6bd0a519a98db20ec646b37a6a81fb8ed243ba7e6b86bc9f60a5fb5ce043b6c", 0x30}, {&(0x7f0000000700)="a863297e142ad58e9f5d40c103436f0c3b17e0825a94072603b0", 0x1a}, {&(0x7f0000000740)="f03975341b9d7fe3c66d5fb07e1893089352fc3b0561aeb394b2488012261a289b8d5f59cdb46f09543e998aff9bde360920247c4c30fdab71d40d7477ffa0656638faa153dbe3cb24294c0e855337a4cb4698da3e", 0x55}, {&(0x7f00000007c0)="49b27f4d3947b42b7751ff730f20013f7de29768644e5d53af29b7d8d6cc5ef446cbe12a94125adceb3e05985f6e74de90192b526d164ef141d429248dc53b32c2c23771c52ff9850d92618c2faf88fb700259379dbba9bdc8e8c965d8f80d2d5859e7bfed495c51dbb1a17ba15599cacdfad0f90c23f5493bdaa8111257e894bff8fd9e058e7121420ea7b06d81271d24de9969cbd00f395d4f794e59c742d4269e519c7ad8cff8bf7fdcf8ff713a90023b8cdea16988671075d8a5bdfd138f59305599cc634eed6c391cb230e78d51f420d906c99284ca267126afc2cc30e239452c75c0b2c1a9454677fe7bcb589d72e2327901", 0xf5}, {&(0x7f00000008c0)="681a8ed31c03a42c3b2c18ff2a1ec0515c36552f71ac822bbcb02392646d72dadc2a37db1338a31590bb572d365b8d031d4234ff749f7178ea96ec7d", 0x3c}, {&(0x7f0000000900)="7ac8e7d637e4a4737b90020bb9edbb647b853b8ae6a1bcfa99fb1a814abd13726dbe82f338a381abbee28d6ebf30e7ab25287ff2d12a5115d3351319e60fa0d933f23ccd3becce769e49fc5f6e9c31f77d6ee7782186cf2e4178dcd687f6bc61429458573927e0b0619d90f931814dd4726dd7f148556e1943e590422083dc0983cd98435e1f3c2a60ffd8b348bc4d8c6e251bc6723d981efff4c467fc42ec1c3b12a8e1036b9cb1845b54d6a70b04ff409340198ad941e05bb8c7e489b682b5041952828fdefe25eca598e6e210b60fa375dd4ea9709be76a999bdc9717be2653a458725b90206016dd053036b87f950e683b8305908242f853294556c81591972441bf8130714ae34df70b637cfb1afdb3c2892a13c76f97a5dc11900d245f2fc21d16c98dd9b1434b7b68bb92713feabebef50358a5c029a07af5d30e8e3b5a4edf57c99e89455c9e173daef86a7dc572f7d42ca961ac06b8754ecc84eb223852980c06e7c201f004b04d9cb6f0416fd5f5e486e9b0dc2164f6c896ec2a0a9c5b373cca40639b729ccc50306ae02de5346e14e4b3b806f85bd0d1c06bb196c748ce2cd9ca262cddf8f1636c8ab30d5e4ab9584e8492b9d663f5bda2771b3e5c8f0d8e73511b1606fa09645f62857a7584f54a8100188e27273176874c981d20194d820ba7842b409bef34a9fa66ab938cc00aa3431e725437b70cfac93d49bc808feb46d1c1657b3d7f9f060889bfd7de9c403a4c880fbcc580700c1d303783184195a52db8f3abc4bddb3cafcd76bb66184c88750f056ef46f0dcd28054c1c14f59a093cfcba51e4f7a72c2e9c92589d82dfcc680f022ff38b9497648fe445ad482fb8d11cdc3d09c32f3c88e966a774dc7eaec3e15bfd0b86fa0ab0295dfff1c92e8808956ebfafd2b6f87e9850321b4d09671b5636d085b6b25fd04413202102aa00b329574ff4ba3f6ef2622f05aec1efb3a8f968a5b9ce795928ecf6a2b7a1f37f2f35f457665c273fef4c8dab338156e4e16b5efc973c2ae73b6b08470ec75469bd2b798effdb7933d4d806433bdfc0c0a4c584200502eb769516a1bd3b6ec3753ff5a2cda80e5f18ffc87eddfc9919c488b21c1d4322085588be8ed829612b1f387175b455ab6381c22dd4ac6067eb064014238d46a054f3fad6201a14d874dda8d626e27324a5c64cbe14b55898fb2a8c7ef40e7a2a4e6f41bf34b79a5c03103db3f24f26feef11937e8d98083672438041b481191b543c61e71929c58ba50c877425a77873418d7bf0131bbee7cc872ec9bf0f39a5a5c486b9f39e127317a7f060b2d5e7c364abca4e0a8517f52f536260300fc44387c359149b819dbbc8d675aae96c55066b2f4a695ccb989c28dd300b56584d2ef2136af9e8e8e3704b97477cdefbc8e76d95c869503db622ac0822c423d45fd19be5e46ba04f1168b98be7d1a37c12686f7629a375ec7794bd4708f9cb06c366b0d7333d240deb8b0c6be09eb91627a7816bda033412ce73e22b38c7989de6cc33af19e04dedfae373938a6c55be7c7b4a4f59a669addb1e7cb7fc1a2a5e9a7f1f6f03967a944443dfccecf1fa328d1a3056f900961253da9750994d6fb8cf970a0c41ca02a5d99ddba0fb74ed783ff4570309d7a37f4111131b1b8de31a1785406a93c80c281158f10884e91aa407e1d1d46119129021f23f7fb6f28fa6607c5bc83baf93b7ce47ae01703e9d3ad3f37f0fadc0bc105d1c698bb8d1a7f4f250101b59a7694e95c62530729ecb062b042670acba2c0436ecd766ed7e4c64b17b473ed9db89723f60235f317913178f9e3f8d4814704e11011b62844f765c4b8bc298631f452d8d6b13ec7cfd503162eba6a023c0e9588f416feed63f9a5053528fbdd6e34a42d922dda057b156987860ff0887202488cdbaa417590e8c5bc168f1df66fb64a41c9e94bbad9fe8d36cf9981e378174772e5d08687e090f3e559670b91587d9bf737ff9cfc10e02c4633218cd3a1677620dc5a41cb51e01331994e851d92af2b858b5efbcf14270563fbd4b8d29a77d64c10c837e8778f795ce5551139395d0aced25037c32a942b6a44f8dee47c8479bed418a2f4224c0b6552730e1f7c6e9819b0328f100de791f6834dd8c0b6dc32735624e53fa32ad04abd1c9ad2a9f593f774e93c7c7a05334271627118ce361a1686fb385bf6289d85b166299a2e4960e0ad9d8910c6dbbcb62b6bb0c02bfebddc9b64844f8d3559e6055ff11990ca9ccc8dbd8b76ab53a6337c1e7572627200164852a00647a86b56a1446e474277036f186458be8fc8b9fc330de1a83dce7dc39d9e69db578a5ac3a1dd0cb5c5c8f5f023bc9e807372037e5d7014abc4999a73356ab31975aace89197e132ae8703714680582f890add7daf63e441f842d7cdd7d46debd71ca00ad65e2c4e23a33cc1a7a0d96f7082ab85affeac4a142aa8238784759ccaa261114daf5ccfb9496e2039c8e186a32f9d00abac2a39b89b452a92af1e447ee3f890a4a99e70541795d480276bd23c14d6b5e67da52ac63c2f7a32b6cd4aba5646b3b082df62c0209a2fe8167024c45c9c5dccda260f595ef5f42a73659063b462ae1b73d214b46b0d81a4efe7bbe2c4d981a386c5abccc610e0b99f41c635b719ecdf7fffc033b09a606188e45c7a78921554a9a28ff8e57681370de8cada5e58d62a86c8413ac90974474cc6639a05a90897e1bdf48c45b41ea172299f27a28874897595d82d068c73c911f702e3edf3244990a06952d210d02beb97b13e15659ee5a0434b3c5ce7f36c6c901a8ac0ef0c046e7c63d0971a6a1fb00958797fc0011b1fb7c1d1edea1ca2815336aacc67c544657c96e630ac7be6dde596a5a463b69593fe0463ab539ee0826b0f86ee3a374df036c817d27c57e103a5f34b33a9a40a379038bf96e81d9f353300f3fc0ceb023e70272b08bb88717345b2488512f184fcbb1ed542df90f75364656edcd3cae2f9ffde82779343e3f242e1ee90c884526c34ef4a2506872e4d67086689ec400206918ba4945102cf150ea3bf0351ed2cb64345738ef3815a0f9ef538962abb8de593ca0126a7d32a9090bf36f0a40a5d96f2570036127cf9792994546206bf3570cdbb004e08f1f8f4115b7c69a25d398f751491c2080157717680adc9b529cec3bbc627233820cd520945922f6c2a29d439d9bf5ff71da5e899108f99b6a6d91d6a740b6b941e724eb3eb9156b4f85c26982b1ee9a1f3fc3e0c6ea18321121a79d4f6473b782b734d6d422b26f81095793f5a6b549424f8ba731575f7b859a3b681a46367ba70a115d1fda3550e599a5f0e2a709929f55052fae8e2e685be9eaf3674ba1b6d72401597e348666d7873816954f6174c146a4ec57ff5c445af01f796fb2b7aa0383efc97225fad3c9dc2e26951ac3ec43a193f39d2005b601dc753c59ca368821ef4bfa002a99a44462e5ffa47360ea74bc2114c7383107147912242be1d1016cc1c3b3f5f4b6e4ee53f3431006c9aae6979dd508bd40e7ff707dc1e6ef90844400e403b51df05a0dfb09705f6903198806d93b5a44b3c38040be6c9c61f747e988fcf88c0b3180d401c6ef6987b98df5e2f6a5096d8847bfe89fd8febfd2fbacdde94ef4b84072106b35dc411532e2fe4970368f8021b32fd7f12dd0ff186beb4d40112ec9536f8d4795b7853924d835df1f54c7cc90a1a52bf17f5f45a1d150fd236e99f8d469d1b519cb39a1f0eba4ef5ab251dd1829dbb68a9498127726f2d17104110b39f6850e6923055921497406e71fd8b1e6c983fdc3309945967c735ae5ef28257134de51a83729bdf83f97a7159250edf7d64273f2e3d7cbfca528a3e05f33a034c94c4b4c5128de4249845198444a6e838ae51ecd0c0d595be9c7d7f8781108f25fbacad4a2192fdec899e50ad3573e809c02dc44361071c3704c310fe52ec94f046959bfd3dc9fc31f17812b963dd23b9d743b0e929f7e68389d75240c5cc007be1b58eff1121ae0630123e55149d143931f0ca6e24ec358c4ffc37a049fa286f455cd1b9eb9d6fe9a4649d6d12a2854cdcd1f2e3cf84bf276cf6aba4e0ddd37e037778584214defb11124ddfa48b22ae59b7952693fad598392d9b62ee5143ca933335a803b5d5bb9667e88a25b7076bf90b07673793bd4d843855406fa0e02cc5329eea5d7a2e825c1788a847d468ddd1ec9450f82cb64df63990093c6d754cf6d7a9a98233940bdebdd90485e8fe49fb96bb4ac03e07845dd641b1a6a35425d5703355226c145af8b6bcb85a816cf042c3ff73e7c4fb800b7e5ef0b0df0e2d50ef8cbe8b9716c383c7d45d72d6fc0638d7b8ddbc5bda12fe0eb35219af4b719f1777e2e9959294ec03b5a3cc9adb7f72e891ad6d0a2af2473f527aa6f3a2b418e187d064b41dcd0cbd90ec449437607450439b7f0a12ee813333252ec5ba938cf83fe87c4a1c9e859b60fb3ab8614f7d8c740843404399c8efa63c2a289244b50c145a38e729057dd031035bf16c76c7124512b7f53c946f6a68fb76bbed004072667fbac9e140aa762ea1bd38abfb7e854a94dfb79744922f4e7248d41a06f9238948ea183a709bebe5b5260df013075f81f22aa9a50339f5cd1b1438886799e129eba053529fc5cb483f3cc510ec65b1a43cea7cd4db90a715af3bb294b9d55d47710ec648f4fa7dd784fe8f5d72548f1dc93a4a62684ec2cdc797762291caec9dca6aa18072581792f8f902e7fac38be738b77f532f126b8a37b35bbfd62c1f33b23f6bf7b49197ed88ee8efd63e1dc24e9d781eb22901dbbe3d9d9847ef6104e81647b3c036694ed9703517e92d63de269e062cda676d8dc26c83a3343040b8c8629f14774ab0744bada3f61c3347f7b38466d737902b4707afe8361b1d399cb31b027dee0f80cd77b9efb07cad1325636047af14d37561a0e7f90b7ae73f7dd8ca9beb3a956df0ff2fd6b8373bd8e4a1d43c0b1739e374ed4066ad884463c0785a800653c6a227ff3d21ca48273a049607f5da0d7d81a0cb7df1df1d61f049c02b619ff31f318505c83a48f66a66aad3f9ec5143e2e8a8613f174dc544afd38a0fdce56402527c652b096bf1d2786365e097226dd499ac8399c4d27bd6bf6e109a5cbd94ce5cf24e5b81f4c029a2b921a773beb0332ef879d68fcbb4d536e9baf81ed446eea657a2db9d5e0bd56aeee0bdc3f8e3a111ae606474fc31da94e1fcbff72f7b9a92b7ba9c0a3baa52c95b9f99054e38eb3fd82ebae7cf479a4bc50e0ec643a7f3692a1b50f35e4d60216344a3bc21560142c320640588f93c3111bd280211876e9975255c7e0e0343be8ff20ccec577c99fc1c391a90b03880d2e882046dc52e43cf3ba9c672e19f968b4fbf7ae494d5a6d31df6aec01ce4f5da20042a619e4a4d06bcc9f08a19705b69997bba4e5d9160418b99319eaa88892fb39858d836af291440ad20e287e4b3cbf0634aa3d29035f243db8a39fd59ff5171d7b15c12eba991d905ffac3a8d6e0f33cc857aa769f4fa7e5f974dd9215fe19da1e1bf30e6800973862dc56f10dd7038d6fae3559330b72d11a4db66aba9f37959ac5cb2e652a412df082f4986a99186d64a53a1092534622f047f7ae6c55f48f86488087425a1857079abe0d556c9a52761d886ca9df2767a8f94b4dae6519799c678c57bf501c33657bfeb65d0a57afb354dc78e4ec6bd1a90fa24e440c76e291213600284deb7f6797b53e5b8fb0b2ff077e6c8e3b44a392d2824b43962bc00e659c58de2", 0x1000}], 0x8, 0x8593, 0x0, 0x80000001, 0xf31, 0x0, 0x5, 0x400}) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000001a00)=""/212) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000001b00)) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000001b40)=0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b80), 0x101000, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000001bc0)=0x1) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000001c00)) bind$unix(r4, &(0x7f0000001c40)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000001cc0), &(0x7f0000001d40)=0x68) 6m48.984669982s ago: executing program 4 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) (fail_nth: 4) 6m48.314761809s ago: executing program 4 (id=838): syz_open_dev$ublk_chdev(0x0, 0x0, 0xeae00) syz_open_dev$ublk_chdev(&(0x7f0000000940), 0x0, 0x80600) 6m46.275039386s ago: executing program 4 (id=843): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000005, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x80, 0x3, 0x1, 0x6b9d}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000440)) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) close(r2) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x8) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0600000905810300020000fd0904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="b9ea911fed0ce8d4", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000029", @ANYRES64=r7], 0xb2) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x3, 0x3, 0x10001, 0x8, 0x5c6e, 0xbb, 0x100c, 0xf5, 0x2, 0xf, 0x0, 0xfaff}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x188, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in=@local, {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x87282}, {0x0, 0x8, 0x80000003, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x0, 0x0, 0x35}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x200}}, @algo_aead={0x4c, 0x12, {{'pcrypt(aegis128l-generic)\x00'}, 0x0, 0x200}}]}, 0x188}}, 0x0) syz_usb_connect$uac2(0x4, 0x11c, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x3, 0x1, 0x5, 0x20, 0x72, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x3d, 0x2}, [@multiply_unit={0x7, 0x24, 0xc, 0x8, 0xb3, 0x0, 0xc}, @multiply_unit={0x7, 0x24, 0xc, 0x3, 0x80, 0x5, 0x2}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x204, 0x5, 0xf, 0x8, 0x3, 0xfa, 0x3, 0xb}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x40, "b313adb4"}, @processing_unit={0xd, 0x24, 0x8, 0x4, 0x6, [0x1, 0x1, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x39e, 0x4, 0x84, 0xb}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1, 0x8, "d032"}, @as_header={0x10, 0x24, 0x1, 0xa0, 0x3, 0x2, 0x1, 0x1c, 0x0, 0xda}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7f, 0x3, {0x8, 0x25, 0x1, 0x2, 0x0, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0xa, 0xdc}, @as_header={0x10, 0x24, 0x1, 0x4, 0x2, 0x2, 0x1001, 0xbd, 0x7fffffff, 0x7f}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6f, 0x1, 0x81, 0xfe, "4afc49e75ecb75"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x6, 0x9, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7, 0x8}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x9, 0x3, "53ffd08e0e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x10, 0x7, {0x8, 0x25, 0x1, 0x1, 0x30, 0x9, 0x4}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x9, 0x82, 0x41, 0xff, 0x3}, 0xffffffffffffff8b, &(0x7f0000000800)={0x5, 0xf, 0x3d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0xff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7f, 0x9e, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7, 0xf000, 0x2, [0x3f0f, 0xf, 0x0, 0x101c01e, 0x0, 0xc050]}]}, 0x7, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x445}}, {0x3b, &(0x7f0000000440)=@string={0x3b, 0x3, "418049860e595e680cf072c7a6b7fb308d1aa3415206721f0e785f128f0fa666fefa603d52886a9e934fcf5a78b929e45d5f3ed999c5376de0"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x816}}, {0x85, &(0x7f00000009c0)=ANY=[]}, {0xad, &(0x7f0000000a80)=@string={0xad, 0x3, "37f57be86b1e9e4bda3ad30cebb3324de8c0854cd5ab275f4cb94fd0b689092a762d8e841585928c4fa2d8fa3002dedd3ff17a239d588a2e57a54fafee49d13b4bd1ddbd0733609f6d48fa5f8309ce5ff57e36cd3b451946ec1aff8e1969a9e830a01022388eb0599fba94c1afd3ab77b4ef83ffbcf011d72e4c87cb22ef09a1b6eff88ded9fbe6cca0d5a1626f6e40ee0bcc79e5b22eb3f9fd8fbf0e5a5d04c6f93edc36665d544b80082"}}]}) 6m45.310354449s ago: executing program 33 (id=843): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000005, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x80, 0x3, 0x1, 0x6b9d}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000440)) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) close(r2) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x8) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0600000905810300020000fd0904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="b9ea911fed0ce8d4", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000029", @ANYRES64=r7], 0xb2) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x3, 0x3, 0x10001, 0x8, 0x5c6e, 0xbb, 0x100c, 0xf5, 0x2, 0xf, 0x0, 0xfaff}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x188, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in=@local, {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x87282}, {0x0, 0x8, 0x80000003, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x0, 0x0, 0x35}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x200}}, @algo_aead={0x4c, 0x12, {{'pcrypt(aegis128l-generic)\x00'}, 0x0, 0x200}}]}, 0x188}}, 0x0) syz_usb_connect$uac2(0x4, 0x11c, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x3, 0x1, 0x5, 0x20, 0x72, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x3d, 0x2}, [@multiply_unit={0x7, 0x24, 0xc, 0x8, 0xb3, 0x0, 0xc}, @multiply_unit={0x7, 0x24, 0xc, 0x3, 0x80, 0x5, 0x2}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x204, 0x5, 0xf, 0x8, 0x3, 0xfa, 0x3, 0xb}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x40, "b313adb4"}, @processing_unit={0xd, 0x24, 0x8, 0x4, 0x6, [0x1, 0x1, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x39e, 0x4, 0x84, 0xb}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1, 0x8, "d032"}, @as_header={0x10, 0x24, 0x1, 0xa0, 0x3, 0x2, 0x1, 0x1c, 0x0, 0xda}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7f, 0x3, {0x8, 0x25, 0x1, 0x2, 0x0, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0xa, 0xdc}, @as_header={0x10, 0x24, 0x1, 0x4, 0x2, 0x2, 0x1001, 0xbd, 0x7fffffff, 0x7f}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6f, 0x1, 0x81, 0xfe, "4afc49e75ecb75"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x6, 0x9, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7, 0x8}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x9, 0x3, "53ffd08e0e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x10, 0x7, {0x8, 0x25, 0x1, 0x1, 0x30, 0x9, 0x4}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x9, 0x82, 0x41, 0xff, 0x3}, 0xffffffffffffff8b, &(0x7f0000000800)={0x5, 0xf, 0x3d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0xff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7f, 0x9e, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7, 0xf000, 0x2, [0x3f0f, 0xf, 0x0, 0x101c01e, 0x0, 0xc050]}]}, 0x7, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x445}}, {0x3b, &(0x7f0000000440)=@string={0x3b, 0x3, "418049860e595e680cf072c7a6b7fb308d1aa3415206721f0e785f128f0fa666fefa603d52886a9e934fcf5a78b929e45d5f3ed999c5376de0"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x816}}, {0x85, &(0x7f00000009c0)=ANY=[]}, {0xad, &(0x7f0000000a80)=@string={0xad, 0x3, "37f57be86b1e9e4bda3ad30cebb3324de8c0854cd5ab275f4cb94fd0b689092a762d8e841585928c4fa2d8fa3002dedd3ff17a239d588a2e57a54fafee49d13b4bd1ddbd0733609f6d48fa5f8309ce5ff57e36cd3b451946ec1aff8e1969a9e830a01022388eb0599fba94c1afd3ab77b4ef83ffbcf011d72e4c87cb22ef09a1b6eff88ded9fbe6cca0d5a1626f6e40ee0bcc79e5b22eb3f9fd8fbf0e5a5d04c6f93edc36665d544b80082"}}]}) 2m47.678242547s ago: executing program 5 (id=1712): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea0904db"], 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003b40)={0x2020}, 0xfffffffffffffe09) 2m45.548249253s ago: executing program 5 (id=1714): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001700)=""/4094, 0xffe}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000040)=""/137, 0x89}], 0x4}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r1 = socket(0x23, 0x80805, 0x2) (async) socket$inet6(0xa, 0xc, 0x8) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) (async) r2 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f701421301090224ff7f000000000000fb00026c5dbb7983542ba395a4296369650009050467862fafac54b194bd5c89fad97be6156a464e70bcf9b860392132302dee627aac514acb0ceacd8a2ae9d173"], 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000002280)={'lo\x00', {0x2, 0x4e23, @loopback}}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) (async) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CHANINFO(r6, 0x80306403, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x58, @private0, @empty, 0x1, 0x40, 0xe3e1, 0xcff}}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m45.216937917s ago: executing program 5 (id=1717): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c00, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0xc0a02, 0xce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff0000000705010200020007058102000200070502020002000705820200"], 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES16=r3], 0x7) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) 2m43.084521373s ago: executing program 5 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x66032, 0xffffffffffffffff, 0x40000000) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f000001a380)={0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000580)={{r0, &(0x7f0000000000)='ethtool\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x10000, 0x5]}, {0x400, 0x1, 0x5, 0x80000000}}, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0xffff7674}, 0x2, &(0x7f0000000540)=[{0x2, 0xeb2, &(0x7f0000000140)='@\x00', &(0x7f0000000300)="7cb46de7b4f09245068a6a70c4c08dd26b97c469ee26c0c70da3ce8e279da3a62147bd195d763418671cbb8bb045f9ae6d6f732a21b6d8d9cd5d66b0dc020b474706f7f0e47c8623f225914136e25d78fef804e3241d4abf0eb4f3f1c9054d4c94d4b70d8c3cc003399e6bb33e2a775287b660d5cf25e8217623ff1dc83d24573bf0bda39616a920dfc89742da24d744403cf7160fd48bad497b7f5ab6a439eef409ecd0ebd2c57d455c6a3aef88811f2736c1dbb1f0e69bc0c9752f345eba16dfb08f29a47a049b984af1f342219a563745", 0xd2, 0x20}, {0x3, 0x98, &(0x7f0000000400)='ethtool\x00', &(0x7f0000000440)="8d59e79c07ad04dd86af8e5f65f33487304a2dbd3df98006a9bede094a3e3189ecdd80b9c91847a3f19493c4c07750edaa6e36a061c7b9341be2ce3eb983e4d5595bb09a08e584c1ab67b9b280a997b5dce39888838ba0bcc622e96ae22c5c8f917fd240cd2724cb6d1ce7f3fe9e8dc980baf33bc091012158beb5020e030bc78ca601fbea89429bf5d7bcfa75077f03c5439347a0215b0e40e4d2d690c426a2ce80d640126803c84709d99e691daf2ced83c8475f2128e25e57177306f4e56cb58995b3700a6e281da0583687c7234a5319", 0xd2, 0x12}]}) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000600)={0xfff, 0x8000, "90f4f7cbf53c8ede82cdacd4c10f45a13a30df21b34ba101", {0x200, 0xde2b4c}, 0x903}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) 2m42.822416739s ago: executing program 5 (id=1726): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="200101000000af"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000004540)={0x44, &(0x7f0000003f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x6, 0xa8, {0xa8, 0x31, "11860ec776827d604df3e65c7e14097678b8f94341fb1a22e78f3986907258291a4fcb50a4a00cd44db31ead64c2ab1000533d5c42a172e023ffba965f9026ae953683f1f495fffcfb92cb495b539ede68bdfd16d30f17f64dcb639f4d241fcfe0087674521f0bb333cef939b8b67b93bb20e06f0ef644a37070570350a4f94d8eebe954446eb4ad3e23b8a58a69341a61d387d2918e9e4888921a6d7c43d7e9334c1c3c7046"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x40, 0x9, 0x5c, "1d3ef94e7c95023db2f970aad0c8fdff4b41463fe861739b753c6ca44ac5791e11bce9021f3adab6bcafd3386117d2bdf5659ca2910af705c48a3e939837dec917118b1720b68f1d02c658d4136c16685a694f3b804f963dd9949087"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x81, 0x3, "a38b02"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "2214e1"}, &(0x7f0000000440)={0x20, 0x83, 0x1, ')'}, &(0x7f00000004c0)={0x20, 0x84, 0x2, "937b"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "b5ce2a"}}) 2m39.498233751s ago: executing program 5 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) dup(r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000380)={0x7fffffff, 0x6}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ifreq(r3, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_data=0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x6}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) 2m38.555721667s ago: executing program 2 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000100)={0x5, {0x521, 0x3, 0x7, 0x4e0}, {0x6, 0x7, 0x0, 0x1}, {0xffffffe7, 0x3}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./proc/fs/nfsd\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x302000, 0x1000, 0x5, 0x6}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2m38.105475169s ago: executing program 2 (id=1736): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1f, r3}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x682a}, 0xe) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="46f139052b8d7d2737fe84e7b2ffdc689a4d5fd51b010c578d82b35656199548a93b5fedc8f11f9b8efbbfd06a4c0a20de316d4657851058c50fd0c404da15d8b1e74e27b17995de8eb0abe1767fd75eb754af23c86e2a5a7edf24aaef9efd4e5db9778bc843cc09a84408732242748d21e661c3c6af775372201476723f80906a07034f", 0x84}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)="1ad0767ec1ead48b2904801eef1f18687048548a5c1e9de57590f1480141e12a373a7eb324f2ba59c5e82e1bb2b4c02dd4ae62fe984a313e6143c4c29fde4ab47658b5fbb13ab98ab0283a5f0c87a4a0140b44c2fadfce262b5f7b1cbfa332284efeb1a8a11f80fa2c18beb49b15efb00edf9743518ed3e979478940b6ff92217673ff9ca107f82b67562aab4d7d1552d441ef5b1eda303ca3f58d6f81a369b3d863cca37a5445a16fa889aa79a27164531995df08edf0ac6fa2db71ff147090623e9f360b2e9572577fc9d78fe1bbfb31d93c1634f364aba74c11da05bd9b1a5de6a89dac05dfaded0f6b456e6d12d0e9b8e80cff15b1e5fe37e48653ca794a98edbbaa9bee123b526801b3b4383c917cbdacd3866a722ca1a129858e108bddb03d8b77bade7cd90e878fdfa34dd46aaf3461466d032109f39897395d5191a76d1f1040a6af29c5de46885c5132cbbaa3c934810ced856fab3dc87d80e4dc5d40120ce92252c4c898aec730ee5ffe0329ed16879f220a083927400ca33d47dd80fd62d8feb2d0a8a48e0dfc8b6750a6cc69bf422525eec7565a110404beabee4a900db6ffa3cf6e1ddc8a3cc8e6e6cc414456880817841db7f226335e5779cac5b08a37836a5b357fe6dcedd2d2c7a84034e67963a62871c51d3e0f4f480c21d15dff0551ea025f76e76c82ed6ff6e778fb91b70a93e046fa371abd0c8f9eb36ffae6b9e0546b97be651782e1a2fa3b954be1287b066a4cb8b99b86d60140b5abc76c4eaca93751e172d0bfbfd8c257d9fec4a2e7c2f5056b5a2d4f03a41c30700a671e0ab5048a94cafb75f071b0c61ae2eb711f3b77013dae1dfe01a0a6e58a1a47f66ce179ae732c5bb79d984d4da5949c6807bf383a5889f7c872d08a363ea7a03a795a7cd0f06742f2c0646a1b8ce3fcfb2230f031eb6850addad51cc6ff", 0x2a1}], 0x1}}], 0x2, 0x4008000) 2m37.606243813s ago: executing program 2 (id=1738): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x40, 0x3, 0x6, 0x4a7c}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 2m37.197158357s ago: executing program 2 (id=1741): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f00000004c0), 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0]) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a000b000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002980)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0xf36e, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000, 0x9}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x4, 0x70bd29, 0x0, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x10, 0xa0}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000008, 0x400}, {0x0, 0x0, 0x105}, 0x0, 0x6e6bb8, 0x2, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RFSYNC(r6, 0x0, 0x0) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_clone(0x11c0400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = accept(r0, 0x0, 0x0) read(r9, &(0x7f0000000600)=""/100, 0x64) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) 2m36.170412307s ago: executing program 2 (id=1742): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r1, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x49010) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x4000) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x406, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) 2m32.258153616s ago: executing program 2 (id=1751): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m32.072346243s ago: executing program 34 (id=1751): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m24.289991629s ago: executing program 35 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) dup(r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000380)={0x7fffffff, 0x6}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ifreq(r3, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_data=0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x6}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) 1m29.862890222s ago: executing program 7 (id=1929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000010000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000000008000240000000091800018008000100667764000c00028008000140000000090900010073797a300000000014000000110001"], 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="2800000043000701fefffffffcdbdf25047c00000c00458008000400", @ANYRES32, @ANYBLOB="080001"], 0x28}}, 0x2004c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)={0x420, 0x3f3, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x29, [0x1, 0x863, 0xffffff81, 0x1321, 0x339c000, 0x3, 0xd3f, 0x7, 0x8, 0xffff, 0xc7, 0x5, 0x8, 0x8, 0xa8, 0xd, 0x10000, 0x5, 0x3, 0x7, 0xe7, 0x6, 0x653b3e45, 0x0, 0x2, 0x8, 0xfffffff9, 0x6, 0x2, 0x3, 0x8, 0x5, 0x8, 0xfffffffc, 0x2, 0x401, 0x40000000, 0x3, 0x9, 0xb81b, 0x7, 0x7, 0x9, 0xd5ab, 0x7, 0x101, 0xe, 0x9, 0x0, 0x9, 0x8f7, 0x0, 0x3, 0x6, 0x6, 0x1, 0x4, 0x7, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1], [0xfffffff8, 0xfff, 0xbf, 0x3, 0x8, 0x8, 0xf7, 0x0, 0x9, 0x7, 0x2, 0xfffff287, 0x4, 0x7, 0xfffffffd, 0x200, 0x4, 0x5000000, 0x3ff, 0x21, 0x1e9, 0xfff, 0x4, 0xff, 0x5, 0xfff, 0x0, 0x8, 0xfffffffb, 0x7, 0x4010, 0x0, 0xcd560000, 0x8000, 0xaf, 0xe, 0xf1, 0x1, 0xd12, 0x0, 0x44, 0x8, 0x8, 0x8, 0x1, 0x0, 0xc3, 0x5, 0xfffffffe, 0x3ff, 0x2, 0x8, 0x3, 0x3, 0x6, 0x3c, 0x0, 0x1, 0xf, 0xf, 0x7ff, 0x0, 0x3, 0x3], [0xffff, 0x7, 0xd000, 0x0, 0x9, 0x7, 0x7, 0x7, 0xd1d4, 0x3, 0x4a8, 0x3, 0xc, 0x9, 0x9c, 0x0, 0x7f, 0x4, 0x3ff, 0x8, 0x8001, 0x7, 0x8, 0x3, 0x3, 0xd, 0x7, 0x40, 0xa315, 0x4, 0x3, 0x1, 0x5, 0x5, 0xbc, 0x8be3, 0x2, 0x5, 0x0, 0x1, 0x3, 0x8, 0x7, 0x1, 0x7, 0xadec, 0x4, 0x4, 0x8, 0xf, 0x0, 0x1d04, 0x3ff, 0xfffffff8, 0x2, 0x2, 0xf, 0x7, 0x200, 0x80, 0x9, 0x7fff, 0x9, 0xffff], [0x4, 0xb60, 0x0, 0x8, 0x5, 0x7, 0xffffff32, 0x3340, 0x9, 0xdb200000, 0x7, 0xffff1080, 0x80000001, 0x7f, 0x4, 0x6, 0xdee, 0x1, 0x100000, 0xadc, 0x1, 0x1, 0x4000, 0x8001, 0x1000, 0x1, 0x18, 0x3667, 0x8, 0x27d9499f, 0x0, 0x2, 0x8, 0x8, 0x800, 0x0, 0x401, 0x7, 0x18a, 0xfffffffd, 0x2, 0x3, 0xfd, 0x69c, 0x1000, 0x3ff, 0x9e, 0x7fff, 0xfff, 0x0, 0x6, 0x0, 0x7ff, 0x6, 0x7fffffff, 0x4, 0x10000, 0xb00, 0x7, 0x1, 0x1, 0x7fffffff, 0x1, 0x8780]}}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x880) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf2503000000060001004e200000040005"], 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0x840) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b, 0xf5}], {0x14}}, 0x3c}}, 0x0) 1m29.434332674s ago: executing program 7 (id=1930): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000003200)=[{&(0x7f0000003240)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) (async) preadv2(r0, &(0x7f0000003200)=[{&(0x7f0000003240)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f) (async) 1m29.241597558s ago: executing program 7 (id=1932): r0 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) splice(r1, 0x0, r3, 0x0, 0x2, 0x8) write$tun(r2, &(0x7f00000002c0)={@void, @val={0x7, 0x80, 0x1ff, 0x6f4, 0x7, 0x9}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010101, @remote}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x2f8, 0x0, 0x1}}}}, 0x32) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1m28.937669715s ago: executing program 7 (id=1935): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) (fail_nth: 5) 1m28.486705071s ago: executing program 7 (id=1936): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffffd, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)="2c6a9d05f3a7786f16d8245f6fd974db0e7da2aea2ef58d0b26eb6a090104d920ed158033f37972aadfac86c00f03d4f2c1d4dcd7ac191bb3e32ed469ecfc93e842d6dd9720eaeb503292b93a957ab37a6ca815af6e7c56cd82153a8b5f7d20e36f482e622f01478b2ddd13314ce82144d4152a43e02c32a8d885fd6b1308e8ab8fc6ccfe8502d4add07d484", 0x8c}, {&(0x7f0000000480)="aa37780ae2e04c595cafc945d696eb5a1d40cf7da6011e62a6c44062e653ed8da74912a3b3aa2e002c66943e5c4efcd81375977eaba147b5ac5ef4ba50a00280ecb26797fd43fba9d81fd9ebd5220c0e34cfddf49deae4e8fa57c0a65dc2211250be5b156be4db219b9e2d778aa96829998113c6ed45d9d0d80fcb5d20e97bab96416f7815980682de8aa836ac5a05a75f8ef01771e8c0c614a5e349e0e4760073f1f6de4123bf248bb0", 0xaa}, {&(0x7f0000000540)="e32961ae45f2016ef58eb3a55f28f6df11914d8a5158b1e81ec34e8dd6a0f4646e9faa859c71e64132233f5fa868df6ea366508a6e9ef54af8dbb5266f1fb8dd74fb8fbdecddaf3f064d5501fdbf77219b69f5715f7b95bc821e9c8f9fb450ab6ac94ecb346d39137d4225790756d0eb610c00926cd006e1607d22b3b2ed11efc2b7fbeb7770dd07e22a6ce8acba0fa0227d992f1694fa7b7715ec2746", 0x9d}, {&(0x7f0000000600)="7e10d9778a3c49c9268058efaf29b8200f823701e3c997cc7e5a97c87ec128515084b21b8a", 0x25}, {&(0x7f0000000640)="5f37290b3ed550fc45856a960c9c2f16e61e489affc1360c3dbab9001219199d2bd197d273", 0x25}], 0x5) 1m26.60592662s ago: executing program 6 (id=1940): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000001c0)=0x80000000, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ffffffe, 0xffffffff, 0x3, 0xfffffffc}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="670000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1m26.319540921s ago: executing program 6 (id=1942): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x800000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 1m26.174592227s ago: executing program 6 (id=1944): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x250d, &(0x7f0000000040)={0x0, 0xbad3, 0x20, 0x4001, 0x3cf}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x8001, 0x4, 0x110, r2, 0x0) syz_usb_ep_write(r0, 0x81, 0x42, &(0x7f0000000180)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb6") 1m26.070742419s ago: executing program 7 (id=1946): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1, 0x0, 0x0, 0x300}}], 0x1, 0x4c040) 1m25.559348946s ago: executing program 36 (id=1946): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1, 0x0, 0x0, 0x300}}], 0x1, 0x4c040) 1m22.447795023s ago: executing program 6 (id=1951): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x19) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x800001, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xfffffffffffffe04, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x180, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @local}, {0x0, 0x2, @empty}}}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36507001ac006a102008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b165732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m21.855743674s ago: executing program 6 (id=1952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="043e0d05"], 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0x0) r4 = signalfd4(r2, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) mkdirat(r4, &(0x7f0000000080)='./file1\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000180)=0x1, 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5]) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000ce71a1ffb50d7206dcc4db0e9b9965f0094fbc105460926e7cf15eaf49e5b834b3122d11b5430130ffff7f43a71da6851b7e06b93e65744aae5c009d501d61ebb2bfcf4859a058aaf9890d069feb596dd06038da9d6f93c8466df710bc07f55253033e7b4f837af552e12333d69cb8adfcf05cfc33fdf1290b9f14eeec145643ceb7be01ea4161155312269dbf25ccb98efaa8b9596d3d4e911c823ff2447b60b735f072023aa047eaaf556c4c701828710800345ae84e5ebcd8ce326bdefc94", @ANYRES16=r1, @ANYBLOB="19a32abd7000fedbcf25050000000800050064010102"], 0x1c}}, 0x40800) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x68081, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 1m20.430155641s ago: executing program 6 (id=1958): r0 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000500)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5a}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) rseq(&(0x7f0000004380)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) syz_ublk_setup_queues(r12, r10, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffbe, 0x8, 0x2000, 0x10010007, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdffed7c, 0x10000, 0x0, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4020, 0x3, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x2, 0x367, 0x0, r12}}], 0xf000, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_ublk_setup_queues(r13, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x2, 0x80000002, 0x359}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x1e3}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x2, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x1, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x5, 0x3b7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x5, 0x44a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x80000000, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x96e8, 0x0, 0x2, 0x40021a, 0x0, r14}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x48b, 0x0, 0x0}}, 0x0) 1m20.177746534s ago: executing program 37 (id=1958): r0 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000500)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5a}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) rseq(&(0x7f0000004380)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) syz_ublk_setup_queues(r12, r10, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffbe, 0x8, 0x2000, 0x10010007, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdffed7c, 0x10000, 0x0, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4020, 0x3, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x2, 0x367, 0x0, r12}}], 0xf000, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_ublk_setup_queues(r13, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x2, 0x80000002, 0x359}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x1e3}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x2, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x1, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x5, 0x3b7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x5, 0x44a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x80000000, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x96e8, 0x0, 0x2, 0x40021a, 0x0, r14}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x48b, 0x0, 0x0}}, 0x0) 5.82661643s ago: executing program 3 (id=2160): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1a3, 0x0, 0x0) fstat(r0, &(0x7f0000000040)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000580)={0x800, 0x8, '\x00', 0x1, &(0x7f0000000540)=[0x0]}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2505001900", @ANYRES32, @ANYBLOB="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", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRESHEX, @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x20008084}, 0x20040840) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc70, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x200000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9297, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) socket(0x10, 0x803, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000a00)={'tunl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x800000, 0x6, {{0x5, 0x4, 0x0, 0x33, 0x14, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2}}}}) setsockopt$inet_tcp_int(r7, 0x6, 0x6, &(0x7f0000000040)=0xcb, 0x4) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x9, 0x7ff, @vifc_lcl_addr=@broadcast, @multicast1}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000180)={'sit0\x00'}) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 5.501508055s ago: executing program 3 (id=2164): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x62600, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r3, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="0003022df0ff000000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000140)="55f0e46e5a", 0x5}, {&(0x7f0000000280)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e5555ab", 0x2b}], 0x4}, 0x40011) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) r9 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r9, 0x0, 0x0, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) 4.477095875s ago: executing program 3 (id=2167): syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020410e594140000102030109027100030109403f0904000000010100000a2401d2000a0002010209040100000102000009040101010102000009050109ff0368ff00072501080403000904020000010200000904020101010200000a2402027f001a00020507240108050210090582000e"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0xfffffeff, 0x1d062465}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0x810c9365, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f00000000c0)={{@host, 0xc}, 0x50, 0xd56}) (async) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000180)={{0x3, 0xffffffff, 0x6, 0x7f, 0x7, 0x6}, 0x55, [0x6, 0x8, 0x7e, 0x3eaf, 0x99cc, 0x7, 0xffff, 0x0, 0x7, 0xa1, 0x7fffffff, 0x5, 0x5, 0x2, 0x2, 0xe, 0xfff, 0x20000000, 0x0, 0x2, 0x1, 0x9ab0, 0x2, 0x8000, 0xffffffb3, 0xc, 0x0, 0x6, 0xfffffffd, 0x0, 0x6, 0x4, 0x7, 0x401, 0x6, 0x36, 0xffffffff, 0x2, 0x5, 0x10001, 0x800, 0x7f, 0x9a, 0x1, 0x401, 0x4000040, 0x7fff, 0xfffffffa, 0x7, 0x7fff, 0x6, 0x4, 0x5, 0x4, 0x1, 0x3, 0x6, 0x5, 0xf, 0x1, 0x0, 0xc, 0x2, 0x5, 0x9, 0xf60a, 0x1, 0x2, 0x40000000, 0xe, 0x8, 0x49a4, 0x4, 0xffff, 0x5, 0x200, 0x41fc49ce, 0x5, 0xf6, 0x0, 0x8, 0x3, 0x7, 0x8, 0x2, 0xfffffffb, 0x96be, 0x101, 0x3, 0x5, 0x401, 0x8, 0xa26f, 0x80, 0x7, 0x800, 0x333, 0x5, 0x9, 0x1, 0x2, 0x2, 0x8, 0x7, 0x6, 0x11d, 0x0, 0xb79, 0x3, 0x7, 0x0, 0x800, 0x4, 0x2, 0x6, 0x6, 0x5, 0x0, 0x9, 0x10000, 0x4, 0x0, 0x7, 0x7, 0x8, 0x7, 0x80, 0x5, 0xd, 0x1, 0x10, 0x4, 0x7, 0x91, 0x8, 0x317, 0xffff457b, 0x4, 0x5, 0xe, 0x3, 0x0, 0x6, 0x7f, 0x2, 0x7, 0x5, 0x4, 0x5, 0x1049, 0x40, 0xb, 0x800, 0x101, 0x0, 0x6, 0x7, 0x9, 0x1000, 0xb, 0x8, 0x1, 0x4, 0x9, 0x40, 0x5, 0x6, 0x6ff23fb6, 0x9, 0x5, 0x10000, 0xe, 0x2, 0x1, 0x37, 0x3, 0x6, 0x7, 0x80000000, 0x2, 0x4, 0x9, 0xc, 0x4, 0xd, 0x9, 0xed, 0x800, 0x2, 0x1, 0x2, 0x1, 0x4, 0x10, 0x7, 0x8c, 0xfffffff3, 0x4, 0x40, 0x8, 0x8, 0x0, 0x984, 0x3, 0x9, 0x5, 0x4, 0x8, 0xc5cb, 0x401, 0x80000000, 0x9, 0x7, 0x9, 0x8, 0x7f, 0xc7, 0x7, 0x6, 0x6, 0x2, 0xb, 0x972e, 0xb63c, 0x7, 0x1, 0x8, 0x0, 0x9, 0x14bc, 0x3, 0x0, 0x8, 0x10001, 0x8, 0x3, 0x7fff, 0x8, 0x81, 0x5, 0xf, 0x8000, 0x3, 0x9, 0x2, 0xa, 0x100, 0x1, 0xf3c, 0x101, 0x3, 0x9, 0x6, 0xffffffff, 0xfff, 0x65d7, 0x7, 0x1, 0x3, 0x6, 0x7ff, 0x5, 0x5, 0xfffffff9, 0x7fffffff, 0x400, 0x10000, 0x6, 0x400, 0x6a92, 0xfffffff8, 0xfffffffc, 0x3e, 0x8, 0x3, 0x1, 0x0, 0x1, 0xa, 0x5, 0x5, 0x8, 0x2, 0x4, 0x2, 0x9, 0x8, 0xaeb, 0x80000000, 0x9, 0x1, 0x9, 0x8, 0x7, 0x1, 0x1, 0x0, 0x8, 0x7, 0x7, 0x81, 0x6, 0x8, 0x40, 0x8, 0x4, 0x3, 0x3, 0x0, 0x7, 0x7, 0x4e0, 0x1, 0xfd8, 0xfffffffd, 0x9, 0x22, 0x10001, 0x1, 0x8da, 0x13, 0x7, 0x7f, 0x1, 0x3, 0x4, 0xfffffff8, 0x7, 0x1, 0x0, 0x8fe7f4bb, 0x8000, 0x2, 0x3, 0x3dc, 0xc, 0x6, 0xcfa, 0x4, 0x1000, 0xa4, 0x10000, 0x5, 0x4, 0x5157, 0x52, 0x1, 0x9, 0xbab, 0x1, 0x48000000, 0xb9e, 0x9, 0x800, 0xac, 0x7ff, 0x4, 0x47c2ad5e, 0x100, 0x5, 0xa, 0xa6, 0x101, 0x6, 0x4, 0x2, 0x8, 0x8, 0x620, 0x4, 0x908, 0x2, 0x1, 0x2, 0x6, 0x7, 0x0, 0x7, 0x6, 0x7, 0x9, 0x1ff, 0x9, 0x0, 0x1e8, 0xffffffff, 0x2, 0x519, 0x0, 0xfffffffe, 0x5, 0x5, 0x8, 0xc, 0xffc5, 0x2d52, 0x300, 0x8, 0x4, 0x101, 0x7, 0x1, 0x8000, 0x89, 0x8, 0x1, 0x3, 0x7, 0x5, 0x5, 0x1, 0x3, 0x2, 0x80000001, 0x6, 0x2a10e799, 0x8, 0x8, 0x7e, 0x7, 0x80000000, 0x6, 0x95, 0x8, 0x4, 0x0, 0xa, 0x6, 0x1, 0xf39, 0x1, 0x40, 0xd, 0x2, 0x6, 0x7, 0x9, 0x9, 0x8, 0xffff, 0x4, 0x21, 0x101, 0xfffff7f9, 0x9, 0x6, 0x2, 0x5, 0x3, 0x5, 0x8, 0x5, 0x3, 0x4b69, 0x0, 0x1, 0x101, 0x9, 0x1000, 0x5, 0x1992bae9, 0x0, 0x54, 0x7, 0x8, 0x0, 0x8001, 0x5, 0x4, 0x4caa, 0x0, 0x0, 0x19, 0x1, 0x4, 0x6, 0x4, 0x100, 0x91, 0x3, 0x3, 0x9, 0x4, 0x34e, 0x40, 0x38, 0x7, 0x2, 0x79, 0x960, 0x5, 0xffff, 0xb, 0x1, 0x1, 0x100, 0x7, 0x6a8e, 0x0, 0x0, 0x29b6, 0x6, 0x7, 0x2a0, 0x6, 0x41d2f8cc, 0x8, 0x3, 0xfffffff8, 0x80, 0x8, 0x2, 0xa, 0x9, 0x10, 0x2f, 0x75f, 0x81, 0x5, 0x8, 0x9, 0x7, 0x1ff, 0xe, 0xbd, 0x3396, 0xde5, 0x1, 0x4, 0x6, 0x9, 0x1, 0x9, 0x7, 0xaa7, 0xb62, 0x8, 0x1, 0x4, 0x7fffffff, 0x13b, 0x800, 0x9, 0x5, 0xfffffeff, 0xcb, 0x9, 0x8, 0x0, 0x4, 0x9, 0x10, 0x6, 0x2, 0x3, 0x10000, 0x7, 0x6d17, 0x10001, 0x1, 0x0, 0x4, 0x5, 0x80000001, 0x3, 0x5, 0x3, 0x7fffffff, 0xfffffffb, 0x5, 0xffff, 0x1, 0x8, 0x57, 0xfb, 0x6, 0x8000, 0x2c000000, 0x400, 0x2, 0x3, 0x81a, 0x4, 0x8, 0x100, 0x0, 0x7, 0x3, 0x5, 0x6, 0x0, 0xe, 0xfffffff8, 0x8ae1, 0xb8acb2d, 0x3, 0x7, 0x7fffffff, 0x4, 0x1, 0x8c, 0x5d, 0x6, 0x7, 0x8, 0x6, 0x0, 0x45ad6a21, 0x101, 0xece3, 0x7f, 0x9, 0x80000000, 0x0, 0x81, 0x9, 0x6f, 0x7, 0x9, 0x8, 0x2, 0x6afb70d9, 0x3, 0x3, 0xe, 0x2, 0x1, 0x4, 0x1, 0xfff, 0x0, 0x8ebc, 0x7ff, 0xb64b, 0x2, 0x8, 0xe, 0x0, 0x8000000, 0x9, 0x2, 0xff, 0x2, 0x44, 0x8001, 0x0, 0x1, 0x0, 0x60cb, 0x5c33, 0x4, 0x2, 0x0, 0x100, 0x3ff, 0x7, 0x1, 0x0, 0x8, 0x4, 0x1, 0x5, 0x7fffffff, 0x2, 0x5, 0x9, 0x0, 0xffffffff, 0x6b5, 0x4, 0x0, 0x80, 0x8, 0x0, 0xffffffff, 0x3, 0x9, 0x7fff, 0x5, 0x7, 0x7, 0x90, 0xfffff5a3, 0x800, 0x5, 0x2, 0x8, 0x8000, 0x7f, 0x40, 0x3, 0x5, 0x1, 0xffffffff, 0x9, 0x3d5, 0x9, 0x8000, 0x87d, 0x884, 0xb, 0x0, 0x6, 0x2, 0x8000, 0x4, 0x1, 0x3, 0x9, 0x10001, 0x36, 0x7ff, 0x3, 0xfff, 0x8, 0x800, 0x3, 0x5, 0x81, 0xbeba, 0xb, 0x5, 0x0, 0x6, 0x9, 0x10, 0x8000, 0x6, 0x2000000, 0x0, 0x0, 0x7, 0x400, 0x7, 0x3, 0x2, 0x8001, 0x724f, 0x6000, 0xfffffff5, 0x3, 0x8, 0x6, 0x1, 0x0, 0x4000000, 0x80000001, 0x5, 0x6, 0x3, 0x1, 0xfffffffb, 0x0, 0x7ff, 0x4000, 0x5, 0xd1, 0x9, 0x80, 0x4, 0xfc, 0x4, 0x0, 0xfffffff8, 0x7ff, 0xfffffffb, 0x1000, 0xe88, 0xd68e17bb, 0x8000, 0x6c, 0xf7c121b, 0x2, 0x1, 0x5, 0x8, 0x0, 0x89de, 0x0, 0x101, 0x9, 0x80000000, 0x3, 0x5c7, 0xa, 0x1, 0xfff, 0x8001, 0xfffffffb, 0xfffffffb, 0x80000000, 0x800, 0x8, 0x80000000, 0x2, 0x9, 0x9, 0x0, 0x8, 0x1000, 0x7f, 0x1000, 0xa8e6, 0xe, 0x4, 0x6, 0x10001, 0x81, 0x8, 0x2, 0xf9, 0x100, 0xfffffe01, 0x1f440a9d, 0x6, 0x5, 0xb, 0x7fffffff, 0xcf, 0x4, 0x2, 0x9, 0x401, 0xe13d, 0x20000, 0xfffffffa, 0x6, 0x4, 0x3, 0x1, 0x10001, 0x800, 0x100, 0x401, 0xc85f, 0x7, 0x8001, 0x9, 0x5, 0x101, 0x0, 0x4, 0x32f, 0x7, 0x8, 0x67b, 0x3, 0x80000000, 0x4, 0x3, 0x100, 0x1, 0x0, 0x2, 0x10, 0x4, 0x5, 0xab8b, 0x3, 0x3, 0x5, 0xad8, 0x0, 0x1000, 0x0, 0xf, 0x240, 0x8, 0x7, 0x9, 0xff3b, 0x1, 0x3, 0x3, 0x9, 0xfff, 0x9, 0xffffeae4, 0x3, 0x200, 0x9, 0x200, 0x9, 0x1, 0x400, 0x3, 0x4000000, 0x7f, 0x3, 0x7, 0x34, 0x6, 0x8000, 0x7, 0x9, 0x4, 0x6, 0x8, 0x5863, 0x5, 0x3ff, 0x0, 0x0, 0x2, 0x8, 0x5, 0x7f, 0x7, 0x3, 0x0, 0x0, 0x8, 0xc, 0x4, 0x1, 0x5d784b96, 0x9, 0xb, 0x10000, 0x5, 0x2, 0x0, 0x0, 0x7, 0x16de, 0xf, 0x6c6, 0x3, 0x5, 0xfffffc00, 0x400, 0x4, 0x2, 0x101, 0x8, 0x3, 0x9, 0x9, 0x40, 0x2, 0x6, 0x7, 0x1, 0xff, 0x9, 0x1, 0x100, 0x1, 0x8, 0x1, 0x10001, 0x0, 0x3, 0x0, 0x7, 0xfffffff8, 0x6, 0x5, 0x9, 0x4, 0xcf1, 0x7f, 0x7, 0x8, 0x2e, 0x5, 0xfffffffb, 0x100, 0x6, 0x8, 0x8, 0x7, 0x714e, 0x8, 0x101, 0x1, 0xc79, 0x4, 0x1, 0x0, 0x100, 0x200, 0x80000000, 0x5dd1, 0x9, 0x1ff, 0x81, 0x7, 0x0, 0x0, 0x1020, 0x942, 0xb, 0x5, 0x7, 0x2, 0x3ff, 0x0, 0xffc, 0xe, 0x44, 0x7, 0x3, 0x4, 0x6, 0xa, 0x5, 0x7, 0x5, 0x4, 0x7f, 0x0, 0xd, 0x9fc, 0x200, 0xccb, 0x1, 0x6, 0xfff00000, 0xf170, 0x5, 0x50435a77, 0x65, 0x9]}) (async) ioctl$UBLK_U_IO_NEED_GET_DATA(r0, 0xc0107522, &(0x7f00000021c0)={0x3, 0x254, 0x4, &(0x7f00000011c0)=@buf_1k="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"}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.285027064s ago: executing program 1 (id=2173): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x1000000, 0x7, 0x8, r0, 0x0}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.079948454s ago: executing program 1 (id=2174): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='trusted.overlay.upper\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @local=@item_4={0x3, 0x2, 0xa, "ed813510"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x9, "000400"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="0000020018000300000000000000", @ANYRESOCT=r4], 0x34}}, 0x8815) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r11) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r13 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r13, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x3}, @window={0x3, 0x6, 0x4}, @window={0x3, 0x582d, 0x3}, @sack_perm, @sack_perm], 0x5) getsockopt$inet6_tcp_buf(r10, 0x6, 0xb, 0x0, &(0x7f0000000140)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x7fff}, {0x2, 0x7fff, 0x1400}, {0x0, 0x5}], 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904"], 0x0) 1.569740788s ago: executing program 9 (id=2175): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xdc, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'dmm32at\x00', [0x140, 0xfffffffc, 0x1000c, 0x2dddc, 0x0, 0x10000, 0x7fff, 0x6, 0x7, 0xc72c, 0x2000004, 0x10, 0xc000, 0x8, 0x4ce, 0x8e99, 0x1, 0xed, 0x6, 0x5, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x9, 0xaf, 0x2, 0x283, 0x8001, 0xe43f]}) 1.565523259s ago: executing program 8 (id=2176): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x60000015}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x8000000000000001, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a000100feffffff00244c2577c48c34120b019c010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c61746500"/240], 0x138}}, 0x844) close_range(r1, r1, 0x0) 1.366406747s ago: executing program 9 (id=2177): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8000, 0x701, 0x7, 0xff, {{0x13, 0x4, 0x2, 0x15, 0x4c, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @empty, {[@ssrr={0x89, 0xf, 0x96, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0xd2, [@rand_addr=0x64010102, @remote, @local, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @empty, @multicast2]}, @end, @rr={0x7, 0x7, 0x40, [@broadcast]}]}}}}}) 791.671429ms ago: executing program 9 (id=2185): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000005280), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000052c0)={0x2, 0x103, 0x2, {0x7, 0x1000, 0xb, 0x2}}) socket(0x1d, 0x2, 0x6) fchmod(r1, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x2, 0x4}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{}], 0x1) 748.407328ms ago: executing program 3 (id=2186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0xffffff7f}, [@NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x3f, 0x6, "0842c58015e57448763f35438a94c554d7f64b0f27f1c4c8ebd1e3344c8c7145cd2aa00700b461a1767c2ddc6d615a3fc68e61c32723e01446b9b4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x90}}, 0x0) 622.374098ms ago: executing program 8 (id=2187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r0, 0x4, 0x46800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) 593.189544ms ago: executing program 1 (id=2188): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setreuid(0xffffffffffffffff, 0xee01) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) 563.661184ms ago: executing program 8 (id=2189): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x9, "b500000045592001000000000000007bb959ebab128deda501009bdeff1cde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000010700000000000000c900", r2}) 384.983901ms ago: executing program 8 (id=2191): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0xc, 0x1f, @vifc_lcl_ifindex, @empty}, 0x10) 384.615358ms ago: executing program 9 (id=2192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xfffffee2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=0x0) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r5, 0xc0086442, &(0x7f0000000980)={0x0, 0x2000000}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7", 0x94}, {&(0x7f0000000bc0)="aa581ff83dac4a519b67538bfa897e210c31e1c78d2d8de1498e01601b446808358248cf2d795634b12c4ce81c38765fa04eaab78e0d3122d0db5efb9428a0e5c5badfa1", 0x44}], 0x2}, 0x20000050) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ftruncate(r1, 0x2000009) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000040)={0xc5, 0x0, r1}) sendfile(r0, r1, 0x0, 0x7ffff004) 124.989602ms ago: executing program 8 (id=2193): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffffd, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, 0x0, 0x0) 0s ago: executing program 1 (id=2194): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010111}}, 0x80, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="e80000000d0a010800000000000000000a0008010900020073797a31000000000900010073797a3100000000bc000380b80000800800034000000003"], 0xe8}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): disconnect, device number 51 [ 643.328551][T11816] do_umount: task=syz-executor[11816] propagate_mount_busy()!=0 [ 643.328837][T11816] do_umount: task=syz-executor[11816] propagate_mount_busy()!=0 [ 643.329318][T11816] do_umount: task=syz-executor[11816] propagate_mount_busy()!=0 [ 643.329654][T11816] do_umount: task=syz-executor[11816] propagate_mount_busy()!=0 [ 643.541944][ T5606] Bluetooth: hci5: command tx timeout [ 644.225331][T11039] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.476032][ T7162] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 644.641975][ T7162] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 644.642014][ T7162] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 644.644649][ T7162] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 644.644682][ T7162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.644704][ T7162] usb 2-1: Product: syz [ 644.644720][ T7162] usb 2-1: Manufacturer: syz [ 644.644738][ T7162] usb 2-1: SerialNumber: syz [ 644.750630][ T7162] usb 2-1: config 0 descriptor?? [ 644.781280][ T7162] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 645.443854][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.578034][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.602552][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 645.618049][ T60] Bluetooth: hci5: command tx timeout [ 645.621186][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.622167][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.156429][T11039] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.242039][ T7162] gspca_sunplus: reg_r err -32 [ 646.242110][ T7162] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 646.270662][ T7162] usb 2-1: USB disconnect, device number 52 [ 646.347314][ T5692] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 646.525626][ T5692] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 646.525789][ T5692] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 646.525816][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.917751][ T5692] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 647.145091][ T5692] wwan wwan0: port wwan0qmi0 attached [ 647.242003][ T38] kauditd_printk_skb: 22 callbacks suppressed [ 647.242024][ T38] audit: type=1800 audit(1786682515.211:4282): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195803 res=0 errno=0 [ 647.246492][ T38] audit: type=1800 audit(1786682515.211:4283): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195817 res=0 errno=0 [ 647.698314][ T5606] Bluetooth: hci5: command tx timeout [ 647.818708][T11039] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.913015][T12744] netlink: 'syz.3.1961': attribute type 4 has an invalid length. [ 647.913039][T12744] netlink: 'syz.3.1961': attribute type 1 has an invalid length. [ 647.913362][T12744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.021375][ T38] audit: type=1800 audit(1786682515.980:4284): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195911 res=0 errno=0 [ 648.021431][ T38] audit: type=1800 audit(1786682515.980:4285): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=195916 res=0 errno=0 [ 648.021476][ T38] audit: type=1800 audit(1786682515.980:4286): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=195920 res=0 errno=0 [ 648.021521][ T38] audit: type=1800 audit(1786682515.980:4287): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=195919 res=0 errno=0 [ 648.021567][ T38] audit: type=1800 audit(1786682515.980:4288): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=195922 res=0 errno=0 [ 648.022627][ T5692] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, da:0f:84:f7:88:ca [ 648.109977][ T5606] Bluetooth: hci2: command tx timeout [ 648.136390][ T38] audit: type=1800 audit(1786682516.100:4289): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=195176 res=0 errno=0 [ 648.171696][ T5692] usb 4-1: USB disconnect, device number 18 [ 648.172652][ T38] audit: type=1800 audit(1786682516.140:4290): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=195179 res=0 errno=0 [ 648.257846][ T5692] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 648.446047][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 648.523329][ T5692] wwan wwan0: port wwan0qmi0 disconnected [ 648.685699][T12773] FAULT_INJECTION: forcing a failure. [ 648.685699][T12773] name failslab, interval 1, probability 0, space 0, times 0 [ 648.685741][T12773] CPU: 1 UID: 0 PID: 12773 Comm: syz.3.1966 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 648.685780][T12773] Tainted: [L]=SOFTLOCKUP [ 648.685789][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.685804][T12773] Call Trace: [ 648.685813][T12773] [ 648.685823][T12773] dump_stack_lvl+0xe8/0x150 [ 648.685859][T12773] should_fail_ex+0x467/0x600 [ 648.685894][T12773] should_failslab+0xa8/0x100 [ 648.685919][T12773] __kmalloc_noprof+0xfb/0x790 [ 648.685952][T12773] ? tomoyo_encode+0x2ad/0x570 [ 648.685983][T12773] ? tomoyo_encode+0x2ad/0x570 [ 648.686023][T12773] tomoyo_encode+0x2ad/0x570 [ 648.686062][T12773] tomoyo_realpath_from_path+0x5fa/0x640 [ 648.686116][T12773] ? tomoyo_path_number_perm+0x219/0x5f0 [ 648.686146][T12773] tomoyo_path_number_perm+0x246/0x5f0 [ 648.686178][T12773] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 648.686209][T12773] ? do_raw_spin_lock+0x12b/0x2f0 [ 648.686270][T12773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 648.686294][T12773] ? lockdep_hardirqs_on+0x7a/0x110 [ 648.686335][T12773] ? __fget_files+0x2a/0x420 [ 648.686363][T12773] ? __fget_files+0x3a8/0x420 [ 648.686386][T12773] ? __fget_files+0x2a/0x420 [ 648.686414][T12773] security_file_ioctl+0xb9/0x260 [ 648.686444][T12773] __se_sys_ioctl+0x47/0x170 [ 648.686476][T12773] do_syscall_64+0x17b/0x530 [ 648.686499][T12773] ? irqentry_exit+0x10f/0x8f0 [ 648.686519][T12773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.686543][T12773] ? clear_bhb_loop+0x40/0x90 [ 648.686571][T12773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.686596][T12773] RIP: 0033:0x7fa0fbdfe019 [ 648.686617][T12773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.686638][T12773] RSP: 002b:00007fa0fa056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.686663][T12773] RAX: ffffffffffffffda RBX: 00007fa0fc085fa0 RCX: 00007fa0fbdfe019 [ 648.686680][T12773] RDX: 0000200000000280 RSI: 00000000c0205648 RDI: 0000000000000003 [ 648.686696][T12773] RBP: 00007fa0fa056090 R08: 0000000000000000 R09: 0000000000000000 [ 648.686711][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.686725][T12773] R13: 00007fa0fc086038 R14: 00007fa0fc085fa0 R15: 00007ffc3e1a4fa8 [ 648.686761][T12773] [ 648.686783][T12773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 649.038182][ T38] audit: type=1800 audit(1786682516.999:4291): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196170 res=0 errno=0 [ 649.707892][ T37] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 649.770248][ T7162] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 649.791432][ T5606] Bluetooth: hci5: command tx timeout [ 649.872179][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.872231][ T37] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 649.872258][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.876604][ T37] usb 2-1: config 0 descriptor?? [ 649.922610][ T7162] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 649.922643][ T7162] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 649.925667][ T7162] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 649.925697][ T7162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.925718][ T7162] usb 4-1: Product: syz [ 649.925734][ T7162] usb 4-1: Manufacturer: syz [ 649.925750][ T7162] usb 4-1: SerialNumber: syz [ 649.992604][ T7162] usb 4-1: config 0 descriptor?? [ 649.999682][ T7162] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 650.081687][ T37] usbhid 2-1:0.0: can't add hid device: -71 [ 650.081823][ T37] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 650.090752][ T37] usb 2-1: USB disconnect, device number 53 [ 650.191225][ T5606] Bluetooth: hci2: command tx timeout [ 650.641258][ T37] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 650.712498][T11039] bridge_slave_1: left allmulticast mode [ 650.712546][T11039] bridge_slave_1: left promiscuous mode [ 650.714869][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.793699][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.793755][ T37] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 650.793781][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.800516][ T37] usb 2-1: config 0 descriptor?? [ 651.006241][T11039] bridge_slave_0: left allmulticast mode [ 651.007871][T11039] bridge_slave_0: left promiscuous mode [ 651.018768][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.490879][ T7162] gspca_sunplus: reg_r err -71 [ 651.490988][ T7162] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 651.558734][ T7162] usb 4-1: USB disconnect, device number 19 [ 651.759383][ T37] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 651.762241][ T37] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 651.778237][T12790] FAULT_INJECTION: forcing a failure. [ 651.778237][T12790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.778273][T12790] CPU: 0 UID: 0 PID: 12790 Comm: syz.1.1970 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.778300][T12790] Tainted: [L]=SOFTLOCKUP [ 651.778308][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.778319][T12790] Call Trace: [ 651.778326][T12790] [ 651.778334][T12790] dump_stack_lvl+0xe8/0x150 [ 651.778366][T12790] should_fail_ex+0x467/0x600 [ 651.778395][T12790] _copy_from_user+0x2d/0xb0 [ 651.778413][T12790] get_timespec64+0x96/0x1b0 [ 651.778434][T12790] ? __pfx_get_timespec64+0x10/0x10 [ 651.778462][T12790] __se_sys_clock_nanosleep+0x1ce/0x3b0 [ 651.778491][T12790] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 651.778526][T12790] do_syscall_64+0x17b/0x530 [ 651.778546][T12790] ? irqentry_exit+0x10f/0x8f0 [ 651.778563][T12790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.778581][T12790] ? clear_bhb_loop+0x40/0x90 [ 651.778603][T12790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.778622][T12790] RIP: 0033:0x7f60fccbe84e [ 651.778639][T12790] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 651.778655][T12790] RSP: 002b:00007f60faf54f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 651.778675][T12790] RAX: ffffffffffffffda RBX: 00007f60faf566c0 RCX: 00007f60fccbe84e [ 651.778690][T12790] RDX: 00007f60faf54f90 RSI: 0000000000000000 RDI: 0000000000000000 [ 651.778702][T12790] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 651.778714][T12790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000180 [ 651.778727][T12790] R13: 0000000000000000 R14: 00007f60fcf85fa0 R15: 00007ffc06093898 [ 651.778757][T12790] [ 652.272679][ T60] Bluetooth: hci2: command tx timeout [ 652.312006][ T37] usb 2-1: USB disconnect, device number 54 [ 652.312092][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 652.337390][ T38] kauditd_printk_skb: 45 callbacks suppressed [ 652.337411][ T38] audit: type=1800 audit(1786682520.266:4337): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=199095 res=0 errno=0 [ 652.340826][ T38] audit: type=1800 audit(1786682520.296:4338): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=199086 res=0 errno=0 [ 652.402978][ T38] audit: type=1800 audit(1786682520.366:4339): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=199089 res=0 errno=0 [ 652.404476][ T38] audit: type=1800 audit(1786682520.366:4340): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=199082 res=0 errno=0 [ 652.411330][ T38] audit: type=1800 audit(1786682520.366:4341): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199110 res=0 errno=0 [ 652.450052][ T38] audit: type=1800 audit(1786682520.406:4342): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199123 res=0 errno=0 [ 652.529272][ T38] audit: type=1800 audit(1786682520.486:4343): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=199083 res=0 errno=0 [ 653.145549][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 653.218381][T11039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.274309][T11039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.297662][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 653.298275][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 653.299722][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 653.302279][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.302308][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.302336][ T10] usb 4-1: Product: syz [ 653.302347][ T10] usb 4-1: Manufacturer: syz [ 653.302358][ T10] usb 4-1: SerialNumber: syz [ 653.367025][ T38] audit: type=1800 audit(1786682521.325:4344): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199198 res=0 errno=0 [ 653.368431][T11039] bond0 (unregistering): Released all slaves [ 653.373123][ T38] audit: type=1800 audit(1786682521.325:4345): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199230 res=0 errno=0 [ 653.445865][ T38] audit: type=1800 audit(1786682521.385:4346): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=199205 res=0 errno=0 [ 653.589124][T12801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.590866][T12801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.662454][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 653.662971][ T10] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 653.834210][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.834486][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.834740][T12694] bridge_slave_0: entered allmulticast mode [ 653.840685][T12694] bridge_slave_0: entered promiscuous mode [ 653.921274][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.921531][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.921776][T12694] bridge_slave_1: entered allmulticast mode [ 653.969642][T12694] bridge_slave_1: entered promiscuous mode [ 654.003020][ T10] usb 4-1: USB disconnect, device number 20 [ 654.344775][ T60] Bluetooth: hci2: command tx timeout [ 655.045419][ T32] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 655.046371][T12694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.096554][T12694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.198027][ T32] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 655.198062][ T32] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 655.200414][ T32] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 655.200450][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.200472][ T32] usb 2-1: Product: syz [ 655.200488][ T32] usb 2-1: Manufacturer: syz [ 655.200505][ T32] usb 2-1: SerialNumber: syz [ 655.259340][ T32] usb 2-1: config 0 descriptor?? [ 655.273349][ T32] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 655.787961][T12694] team0: Port device team_slave_0 added [ 656.203671][T12694] team0: Port device team_slave_1 added [ 656.779052][ T32] gspca_sunplus: reg_r err -32 [ 656.779153][ T32] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 656.785897][ T5741] usb 2-1: USB disconnect, device number 55 [ 656.838116][T11039] hsr_slave_0: left promiscuous mode [ 656.877559][T11039] hsr_slave_1: left promiscuous mode [ 656.881200][T11039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.881232][T11039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.918186][T11039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.918209][T11039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.166603][T11039] veth0_macvtap: left promiscuous mode [ 657.170724][T11039] veth1_vlan: left promiscuous mode [ 657.170952][T11039] veth0_vlan: left promiscuous mode [ 657.373312][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'. [ 657.643227][ T38] kauditd_printk_skb: 20 callbacks suppressed [ 657.643251][ T38] audit: type=1800 audit(1786682525.591:4367): pid=12837 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.1981" name="cpu_byteorder" dev="sysfs" ino=10 res=0 errno=0 [ 658.361110][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 658.508394][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 658.512945][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.513067][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.513148][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 658.513215][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 658.513281][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.547112][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 658.547211][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 658.547241][ T10] usb 4-1: Manufacturer: syz [ 658.601764][ T10] usb 4-1: config 0 descriptor?? [ 658.614624][ T38] audit: type=1800 audit(1786682526.571:4368): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202011 res=0 errno=0 [ 658.617942][ T38] audit: type=1800 audit(1786682526.571:4369): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=202041 res=0 errno=0 [ 658.697239][ T38] audit: type=1800 audit(1786682526.641:4370): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=202018 res=0 errno=0 [ 658.743118][ T38] audit: type=1800 audit(1786682526.700:4371): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=202019 res=0 errno=0 [ 658.888555][ T10] rc_core: IR keymap rc-hauppauge not found [ 658.888579][ T10] Registered IR keymap rc-empty [ 658.888859][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 658.922447][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 658.940643][T11039] team0 (unregistering): Port device team_slave_1 removed [ 658.942947][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 658.980561][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 658.985498][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.003097][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.007231][T11039] team0 (unregistering): Port device team_slave_0 removed [ 659.020613][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.031159][ C0] mceusb 4-1:0.0: long-range (0x1) receiver active [ 659.078174][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.090989][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.109561][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.128839][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.154268][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.172690][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.204257][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 659.283992][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 659.284208][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 659.347117][ T38] audit: type=1800 audit(1786682527.300:4372): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=202040 res=0 errno=0 [ 659.348418][ T38] audit: type=1800 audit(1786682527.300:4373): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=202020 res=0 errno=0 [ 659.405741][ T38] audit: type=1800 audit(1786682527.360:4374): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202061 res=0 errno=0 [ 659.431295][ T38] audit: type=1800 audit(1786682527.390:4375): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202080 res=0 errno=0 [ 659.453496][ T38] audit: type=1800 audit(1786682527.410:4376): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202092 res=0 errno=0 [ 659.846611][T12694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.846625][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.846648][T12694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.936261][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 659.942657][T12694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.942677][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.942783][T12694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.096890][ T10] usb 4-1: USB disconnect, device number 21 [ 660.127220][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 660.223926][T12736] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.224308][T12736] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.224523][T12736] bridge_slave_0: entered allmulticast mode [ 660.227307][T12736] bridge_slave_0: entered promiscuous mode [ 660.283288][T12736] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.283585][T12736] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.283833][T12736] bridge_slave_1: entered allmulticast mode [ 660.314107][T12736] bridge_slave_1: entered promiscuous mode [ 660.818837][T12694] hsr_slave_0: entered promiscuous mode [ 660.828939][T12694] hsr_slave_1: entered promiscuous mode [ 660.833876][T12694] debugfs: 'hsr0' already exists in 'hsr' [ 660.833952][T12694] Cannot create hsr debugfs directory [ 660.840861][T12736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.866812][T12736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.220952][T10064] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 661.280646][ T1248] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 661.342258][T12736] team0: Port device team_slave_0 added [ 661.347583][T12736] team0: Port device team_slave_1 added [ 661.370884][T10064] usb 2-1: Using ep0 maxpacket: 16 [ 661.379790][T10064] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 661.382671][T10064] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 661.382705][T10064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.382727][T10064] usb 2-1: Product: syz [ 661.382742][T10064] usb 2-1: Manufacturer: syz [ 661.382758][T10064] usb 2-1: SerialNumber: syz [ 661.444853][T10064] r8152-cfgselector 2-1: Unknown version 0x0000 [ 661.444882][T10064] r8152-cfgselector 2-1: config 0 descriptor?? [ 661.446634][ T1248] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 661.446663][ T1248] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 661.448999][ T1248] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 661.449029][ T1248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.449051][ T1248] usb 4-1: Product: syz [ 661.449067][ T1248] usb 4-1: Manufacturer: syz [ 661.449083][ T1248] usb 4-1: SerialNumber: syz [ 661.516140][ T1248] usb 4-1: config 0 descriptor?? [ 661.777461][ T1248] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 662.165718][T12736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.165739][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.165829][T12736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.287960][T12736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.287980][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.288013][T12736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.766093][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 663.129686][T12736] hsr_slave_0: entered promiscuous mode [ 663.147634][T12736] hsr_slave_1: entered promiscuous mode [ 663.150409][T12736] debugfs: 'hsr0' already exists in 'hsr' [ 663.150498][T12736] Cannot create hsr debugfs directory [ 663.267237][ T1248] gspca_sunplus: reg_r err -71 [ 663.267320][ T1248] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 663.270106][ T38] kauditd_printk_skb: 27 callbacks suppressed [ 663.270123][ T38] audit: type=1800 audit(1786682531.217:4404): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=204489 res=0 errno=0 [ 663.270167][ T38] audit: type=1800 audit(1786682531.217:4405): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=204490 res=0 errno=0 [ 663.271892][ T38] audit: type=1800 audit(1786682531.217:4406): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=204467 res=0 errno=0 [ 663.271941][ T38] audit: type=1800 audit(1786682531.217:4407): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=204491 res=0 errno=0 [ 663.279114][ T38] audit: type=1800 audit(1786682531.227:4408): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204577 res=0 errno=0 [ 663.285091][ T1248] usb 4-1: USB disconnect, device number 22 [ 663.584565][T11039] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.765899][T10064] r8152-cfgselector 2-1: USB disconnect, device number 56 [ 663.897229][ T38] audit: type=1800 audit(1786682531.846:4409): pid=12694 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24404 res=0 errno=0 [ 663.897288][ T38] audit: type=1800 audit(1786682531.846:4410): pid=12694 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24403 res=0 errno=0 [ 663.964424][ T38] audit: type=1800 audit(1786682531.906:4411): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206437 res=0 errno=0 [ 664.550245][T11039] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.725020][ T5692] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 664.863953][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 664.898474][ T5692] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 664.898533][ T5692] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 664.898564][ T5692] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 664.898593][ T5692] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 664.899756][ T5692] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 664.899810][ T5692] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 664.899840][ T5692] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 664.899880][ T5692] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 664.901150][ T5692] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 664.901204][ T5692] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 664.901235][ T5692] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 664.901263][ T5692] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 664.909213][ T5692] usb 4-1: string descriptor 0 read error: -22 [ 664.909363][ T5692] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 664.909393][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.014077][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 665.020131][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 665.022824][ T10] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 665.022892][ T10] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 665.022956][ T10] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 665.023013][ T10] usb 2-1: config 128 has no interface number 0 [ 665.023136][ T10] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 665.023246][ T10] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.023307][ T10] usb 2-1: config 128 interface 127 has no altsetting 0 [ 665.028868][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 665.028964][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.029021][ T10] usb 2-1: Product: syz [ 665.029063][ T10] usb 2-1: Manufacturer: syz [ 665.029107][ T10] usb 2-1: SerialNumber: syz [ 665.205162][ T38] audit: type=1800 audit(1786682533.165:4412): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207236 res=0 errno=0 [ 665.207929][ T38] audit: type=1800 audit(1786682533.165:4413): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207234 res=0 errno=0 [ 665.259278][ T5692] adutux 4-1:168.0: interrupt endpoints not found [ 665.612538][T11039] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.979786][T10064] usb 4-1: USB disconnect, device number 23 [ 666.229138][ T10] usb 2-1: USB disconnect, device number 57 [ 666.275792][T12913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1994'. [ 666.275824][T12913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1994'. [ 666.291326][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.373769][ T5253] 8021q: adding VLAN 0 to HW filter on device eth11 [ 666.636428][T12919] hfs: can't find a HFS filesystem on dev loop3 [ 666.684479][T11039] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.035538][ T5692] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 667.247434][ T5692] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 667.247458][ T5692] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 667.249765][ T5692] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 667.249787][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.249802][ T5692] usb 2-1: Product: syz [ 667.249813][ T5692] usb 2-1: Manufacturer: syz [ 667.249824][ T5692] usb 2-1: SerialNumber: syz [ 667.305684][ T5692] usb 2-1: config 0 descriptor?? [ 667.328459][ T5692] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 667.546460][T12694] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 667.592791][T12694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.636052][T12694] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 667.904464][T12694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.943059][T12694] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 668.023332][T12694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.044315][T12694] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 668.144207][T12694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.524752][ T38] kauditd_printk_skb: 19 callbacks suppressed [ 668.524789][ T38] audit: type=1800 audit(1786682536.472:4433): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=208833 res=0 errno=0 [ 668.555322][ T38] audit: type=1800 audit(1786682536.502:4434): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=208838 res=0 errno=0 [ 668.557798][ T38] audit: type=1800 audit(1786682536.512:4435): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=208842 res=0 errno=0 [ 668.562350][ T38] audit: type=1800 audit(1786682536.512:4436): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=208841 res=0 errno=0 [ 668.572251][ T38] audit: type=1800 audit(1786682536.522:4437): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=208844 res=0 errno=0 [ 669.036122][ T5692] gspca_sunplus: reg_r err -71 [ 669.036232][ T5692] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 669.063988][ T5692] usb 2-1: USB disconnect, device number 58 [ 669.077750][ T38] audit: type=1800 audit(1786682537.002:4438): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=208704 res=0 errno=0 [ 669.084854][ T38] audit: type=1800 audit(1786682537.032:4439): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=208705 res=0 errno=0 [ 669.087128][ T38] audit: type=1800 audit(1786682537.032:4440): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=208684 res=0 errno=0 [ 669.364313][T12957] FAULT_INJECTION: forcing a failure. [ 669.364313][T12957] name failslab, interval 1, probability 0, space 0, times 0 [ 669.364353][T12957] CPU: 1 UID: 0 PID: 12957 Comm: syz.3.2004 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.364383][T12957] Tainted: [L]=SOFTLOCKUP [ 669.364391][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.364404][T12957] Call Trace: [ 669.364413][T12957] [ 669.364424][T12957] dump_stack_lvl+0xe8/0x150 [ 669.364457][T12957] should_fail_ex+0x467/0x600 [ 669.364491][T12957] should_failslab+0xa8/0x100 [ 669.364516][T12957] ? do_getname+0x2e/0x250 [ 669.364549][T12957] kmem_cache_alloc_noprof+0x9e/0x680 [ 669.364582][T12957] ? do_getname+0x2e/0x250 [ 669.364621][T12957] do_getname+0x2e/0x250 [ 669.364653][T12957] ? getname_flags+0x11/0x20 [ 669.364688][T12957] do_sys_openat2+0xcc/0x200 [ 669.364742][T12957] ? __pfx_do_sys_openat2+0x10/0x10 [ 669.364781][T12957] ? ksys_write+0x248/0x270 [ 669.364810][T12957] ? __pfx_ksys_write+0x10/0x10 [ 669.364839][T12957] __x64_sys_openat+0x138/0x170 [ 669.364881][T12957] do_syscall_64+0x17b/0x530 [ 669.364904][T12957] ? irqentry_exit+0x10f/0x8f0 [ 669.364926][T12957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.364950][T12957] ? clear_bhb_loop+0x40/0x90 [ 669.364978][T12957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.365000][T12957] RIP: 0033:0x7fa0fbdbe84e [ 669.365021][T12957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 669.365041][T12957] RSP: 002b:00007fa0fa055b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 669.365072][T12957] RAX: ffffffffffffffda RBX: 00007fa0fa0566c0 RCX: 00007fa0fbdbe84e [ 669.365089][T12957] RDX: 0000000000080600 RSI: 00007fa0fa055c00 RDI: ffffffffffffff9c [ 669.365106][T12957] RBP: 00007fa0fa055c00 R08: 0000000000000000 R09: 0000000000000000 [ 669.365121][T12957] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 669.365136][T12957] R13: 00007fa0fc086038 R14: 00007fa0fc085fa0 R15: 00007ffc3e1a4fa8 [ 669.365172][T12957] [ 669.815967][T12965] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2006'. [ 669.897233][ T38] audit: type=1800 audit(1786682537.831:4441): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209117 res=0 errno=0 [ 669.933030][ T38] audit: type=1800 audit(1786682537.881:4442): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=209122 res=0 errno=0 [ 670.406334][T12979] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5593] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[12979] [ 670.501283][ T5253] 8021q: adding VLAN 0 to HW filter on device eth12 [ 670.662120][T12736] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 670.713381][T12736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 670.731191][T12736] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 670.749917][ T1248] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 670.777260][T12736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 670.890767][T11039] bridge_slave_1: left allmulticast mode [ 670.890796][T11039] bridge_slave_1: left promiscuous mode [ 670.891024][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.912185][ T1248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.912223][ T1248] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 670.912241][ T1248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.917250][ T1248] usb 2-1: config 0 descriptor?? [ 671.030377][T11039] bridge_slave_0: left allmulticast mode [ 671.030407][T11039] bridge_slave_0: left promiscuous mode [ 671.030761][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.052643][T10064] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 671.138319][ T1248] usbhid 2-1:0.0: can't add hid device: -71 [ 671.138414][ T1248] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 671.166921][ T1248] usb 2-1: USB disconnect, device number 59 [ 671.220990][T10064] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 671.221019][T10064] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 671.223332][T10064] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 671.223355][T10064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.223370][T10064] usb 4-1: Product: syz [ 671.223380][T10064] usb 4-1: Manufacturer: syz [ 671.223391][T10064] usb 4-1: SerialNumber: syz [ 671.227973][T10064] usb 4-1: config 0 descriptor?? [ 671.306148][T10064] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 671.766664][ T1248] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 671.932573][ T1248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.932626][ T1248] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 671.932655][ T1248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.943154][ T1248] usb 2-1: config 0 descriptor?? [ 672.801096][T11039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.823799][ T1248] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 672.850857][ T1248] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 672.890356][T10064] gspca_sunplus: reg_r err -71 [ 672.890464][T10064] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 672.910980][T10064] usb 4-1: USB disconnect, device number 24 [ 672.992160][ T5778] udevd[5778]: setting owner of /dev/bus/usb/004/024 to uid=0, gid=0 failed: No such file or directory [ 673.092138][T11039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.119446][ T1248] usb 2-1: USB disconnect, device number 60 [ 673.119569][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 673.205687][T11039] bond0 (unregistering): Released all slaves [ 673.252758][T12736] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 673.398679][T12736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.465713][T12736] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 673.537131][T12987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2014'. [ 673.587080][T12736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.061626][ T5692] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 674.214762][ T5692] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.214801][ T5692] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.217369][ T5692] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 674.217402][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.217425][ T5692] usb 4-1: Product: syz [ 674.217441][ T5692] usb 4-1: Manufacturer: syz [ 674.217459][ T5692] usb 4-1: SerialNumber: syz [ 674.296884][ T38] kauditd_printk_skb: 46 callbacks suppressed [ 674.296905][ T38] audit: type=1800 audit(1786682542.227:4489): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209862 res=0 errno=0 [ 674.318334][ T38] audit: type=1800 audit(1786682542.247:4490): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=209894 res=0 errno=0 [ 674.350577][ T38] audit: type=1800 audit(1786682542.287:4491): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=209869 res=0 errno=0 [ 674.384011][ T5692] symbolserial 4-1:1.0: symbol converter detected [ 674.402019][ T38] audit: type=1800 audit(1786682542.327:4492): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=209870 res=0 errno=0 [ 674.425042][ T5692] usb 4-1: symbol converter now attached to ttyUSB0 [ 674.428548][ T38] audit: type=1800 audit(1786682542.367:4493): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=209891 res=0 errno=0 [ 674.430771][ T38] audit: type=1800 audit(1786682542.367:4494): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=209892 res=0 errno=0 [ 674.485531][ T38] audit: type=1800 audit(1786682542.377:4495): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=209871 res=0 errno=0 [ 674.520184][ T38] audit: type=1800 audit(1786682542.457:4496): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=209893 res=0 errno=0 [ 674.520795][ T5692] usb 4-1: USB disconnect, device number 25 [ 674.556701][ T5692] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 674.557511][ T5692] symbolserial 4-1:1.0: device disconnected [ 675.663458][ T5741] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 675.745617][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.822765][ T5741] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 675.822797][ T5741] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 675.840741][ T5741] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 675.841088][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.841154][ T5741] usb 4-1: Product: syz [ 675.841197][ T5741] usb 4-1: Manufacturer: syz [ 675.841243][ T5741] usb 4-1: SerialNumber: syz [ 675.886077][ T38] audit: type=1800 audit(1786682543.826:4497): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209999 res=0 errno=0 [ 675.890038][ T5741] usb 4-1: config 0 descriptor?? [ 675.930481][ T38] audit: type=1800 audit(1786682543.866:4498): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=210031 res=0 errno=0 [ 675.965808][ T5741] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 676.043096][T11039] hsr_slave_0: left promiscuous mode [ 676.082858][T11039] hsr_slave_1: left promiscuous mode [ 676.084699][T11039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.084728][T11039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.124242][T11039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.124273][T11039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.255726][T11039] veth1_macvtap: left promiscuous mode [ 676.255841][T11039] veth0_macvtap: left promiscuous mode [ 676.256153][T11039] veth1_vlan: left promiscuous mode [ 676.256372][T11039] veth0_vlan: left promiscuous mode [ 676.298718][T13028] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2022'. [ 676.611324][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.614387][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.947500][ T5692] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 677.127652][ T5692] usb 2-1: config 10 has an invalid interface number: 177 but max is 0 [ 677.127686][ T5692] usb 2-1: config 10 has no interface number 0 [ 677.127740][ T5692] usb 2-1: config 10 interface 177 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 677.127766][ T5692] usb 2-1: config 10 interface 177 altsetting 129 endpoint 0xA has invalid maxpacket 28967, setting to 64 [ 677.127799][ T5692] usb 2-1: config 10 interface 177 altsetting 129 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 677.127828][ T5692] usb 2-1: config 10 interface 177 altsetting 129 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 677.127856][ T5692] usb 2-1: config 10 interface 177 altsetting 129 endpoint 0x85 has invalid maxpacket 24936, setting to 1024 [ 677.127886][ T5692] usb 2-1: config 10 interface 177 altsetting 129 bulk endpoint 0x85 has invalid maxpacket 1024 [ 677.127913][ T5692] usb 2-1: config 10 interface 177 altsetting 129 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 677.127942][ T5692] usb 2-1: config 10 interface 177 has no altsetting 0 [ 677.133392][ T5692] usb 2-1: New USB device found, idVendor=2b13, idProduct=0bee, bcdDevice=ee.90 [ 677.133416][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.133430][ T5692] usb 2-1: Product: 斁䏧娣蜴㪻Њ蠎屙伧뱲Ø眯턘楶䘮ﴻ腏⃣㇊姑ᔴ⛣鋞⪌鐤䌽쾉氭ᕲ列ꕛ쉭䯧籫䑫ሖ䚳敿ෝ笔ㇷ⛶翟姦鶝ࢗ铁㸑쐈悬깿僶떶⣳迀璯젛僁諆蘠㗆㝬繝郳綅顶ꭊ瞤꛶꒶߷莄䈘ྴ墄탖濞爏꛿ [ 677.133453][ T5692] usb 2-1: Manufacturer: ㏩剷⛜稖Ꝭ鬅椪零尯荅ﭔꄈᐢ军瞒꿋쑂᱁ẅ෰樥悗╸㻭ꩌࡍ씆꼸纍၉豗㊀졈ᷟ巳쭊蘥峒飻α⛼⫊뷹뗽븗汉዆ [ 677.134929][ T5692] usb 2-1: SerialNumber: ᥝ륞쩿ffi쎷ዊ︈͢楌愯殴ꏴꃜ툛덭倱䡪૿笓쌭宖壮ኚ贡ኮ⒫먜䬷毁⾣뱫؅鐇Ҧ炢若帠誫錼稗엠蒙⏢呸᧳琉옑㓕倫❥뉩䶁䯦ꨕ簾ㄴ䡡࠯閆규扥왫ℵ荣즹苕Ṹ괩鎺볘挲尋功漄歯벙吓礽㌱듕ঔ铁滃䉠羀䃸ꕖ骗롛岘臉칾頣⋋㫞㐣㎇㛴륜솃瀢薖췭͟䕄ມᧅ㗶 [ 677.227250][T13030] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 677.459721][ T5692] usb-storage 2-1:10.177: USB Mass Storage device detected [ 677.531223][ T5741] gspca_sunplus: reg_r err -71 [ 677.531309][ T5741] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 677.608967][ T5741] usb 4-1: USB disconnect, device number 26 [ 677.657069][ T5692] usb 2-1: USB disconnect, device number 61 [ 677.865943][T11039] team0 (unregistering): Port device team_slave_1 removed [ 677.904982][T11039] team0 (unregistering): Port device team_slave_0 removed [ 678.353000][ T5253] 8021q: adding VLAN 0 to HW filter on device eth13 [ 678.481840][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.590573][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2029'. [ 678.624862][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.625031][ T9595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.691157][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.691475][ T9595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.879243][T12736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.925786][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2029'. [ 679.149710][T12736] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.198183][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.198384][ T9595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.358115][T11033] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.358306][T11033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.921099][T13068] FAULT_INJECTION: forcing a failure. [ 679.921099][T13068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 679.921144][T13068] CPU: 0 UID: 0 PID: 13068 Comm: syz.3.2031 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 679.921176][T13068] Tainted: [L]=SOFTLOCKUP [ 679.921185][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.921199][T13068] Call Trace: [ 679.921209][T13068] [ 679.921219][T13068] dump_stack_lvl+0xe8/0x150 [ 679.921255][T13068] should_fail_ex+0x467/0x600 [ 679.921291][T13068] prepare_alloc_pages+0x223/0x650 [ 679.921344][T13068] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 679.921385][T13068] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 679.921429][T13068] ? __pfx_policy_nodemask+0x10/0x10 [ 679.921464][T13068] ? __lock_acquire+0x6df/0x2e40 [ 679.921494][T13068] alloc_pages_mpol+0xd4/0x280 [ 679.921522][T13068] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 679.921554][T13068] vma_alloc_folio_noprof+0xe1/0x1e0 [ 679.921582][T13068] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 679.921603][T13068] ? lock_acquire+0x115/0x350 [ 679.921649][T13068] do_pte_missing+0x835/0x28f0 [ 679.921692][T13068] ? handle_mm_fault+0xeb/0x28d0 [ 679.921728][T13068] handle_mm_fault+0xf95/0x28d0 [ 679.921761][T13068] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 679.921796][T13068] ? handle_mm_fault+0xeb/0x28d0 [ 679.921839][T13068] ? __pfx_handle_mm_fault+0x10/0x10 [ 679.921869][T13068] ? follow_page_pte+0x74b/0xf20 [ 679.921908][T13068] ? __pfx_follow_page_pte+0x10/0x10 [ 679.921948][T13068] __get_user_pages+0x1676/0x2650 [ 679.922008][T13068] get_user_pages_unlocked+0x1ee/0x6f0 [ 679.922050][T13068] hva_to_pfn+0x365/0xf10 [ 679.922097][T13068] ? __pfx_hva_to_pfn+0x10/0x10 [ 679.922127][T13068] ? __resched_curr+0x106/0x530 [ 679.922163][T13068] ? xa_load+0x60/0x210 [ 679.922198][T13068] ? kvm_follow_pfn+0x21a/0x3c0 [ 679.922233][T13068] __kvm_faultin_pfn+0xaa/0x100 [ 679.922275][T13068] kvm_mmu_faultin_pfn+0x73b/0x1610 [ 679.922332][T13068] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 679.922377][T13068] kvm_tdp_page_fault+0x273/0x370 [ 679.922412][T13068] kvm_mmu_do_page_fault+0x31d/0x640 [ 679.922454][T13068] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 679.922498][T13068] ? vmx_vcpu_run+0x1035/0x2ee0 [ 679.922528][T13068] ? rcu_is_watching+0x15/0xb0 [ 679.922554][T13068] ? __vmx_complete_interrupts+0xe7/0x640 [ 679.922591][T13068] kvm_mmu_page_fault+0x1f2/0xaa0 [ 679.922632][T13068] ? __pfx_handle_ept_violation+0x10/0x10 [ 679.922656][T13068] vmx_handle_exit+0xfa4/0x16e0 [ 679.922699][T13068] vcpu_run+0x4cc0/0x7780 [ 679.922765][T13068] ? vcpu_run+0x293e/0x7780 [ 679.922835][T13068] ? __pfx_vcpu_run+0x10/0x10 [ 679.922868][T13068] ? lock_acquire+0x115/0x350 [ 679.922919][T13068] kvm_arch_vcpu_ioctl_run+0xe23/0x1920 [ 679.922956][T13068] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920 [ 679.922988][T13068] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 679.923012][T13068] ? _mutex_lock_killable+0x152/0x1d0 [ 679.923047][T13068] kvm_vcpu_ioctl+0xa64/0xfe0 [ 679.923088][T13068] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 679.923124][T13068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 679.923147][T13068] ? lockdep_hardirqs_on+0x7a/0x110 [ 679.923187][T13068] ? __fget_files+0x2a/0x420 [ 679.923215][T13068] ? __fget_files+0x3a8/0x420 [ 679.923238][T13068] ? __fget_files+0x2a/0x420 [ 679.923266][T13068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 679.923302][T13068] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 679.923347][T13068] __se_sys_ioctl+0xff/0x170 [ 679.923380][T13068] do_syscall_64+0x17b/0x530 [ 679.923403][T13068] ? irqentry_exit+0x10f/0x8f0 [ 679.923425][T13068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.923448][T13068] ? clear_bhb_loop+0x40/0x90 [ 679.923476][T13068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.923498][T13068] RIP: 0033:0x7fa0fbdfe019 [ 679.923520][T13068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.923539][T13068] RSP: 002b:00007fa0fa056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.923563][T13068] RAX: ffffffffffffffda RBX: 00007fa0fc085fa0 RCX: 00007fa0fbdfe019 [ 679.923580][T13068] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 679.923595][T13068] RBP: 00007fa0fa056090 R08: 0000000000000000 R09: 0000000000000000 [ 679.923610][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.923624][T13068] R13: 00007fa0fc086038 R14: 00007fa0fc085fa0 R15: 00007ffc3e1a4fa8 [ 679.923660][T13068] [ 681.080175][ T7162] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 681.228758][ T7162] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 681.228792][ T7162] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 681.242475][ T7162] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 681.242544][ T7162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.242588][ T7162] usb 2-1: Product: syz [ 681.242632][ T7162] usb 2-1: Manufacturer: syz [ 681.242676][ T7162] usb 2-1: SerialNumber: syz [ 681.291855][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 681.291875][ T38] audit: type=1800 audit(1786682549.232:4515): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210278 res=0 errno=0 [ 681.305262][ T38] audit: type=1800 audit(1786682549.242:4516): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=210310 res=0 errno=0 [ 681.361957][ T7162] usb 2-1: config 0 descriptor?? [ 681.366370][ T38] audit: type=1800 audit(1786682549.302:4517): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=210285 res=0 errno=0 [ 681.392034][ T38] audit: type=1800 audit(1786682549.332:4518): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=210286 res=0 errno=0 [ 681.393839][ T7162] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 681.637994][ T5253] 8021q: adding VLAN 0 to HW filter on device eth14 [ 682.187635][ T32] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 682.337796][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 682.339701][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.339730][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.342106][ T32] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 682.342138][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.342162][ T32] usb 4-1: Product: syz [ 682.342179][ T32] usb 4-1: Manufacturer: syz [ 682.342196][ T32] usb 4-1: SerialNumber: syz [ 682.426778][ T32] hub 4-1:1.0: bad descriptor, ignoring hub [ 682.426822][ T32] hub 4-1:1.0: probe with driver hub failed with error -5 [ 682.463407][ T38] audit: type=1800 audit(1786682550.381:4519): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210356 res=0 errno=0 [ 682.672432][ T38] audit: type=1800 audit(1786682550.611:4520): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=210388 res=0 errno=0 [ 682.672489][ T38] audit: type=1800 audit(1786682550.611:4521): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=210363 res=0 errno=0 [ 682.676490][ T38] audit: type=1800 audit(1786682550.611:4522): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=210364 res=0 errno=0 [ 682.814960][ T38] audit: type=1800 audit(1786682550.751:4523): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=210385 res=0 errno=0 [ 682.815762][ T38] audit: type=1800 audit(1786682550.751:4524): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=210386 res=0 errno=0 [ 682.883448][ T32] usb 4-1: USB disconnect, device number 27 [ 682.953500][T12694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.013247][ T7162] gspca_sunplus: reg_r err -71 [ 683.013350][ T7162] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 683.019897][ T7162] usb 2-1: USB disconnect, device number 62 [ 683.402260][T12736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.791007][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 684.128717][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 684.389381][T12694] veth0_vlan: entered promiscuous mode [ 684.458684][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 684.473188][ T5253] 8021q: adding VLAN 0 to HW filter on device eth15 [ 684.551125][T12694] veth1_vlan: entered promiscuous mode [ 684.616431][T12736] veth0_vlan: entered promiscuous mode [ 684.859401][T13145] FAULT_INJECTION: forcing a failure. [ 684.859401][T13145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.859447][T13145] CPU: 0 UID: 0 PID: 13145 Comm: syz.1.2039 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 684.859477][T13145] Tainted: [L]=SOFTLOCKUP [ 684.859485][T13145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.859499][T13145] Call Trace: [ 684.859508][T13145] [ 684.859517][T13145] dump_stack_lvl+0xe8/0x150 [ 684.859553][T13145] should_fail_ex+0x467/0x600 [ 684.859587][T13145] _copy_to_user+0x31/0xb0 [ 684.859610][T13145] do_pagemap_cmd+0xbaf/0xc50 [ 684.859654][T13145] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 684.859706][T13145] ? __fget_files+0x2a/0x420 [ 684.859734][T13145] ? __fget_files+0x3a8/0x420 [ 684.859755][T13145] ? __fget_files+0x2a/0x420 [ 684.859781][T13145] ? bpf_lsm_file_ioctl+0x9/0x20 [ 684.859813][T13145] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 684.859846][T13145] __se_sys_ioctl+0xff/0x170 [ 684.859891][T13145] do_syscall_64+0x17b/0x530 [ 684.859914][T13145] ? irqentry_exit+0x10f/0x8f0 [ 684.859934][T13145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.859958][T13145] ? clear_bhb_loop+0x40/0x90 [ 684.859985][T13145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.860007][T13145] RIP: 0033:0x7f60fccfe019 [ 684.860029][T13145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.860050][T13145] RSP: 002b:00007f60faf56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.860073][T13145] RAX: ffffffffffffffda RBX: 00007f60fcf85fa0 RCX: 00007f60fccfe019 [ 684.860090][T13145] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000004 [ 684.860105][T13145] RBP: 00007f60faf56090 R08: 0000000000000000 R09: 0000000000000000 [ 684.860119][T13145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.860132][T13145] R13: 00007f60fcf86038 R14: 00007f60fcf85fa0 R15: 00007ffc06093898 [ 684.860165][T13145] [ 685.192282][T12736] veth1_vlan: entered promiscuous mode [ 685.338276][T12694] veth0_macvtap: entered promiscuous mode [ 685.395179][T12694] veth1_macvtap: entered promiscuous mode [ 685.513157][ T7162] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 685.628933][T12694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.662878][T12736] veth0_macvtap: entered promiscuous mode [ 685.691273][ T7162] usb 4-1: Using ep0 maxpacket: 16 [ 685.717094][ T7162] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.717125][ T7162] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.747202][ T7162] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.747238][ T7162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.747261][ T7162] usb 4-1: Product: syz [ 685.747277][ T7162] usb 4-1: Manufacturer: syz [ 685.747293][ T7162] usb 4-1: SerialNumber: syz [ 685.827574][ T7162] usb 4-1: 0:2 : does not exist [ 685.835794][T12694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.930481][T10064] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 685.985667][T12736] veth1_macvtap: entered promiscuous mode [ 686.037178][ T7162] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 686.123726][ T7162] usb 4-1: USB disconnect, device number 28 [ 686.220684][T10064] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 686.220718][T10064] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 686.229876][T10064] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 686.229911][T10064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.229934][T10064] usb 2-1: Product: syz [ 686.229950][T10064] usb 2-1: Manufacturer: syz [ 686.229967][T10064] usb 2-1: SerialNumber: syz [ 686.303280][T10064] usb 2-1: config 0 descriptor?? [ 686.308789][ T38] kauditd_printk_skb: 17 callbacks suppressed [ 686.308809][ T38] audit: type=1800 audit(1786682554.238:4542): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210667 res=0 errno=0 [ 686.342607][T10064] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 686.343750][ T38] audit: type=1800 audit(1786682554.278:4543): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=210699 res=0 errno=0 [ 686.344798][ T38] audit: type=1800 audit(1786682554.278:4544): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=210674 res=0 errno=0 [ 686.346363][ T38] audit: type=1800 audit(1786682554.278:4545): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=210675 res=0 errno=0 [ 686.425750][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.469136][T11035] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.507439][T11035] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.553044][T11035] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.569706][T11035] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.678898][ T5253] 8021q: adding VLAN 0 to HW filter on device eth16 [ 686.719219][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.719304][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.915236][T12736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.228115][T12736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.521872][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 687.901933][ T38] audit: type=1800 audit(1786682555.817:4546): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210737 res=0 errno=0 [ 688.044337][T10064] gspca_sunplus: reg_r err -71 [ 688.044434][T10064] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 688.061997][ T38] audit: type=1800 audit(1786682555.987:4547): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=210696 res=0 errno=0 [ 688.062574][T10064] usb 2-1: USB disconnect, device number 63 [ 688.216665][T11047] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.223792][ T38] audit: type=1800 audit(1786682556.157:4548): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=210697 res=0 errno=0 [ 688.264623][T11047] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.304995][T11047] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.325483][T11047] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.658161][T11047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.658186][T11047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.843125][ T38] audit: type=1800 audit(1786682556.776:4549): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210881 res=0 errno=0 [ 689.124118][T11642] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 689.454023][T11642] usb 4-1: Using ep0 maxpacket: 16 [ 689.456078][T11642] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 689.456109][T11642] usb 4-1: config 0 has no interface number 0 [ 689.456859][ T38] audit: type=1800 audit(1786682557.386:4550): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210901 res=0 errno=0 [ 689.458467][T11642] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 689.458498][T11642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.458520][T11642] usb 4-1: Product: syz [ 689.458536][T11642] usb 4-1: Manufacturer: syz [ 689.458552][T11642] usb 4-1: SerialNumber: syz [ 689.460847][ T38] audit: type=1800 audit(1786682557.386:4551): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=210905 res=0 errno=0 [ 689.634410][T11642] usb 4-1: config 0 descriptor?? [ 689.664846][T11642] hub 4-1:0.132: bad descriptor, ignoring hub [ 689.664873][T11642] hub 4-1:0.132: probe with driver hub failed with error -5 [ 689.779284][T11642] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input36 [ 690.150503][T10064] usb 4-1: USB disconnect, device number 29 [ 690.641626][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.641648][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.696980][T10064] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 691.766034][ T38] kauditd_printk_skb: 23 callbacks suppressed [ 691.766052][ T38] audit: type=1800 audit(1786682559.704:4575): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211380 res=0 errno=0 [ 691.772817][T11042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.772839][T11042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.844847][T10064] usb 4-1: Using ep0 maxpacket: 8 [ 691.847168][T10064] usb 4-1: unable to get BOS descriptor or descriptor too short [ 691.848417][T10064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 691.848455][T10064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 691.848479][T10064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 691.848507][T10064] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 691.848533][T10064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 691.848556][T10064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 691.848578][T10064] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 691.850905][T10064] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 691.850936][T10064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.850959][T10064] usb 4-1: Product: syz [ 691.850975][T10064] usb 4-1: Manufacturer: syz [ 691.850991][T10064] usb 4-1: SerialNumber: syz [ 692.002545][T10064] usb 4-1: config 0 descriptor?? [ 692.003508][T13205] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 692.045528][T10064] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 692.057188][ T38] audit: type=1800 audit(1786682559.974:4576): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 692.080265][ T38] audit: type=1800 audit(1786682560.014:4577): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211428 res=0 errno=0 [ 692.129628][ T38] audit: type=1800 audit(1786682560.064:4578): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=211460 res=0 errno=0 [ 692.130309][ T38] audit: type=1800 audit(1786682560.064:4579): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=211435 res=0 errno=0 [ 692.141147][ T38] audit: type=1800 audit(1786682560.074:4580): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=211436 res=0 errno=0 [ 692.264855][T13209] /dev/nullb0: Can't open blockdev [ 692.265417][T13209] FAULT_INJECTION: forcing a failure. [ 692.265417][T13209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.265454][T13209] CPU: 1 UID: 0 PID: 13209 Comm: syz.1.2051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 692.265482][T13209] Tainted: [L]=SOFTLOCKUP [ 692.265491][T13209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 692.265504][T13209] Call Trace: [ 692.265512][T13209] [ 692.265520][T13209] dump_stack_lvl+0xe8/0x150 [ 692.265557][T13209] should_fail_ex+0x467/0x600 [ 692.265592][T13209] _copy_to_user+0x31/0xb0 [ 692.265616][T13209] simple_read_from_buffer+0xe1/0x170 [ 692.265644][T13209] proc_fail_nth_read+0x1be/0x230 [ 692.265671][T13209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.265698][T13209] ? rw_verify_area+0x250/0x4d0 [ 692.265726][T13209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.265750][T13209] vfs_read+0x219/0xa90 [ 692.265784][T13209] ? __pfx_vfs_read+0x10/0x10 [ 692.265813][T13209] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 692.265850][T13209] ? lockdep_hardirqs_on+0x7a/0x110 [ 692.265873][T13209] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 692.265896][T13209] ? mutex_lock_nested+0x152/0x1d0 [ 692.265925][T13209] ? fdget_pos+0x252/0x320 [ 692.265956][T13209] ksys_read+0x156/0x270 [ 692.265985][T13209] ? __pfx_ksys_read+0x10/0x10 [ 692.266022][T13209] do_syscall_64+0x17b/0x530 [ 692.266045][T13209] ? irqentry_exit+0x10f/0x8f0 [ 692.266067][T13209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.266090][T13209] ? clear_bhb_loop+0x40/0x90 [ 692.266118][T13209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.266141][T13209] RIP: 0033:0x7f60fccbe84e [ 692.266164][T13209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 692.266184][T13209] RSP: 002b:00007f60faf55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.266208][T13209] RAX: ffffffffffffffda RBX: 00007f60faf566c0 RCX: 00007f60fccbe84e [ 692.266225][T13209] RDX: 000000000000000f RSI: 00007f60faf560a0 RDI: 0000000000000004 [ 692.266239][T13209] RBP: 00007f60faf56090 R08: 0000000000000000 R09: 0000000000000000 [ 692.266252][T13209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 692.266266][T13209] R13: 00007f60fcf86038 R14: 00007f60fcf85fa0 R15: 00007ffc06093898 [ 692.266302][T13209] [ 692.688568][ T38] audit: type=1800 audit(1786682560.623:4581): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 692.775882][ T38] audit: type=1800 audit(1786682560.703:4582): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31429 res=0 errno=0 [ 692.783014][ T38] audit: type=1800 audit(1786682560.713:4583): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31452 res=0 errno=0 [ 692.943860][T10803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.943877][T10803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.035712][ T7162] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 693.215972][ T7162] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 693.216006][ T7162] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 693.274124][ T7162] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 693.274158][ T7162] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.274180][ T7162] usb 9-1: Product: syz [ 693.274196][ T7162] usb 9-1: Manufacturer: syz [ 693.274213][ T7162] usb 9-1: SerialNumber: syz [ 693.403197][ T7162] usb 9-1: config 0 descriptor?? [ 693.417803][ T38] audit: type=1800 audit(1786682561.353:4584): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211703 res=0 errno=0 [ 693.448239][ T7162] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 693.465703][T10064] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 693.553749][T10064] usb 4-1: USB disconnect, device number 30 [ 693.773123][T13227] FAULT_INJECTION: forcing a failure. [ 693.773123][T13227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.773266][T13227] CPU: 1 UID: 0 PID: 13227 Comm: syz.1.2055 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 693.773301][T13227] Tainted: [L]=SOFTLOCKUP [ 693.773309][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 693.773323][T13227] Call Trace: [ 693.773333][T13227] [ 693.773344][T13227] dump_stack_lvl+0xe8/0x150 [ 693.773380][T13227] should_fail_ex+0x467/0x600 [ 693.773415][T13227] _copy_from_iter+0x1d3/0x1660 [ 693.773455][T13227] ? trace_kmem_cache_alloc+0x29/0xe0 [ 693.773491][T13227] ? __pfx__copy_from_iter+0x10/0x10 [ 693.773524][T13227] ? __alloc_skb+0x276/0x7a0 [ 693.773553][T13227] ? __alloc_skb+0x276/0x7a0 [ 693.773589][T13227] ? netlink_sendmsg+0x650/0xb40 [ 693.773624][T13227] ? skb_put+0x112/0x210 [ 693.773657][T13227] netlink_sendmsg+0x6c0/0xb40 [ 693.773694][T13227] ? _parse_integer_limit+0x18f/0x1e0 [ 693.773739][T13227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.773778][T13227] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 693.773823][T13227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.773858][T13227] sock_sendmsg_nosec+0x13a/0x180 [ 693.773887][T13227] sock_write_iter+0x2e4/0x3f0 [ 693.773918][T13227] ? __pfx_sock_write_iter+0x10/0x10 [ 693.773949][T13227] ? bpf_lsm_file_permission+0x9/0x20 [ 693.773984][T13227] ? security_file_permission+0x68/0x220 [ 693.774019][T13227] vfs_write+0x61e/0xbb0 [ 693.774054][T13227] ? __pfx_vfs_write+0x10/0x10 [ 693.774090][T13227] ? __fget_files+0x2a/0x420 [ 693.774123][T13227] ksys_write+0x156/0x270 [ 693.774154][T13227] ? __pfx_ksys_write+0x10/0x10 [ 693.774191][T13227] do_syscall_64+0x17b/0x530 [ 693.774215][T13227] ? irqentry_exit+0x10f/0x8f0 [ 693.774237][T13227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.774261][T13227] ? clear_bhb_loop+0x40/0x90 [ 693.774291][T13227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.774314][T13227] RIP: 0033:0x7f60fccfe019 [ 693.774335][T13227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.774354][T13227] RSP: 002b:00007f60faf56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 693.774378][T13227] RAX: ffffffffffffffda RBX: 00007f60fcf85fa0 RCX: 00007f60fccfe019 [ 693.774394][T13227] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000004 [ 693.774410][T13227] RBP: 00007f60faf56090 R08: 0000000000000000 R09: 0000000000000000 [ 693.774424][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.774438][T13227] R13: 00007f60fcf86038 R14: 00007f60fcf85fa0 R15: 00007ffc06093898 [ 693.774474][T13227] [ 694.164671][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.240002][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2056'. [ 694.815498][T13233] netlink: 'syz.1.2057': attribute type 20 has an invalid length. [ 694.853965][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 695.182286][ T7162] gspca_sunplus: reg_r err -71 [ 695.182386][ T7162] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 695.257390][T13241] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 695.306805][ T7162] usb 9-1: USB disconnect, device number 2 [ 695.673512][T13256] create_pit_timer: 11 callbacks suppressed [ 695.673536][T13256] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 696.707128][T13281] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2067'. [ 696.709691][T13281] netlink: 'syz.9.2067': attribute type 16 has an invalid length. [ 696.709715][T13281] netlink: 'syz.9.2067': attribute type 3 has an invalid length. [ 696.709730][T13281] netlink: 31362 bytes leftover after parsing attributes in process `syz.9.2067'. [ 696.871824][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 696.908501][T11642] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 697.006923][ T38] kauditd_printk_skb: 17 callbacks suppressed [ 697.006944][ T38] audit: type=1800 audit(1786682564.930:4602): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 697.058581][T11642] usb 9-1: Using ep0 maxpacket: 32 [ 697.060533][T11642] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.060570][T11642] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.060612][T11642] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 697.060638][T11642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.066804][ T38] audit: type=1800 audit(1786682564.990:4603): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31479 res=0 errno=0 [ 697.068017][T11642] usb 9-1: config 0 descriptor?? [ 697.071471][ T38] audit: type=1800 audit(1786682564.990:4604): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211897 res=0 errno=0 [ 697.160941][ T38] audit: type=1800 audit(1786682565.070:4605): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=211929 res=0 errno=0 [ 697.161095][ T38] audit: type=1800 audit(1786682565.070:4606): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=211907 res=0 errno=0 [ 697.203774][ T38] audit: type=1800 audit(1786682565.130:4607): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=211908 res=0 errno=0 [ 697.206137][T11642] hub 9-1:0.0: USB hub found [ 697.215609][ T38] audit: type=1800 audit(1786682565.130:4608): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=211909 res=0 errno=0 [ 697.221423][ T38] audit: type=1800 audit(1786682565.150:4609): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31502 res=0 errno=0 [ 697.308075][ T38] audit: type=1800 audit(1786682565.230:4610): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211962 res=0 errno=0 [ 697.321335][T10064] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 697.356437][T11642] hub 9-1:0.0: 1 port detected [ 697.474076][T13294] gadgetfs: bound to dummy_udc driver [ 697.497499][T10064] usb 10-1: unable to get BOS descriptor or descriptor too short [ 697.498094][T10064] usb 10-1: not running at top speed; connect to a high speed hub [ 697.511809][T10064] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.511985][T10064] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 697.512069][T10064] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 697.554762][T10064] usb 10-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 697.554797][T10064] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.554843][T10064] usb 10-1: Product: syz [ 697.554888][T10064] usb 10-1: Manufacturer: syz [ 697.554918][T10064] usb 10-1: SerialNumber: syz [ 697.703699][ T38] audit: type=1800 audit(1786682565.630:4611): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211981 res=0 errno=0 [ 697.741995][T11642] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 697.742024][T11642] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 697.779218][T11642] usbhid 9-1:0.0: can't add hid device: -71 [ 697.779353][T11642] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 697.820731][T11642] usb 9-1: USB disconnect, device number 3 [ 697.899203][ T7162] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 698.000078][T10064] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 698.000122][T10064] usb 10-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 698.051979][ T7162] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 698.052014][ T7162] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 698.054751][ T7162] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 698.054783][ T7162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.054804][ T7162] usb 2-1: Product: syz [ 698.054820][ T7162] usb 2-1: Manufacturer: syz [ 698.054837][ T7162] usb 2-1: SerialNumber: syz [ 698.131743][ T7162] usb 2-1: config 0 descriptor?? [ 698.157611][ T7162] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 698.281871][T10064] usb 10-1: USB disconnect, device number 2 [ 698.366484][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.558992][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2073'. [ 698.559101][T13303] bridge_slave_1: left allmulticast mode [ 698.559132][T13303] bridge_slave_1: left promiscuous mode [ 698.657147][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.843150][T13303] bridge_slave_0: left allmulticast mode [ 698.843192][T13303] bridge_slave_0: left promiscuous mode [ 698.843516][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.248144][T13315] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in; [ 699.248144][T13315] program syz.3.2079 not setting count and/or reply_len properly [ 699.763478][ T7162] gspca_sunplus: reg_r err -71 [ 699.763576][ T7162] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 699.775800][ T7162] usb 2-1: USB disconnect, device number 64 [ 699.776733][ T5770] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 699.900603][ T5770] usb 10-1: device descriptor read/64, error -71 [ 700.144033][ T5770] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 700.281290][ T5770] usb 10-1: device descriptor read/64, error -71 [ 700.392662][ T5770] usb usb10-port1: attempt power cycle [ 700.741285][ T5770] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 700.772523][ T5770] usb 10-1: device descriptor read/8, error -71 [ 700.811426][ T823] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 700.834181][ T7162] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 700.961379][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 700.963476][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.963513][ T823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.963559][ T823] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 700.963585][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.970125][ T823] usb 2-1: config 0 descriptor?? [ 701.017559][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 701.018564][ T5770] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 701.030895][ T7162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.045019][ T5770] usb 10-1: device descriptor read/8, error -71 [ 701.049482][ T7162] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 701.049570][ T7162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.049633][ T7162] usb 4-1: Product: syz [ 701.049680][ T7162] usb 4-1: Manufacturer: syz [ 701.049767][ T7162] usb 4-1: SerialNumber: syz [ 701.108223][ T7162] usb 4-1: config 0 descriptor?? [ 701.150698][ T7162] uvcvideo 4-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 701.150734][ T7162] uvcvideo 4-1:0.0: No valid video chain found. [ 701.154538][ T5770] usb usb10-port1: unable to enumerate USB device [ 701.192344][ T9] usb 9-1: too many configurations: 21, using maximum allowed: 8 [ 701.193571][ T9] usb 9-1: config index 0 descriptor too short (expected 45, got 28) [ 701.193601][ T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 701.193651][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.194833][ T9] usb 9-1: config index 1 descriptor too short (expected 45, got 28) [ 701.194861][ T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 701.194951][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.196087][ T9] usb 9-1: config index 2 descriptor too short (expected 45, got 28) [ 701.196137][ T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 701.196198][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.197341][ T9] usb 9-1: config index 3 descriptor too short (expected 45, got 28) [ 701.197391][ T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 701.197442][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.198591][ T9] usb 9-1: config index 4 descriptor too short (expected 45, got 28) [ 701.198633][ T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 701.198683][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.200695][ T9] usb 9-1: config index 5 descriptor too short (expected 45, got 28) [ 701.200715][ T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 701.200781][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.265879][ T9] usb 9-1: config index 6 descriptor too short (expected 45, got 28) [ 701.265976][ T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 701.266038][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.273892][ T9] usb 9-1: config index 7 descriptor too short (expected 45, got 28) [ 701.273972][ T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 701.274060][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 701.287273][ T9] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 701.287337][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.287361][ T9] usb 9-1: Product: syz [ 701.287378][ T9] usb 9-1: Manufacturer: syz [ 701.287424][ T9] usb 9-1: SerialNumber: syz [ 701.364820][ T5741] usb 4-1: USB disconnect, device number 31 [ 701.494340][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494380][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494408][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494436][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494464][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494493][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494522][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494549][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494578][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.494606][ T823] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 701.605074][ T9] rtl8150 9-1:1.0: couldn't find required endpoints [ 701.605276][ T9] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 701.658158][ T823] logitech 0003:046D:C50C.0011: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 701.732306][ T823] usb 2-1: USB disconnect, device number 65 [ 701.889898][T13366] fido_id[13366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 702.626191][ T38] kauditd_printk_skb: 57 callbacks suppressed [ 702.626213][ T38] audit: type=1800 audit(1786682570.536:4669): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 702.990185][ T38] audit: type=1800 audit(1786682570.906:4670): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 703.166492][T13403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.167142][T13403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.377614][ T1248] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 703.434276][ T823] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 703.513111][ T1248] usb 10-1: device descriptor read/64, error -71 [ 703.521632][ T5741] usb 9-1: USB disconnect, device number 4 [ 703.592225][ T38] audit: type=1800 audit(1786682571.506:4671): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 703.609034][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 703.626326][ T823] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 703.626354][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.626371][ T823] usb 4-1: Product: syz [ 703.626383][ T823] usb 4-1: Manufacturer: и [ 703.626400][ T823] usb 4-1: SerialNumber: syz [ 703.708583][ T38] audit: type=1800 audit(1786682571.626:4672): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=212750 res=0 errno=0 [ 703.710822][ T38] audit: type=1800 audit(1786682571.626:4673): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=212782 res=0 errno=0 [ 703.757285][ T38] audit: type=1800 audit(1786682571.675:4674): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=212757 res=0 errno=0 [ 703.758168][ T38] audit: type=1800 audit(1786682571.675:4675): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=212758 res=0 errno=0 [ 703.905274][ T1248] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 704.029344][ T823] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 704.050547][ T38] audit: type=1800 audit(1786682571.975:4676): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=212779 res=0 errno=0 [ 704.053202][ T38] audit: type=1800 audit(1786682571.975:4677): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=212780 res=0 errno=0 [ 704.110908][ T823] usb 4-1: USB disconnect, device number 32 [ 704.120179][T10064] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 704.255638][ T1248] usb 10-1: device descriptor read/64, error -71 [ 704.315393][T10064] usb 2-1: Using ep0 maxpacket: 8 [ 704.382875][T10064] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 704.382908][T10064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.382930][T10064] usb 2-1: Product: syz [ 704.382945][T10064] usb 2-1: Manufacturer: syz [ 704.382962][T10064] usb 2-1: SerialNumber: syz [ 704.396161][ T1248] usb usb10-port1: attempt power cycle [ 704.452761][T10064] usb 2-1: config 0 descriptor?? [ 704.458767][ T38] audit: type=1800 audit(1786682572.365:4678): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=212889 res=0 errno=0 [ 704.488845][T10064] gspca_main: se401-2.14.0 probing 047d:5003 [ 704.507623][ T5741] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 704.668574][ T5741] usb 9-1: unable to get BOS descriptor or descriptor too short [ 704.669844][ T5741] usb 9-1: config 114 has an invalid interface number: 49 but max is 0 [ 704.669871][ T5741] usb 9-1: config 114 has no interface number 0 [ 704.669938][ T5741] usb 9-1: config 114 interface 49 altsetting 232 bulk endpoint 0x2 has invalid maxpacket 1023 [ 704.669969][ T5741] usb 9-1: config 114 interface 49 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 704.669998][ T5741] usb 9-1: config 114 interface 49 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 704.670025][ T5741] usb 9-1: config 114 interface 49 has no altsetting 0 [ 704.673580][ T5741] usb 9-1: New USB device found, idVendor=2c7c, idProduct=030a, bcdDevice=cf.d0 [ 704.673615][ T5741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.673638][ T5741] usb 9-1: Product: syz [ 704.673654][ T5741] usb 9-1: Manufacturer: syz [ 704.673670][ T5741] usb 9-1: SerialNumber: syz [ 704.714802][T13415] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 704.715008][T13415] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 704.815922][ T1248] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 704.870546][T10064] gspca_se401: Wrong descriptor type [ 704.922911][ T1248] usb 10-1: device descriptor read/8, error -71 [ 705.069352][ T823] usb 2-1: USB disconnect, device number 66 [ 705.156806][ T1248] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 705.176262][ T1248] usb 10-1: device descriptor read/8, error -71 [ 705.220835][ T37] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 705.299635][ T1248] usb usb10-port1: unable to enumerate USB device [ 705.464545][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 705.478072][ T37] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 705.478123][ T37] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 705.478146][ T37] usb 4-1: config 32 has no interface number 0 [ 705.478195][ T37] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 705.478224][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.785392][ T37] usb 4-1: string descriptor 0 read error: -71 [ 705.785460][ T37] uvcvideo 4-1:32.64: Found UVC 0.00 device (0bd3:0569) [ 705.785493][ T37] uvcvideo 4-1:32.64: No valid video chain found. [ 705.890717][ T37] usb 4-1: USB disconnect, device number 33 [ 706.181414][T13438] netlink: 393 bytes leftover after parsing attributes in process `syz.1.2096'. [ 706.853865][ T5741] option 9-1:114.49: GSM modem (1-port) converter detected [ 706.885583][ T5741] usb 9-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 706.906345][ T5741] usb 9-1: USB disconnect, device number 5 [ 706.931757][ T5741] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 706.932901][ T5741] option 9-1:114.49: device disconnected [ 707.436600][T13474] i2c i2c-0: delete_device: Can't parse I2C address [ 707.678620][ T38] kauditd_printk_skb: 30 callbacks suppressed [ 707.678640][ T38] audit: type=1800 audit(1786682575.603:4709): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 707.778707][ T823] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 707.910230][ T823] usb 9-1: device descriptor read/64, error -71 [ 707.991040][ T38] audit: type=1800 audit(1786682575.913:4710): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 708.158317][ T823] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 708.309557][T10064] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 708.309763][ T823] usb 9-1: device descriptor read/64, error -71 [ 708.417323][ T823] usb usb9-port1: attempt power cycle [ 708.458885][T10064] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 708.458922][T10064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.514004][T10064] usb 2-1: config 0 descriptor?? [ 708.526939][T13502] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2111'. [ 708.555793][T10064] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 708.575481][ T38] audit: type=1800 audit(1786682576.492:4711): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 708.599341][ T38] audit: type=1800 audit(1786682576.522:4712): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=213313 res=0 errno=0 [ 708.601592][ T38] audit: type=1800 audit(1786682576.522:4713): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=213342 res=0 errno=0 [ 708.602937][ T38] audit: type=1800 audit(1786682576.522:4714): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=213320 res=0 errno=0 [ 708.604092][ T38] audit: type=1800 audit(1786682576.522:4715): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=213321 res=0 errno=0 [ 708.605516][ T38] audit: type=1800 audit(1786682576.522:4716): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=213322 res=0 errno=0 [ 708.742128][ T38] audit: type=1800 audit(1786682576.662:4717): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 708.767333][ T38] audit: type=1800 audit(1786682576.692:4718): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=213362 res=0 errno=0 [ 708.796711][ T823] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 708.809681][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2112'. [ 708.818267][ T823] usb 9-1: device descriptor read/8, error -71 [ 709.093846][T10064] gspca_sunplus: reg_w_riv err -110 [ 709.093952][T10064] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 709.116914][ T823] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 709.152969][ T823] usb 9-1: device descriptor read/8, error -71 [ 709.262540][ T823] usb usb9-port1: unable to enumerate USB device [ 709.287488][ T1248] usb 2-1: USB disconnect, device number 67 [ 710.090301][ T823] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 710.183296][T13537] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 710.230625][ T823] usb 4-1: device descriptor read/64, error -71 [ 710.453147][T13538] kvm: pic: level sensitive irq not supported [ 710.463003][T13538] kvm: pic: non byte read [ 710.465383][T13538] kvm: pic: level sensitive irq not supported [ 710.465451][T13538] kvm: pic: non byte read [ 710.465774][T13538] kvm: pic: level sensitive irq not supported [ 710.465833][T13538] kvm: pic: non byte read [ 710.466257][T13538] kvm: pic: level sensitive irq not supported [ 710.466760][T13538] kvm: pic: non byte read [ 710.467405][T13538] kvm: pic: level sensitive irq not supported [ 710.467463][T13538] kvm: pic: non byte read [ 710.488303][ T823] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 710.671025][ T823] usb 4-1: device descriptor read/64, error -71 [ 710.811994][ T823] usb usb4-port1: attempt power cycle [ 711.276598][ T823] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 711.299166][ T823] usb 4-1: device descriptor read/8, error -71 [ 711.348659][T10064] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 711.354470][T13535] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.518873][T10064] usb 9-1: Using ep0 maxpacket: 8 [ 711.530627][T10064] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 711.547547][T10064] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 711.547643][T10064] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 711.547701][T10064] usb 9-1: Product: syz [ 711.547731][T10064] usb 9-1: Manufacturer: syz [ 711.547747][T10064] usb 9-1: SerialNumber: syz [ 711.549083][ T823] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 711.601246][ T823] usb 4-1: device descriptor read/8, error -71 [ 711.722037][ T823] usb usb4-port1: unable to enumerate USB device [ 711.851763][T10064] usb 9-1: Handspring Visor / Palm OS: No valid connect info available [ 711.851789][T10064] usb 9-1: Handspring Visor / Palm OS: port 143, is for Remote File System use [ 711.851811][T10064] usb 9-1: Handspring Visor / Palm OS: port 223, is for unknown use [ 711.851847][T10064] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 712.175150][T10064] usb 9-1: palm_os_3_probe - error -110 getting bytes available request [ 712.175315][T10064] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 712.276437][T10064] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 712.424682][T10064] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 712.523687][T10064] usb 9-1: USB disconnect, device number 10 [ 712.625986][T10064] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 712.674719][T10064] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 712.675579][T10064] visor 9-1:1.0: device disconnected [ 712.934927][T13535] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.960872][ T823] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 713.144122][ T823] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 713.144158][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.175441][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 713.175459][ T38] audit: type=1800 audit(1786682581.089:4735): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 713.222458][ T38] audit: type=1800 audit(1786682581.139:4736): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=213648 res=0 errno=0 [ 713.223653][ T823] usb 2-1: config 0 descriptor?? [ 713.257517][ T38] audit: type=1800 audit(1786682581.169:4737): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=213677 res=0 errno=0 [ 713.282964][ T823] cp210x 2-1:0.0: cp210x converter detected [ 713.326361][ T38] audit: type=1800 audit(1786682581.229:4738): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=213655 res=0 errno=0 [ 713.326433][ T38] audit: type=1800 audit(1786682581.229:4739): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=213656 res=0 errno=0 [ 713.397037][ T38] audit: type=1800 audit(1786682581.309:4740): pid=7161 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=213657 res=0 errno=0 [ 713.432886][ T38] audit: type=1800 audit(1786682581.349:4741): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=213697 res=0 errno=0 [ 713.435479][ T823] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 713.435502][ T823] cp210x 2-1:0.0: querying part number failed [ 713.473638][ T38] audit: type=1800 audit(1786682581.389:4742): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=213713 res=0 errno=0 [ 713.485209][ T823] usb 2-1: cp210x converter now attached to ttyUSB0 [ 713.526669][ T38] audit: type=1800 audit(1786682581.439:4743): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=213727 res=0 errno=0 [ 713.566977][ T38] audit: type=1800 audit(1786682581.479:4744): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=213698 res=0 errno=0 [ 714.025137][T13583] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 714.113744][T13535] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.775079][T13587] usb3503 0-0008: unknown mode is requested [ 714.775103][T13587] usb3503 0-0008: usb3503_probe: probed in standby mode [ 714.948852][T13587] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 715.055370][T13535] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.638906][ T1248] usb 2-1: USB disconnect, device number 68 [ 715.667349][ T1248] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 715.697783][ T1248] cp210x 2-1:0.0: device disconnected [ 715.756700][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 715.934142][ T9] usb 4-1: config 2 has an invalid interface number: 142 but max is 0 [ 715.934173][ T9] usb 4-1: config 2 has no interface number 0 [ 715.934206][ T9] usb 4-1: config 2 interface 142 has no altsetting 0 [ 715.950804][ T9] usb 4-1: New USB device found, idVendor=257a, idProduct=262f, bcdDevice=4c.2f [ 715.950840][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.950862][ T9] usb 4-1: Product: syz [ 715.950879][ T9] usb 4-1: Manufacturer: syz [ 715.950895][ T9] usb 4-1: SerialNumber: syz [ 716.469992][T11039] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.484888][ T9] usb 4-1: USB disconnect, device number 38 [ 716.823167][T11033] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.871287][T11033] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.910779][T11033] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.000391][T13620] Invalid ELF header magic: != ELF [ 717.001248][T13620] Invalid ELF header magic: != ELF [ 717.372529][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 717.524071][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 717.526622][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 717.526659][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 717.526683][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 717.526709][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 717.526751][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 717.526774][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.629847][ T9] usb 10-1: config 0 descriptor?? [ 717.630525][T13623] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 718.014845][T13642] binder: 13641:13642 ioctl c0306201 200000004a40 returned -14 [ 718.032901][ T823] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 718.143921][T13646] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2148'. [ 718.144931][T13646] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2148'. [ 718.194808][ T823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.197806][ T823] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 718.197837][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.197858][ T823] usb 4-1: Product: syz [ 718.197874][ T823] usb 4-1: Manufacturer: syz [ 718.197889][ T823] usb 4-1: SerialNumber: syz [ 718.236038][ T823] usb 4-1: config 0 descriptor?? [ 718.290585][ T823] CoreChips 4-1:0.0: probe with driver CoreChips failed with error -22 [ 718.297087][T10064] usb 10-1: USB disconnect, device number 11 [ 718.298279][ T38] kauditd_printk_skb: 34 callbacks suppressed [ 718.298296][ T38] audit: type=1800 audit(1786682586.206:4779): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=214491 res=0 errno=0 [ 718.338946][ T38] audit: type=1800 audit(1786682586.246:4780): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=214523 res=0 errno=0 [ 718.340055][ T38] audit: type=1800 audit(1786682586.246:4781): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=214498 res=0 errno=0 [ 718.378538][ T38] audit: type=1800 audit(1786682586.286:4782): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=214499 res=0 errno=0 [ 718.404579][ T38] audit: type=1800 audit(1786682586.316:4783): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=214520 res=0 errno=0 [ 718.434996][ T38] audit: type=1800 audit(1786682586.346:4784): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=214521 res=0 errno=0 [ 718.435767][ T38] audit: type=1800 audit(1786682586.346:4785): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=214500 res=0 errno=0 [ 718.482132][ T38] audit: type=1800 audit(1786682586.376:4786): pid=5778 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=214522 res=0 errno=0 [ 718.523075][ T823] usb 4-1: USB disconnect, device number 39 [ 718.571911][T13651] binder: 13650:13651 ioctl 8933 200000000280 returned -22 [ 718.586937][ T38] audit: type=1800 audit(1786682586.496:4787): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 718.698628][ T38] audit: type=1800 audit(1786682586.615:4788): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 719.118064][T13658] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2153'. [ 719.267639][T13668] CUSE: info not properly terminated [ 719.581237][T13673] dvmrp8: entered allmulticast mode [ 719.857141][ T1248] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 719.962906][ T60] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 719.976016][ T823] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 720.029335][ T1248] usb 2-1: device descriptor read/64, error -71 [ 720.264510][ T1248] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 720.344680][ T823] usb 9-1: Using ep0 maxpacket: 8 [ 720.347470][ T823] usb 9-1: too many endpoints for config 1 interface 1 altsetting 33: 141, using maximum allowed: 30 [ 720.347519][ T823] usb 9-1: config 1 interface 1 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 141 [ 720.347550][ T823] usb 9-1: too many endpoints for config 1 interface 1 altsetting 1: 250, using maximum allowed: 30 [ 720.347593][ T823] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 720.347636][ T823] usb 9-1: config 1 interface 1 has no altsetting 0 [ 720.350042][ T823] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 720.350075][ T823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.350098][ T823] usb 9-1: Product: syz [ 720.350114][ T823] usb 9-1: Manufacturer: syz [ 720.350132][ T823] usb 9-1: SerialNumber: syz [ 720.445097][ T1248] usb 2-1: device descriptor read/64, error -71 [ 720.559301][ T1248] usb usb2-port1: attempt power cycle [ 720.925825][ T823] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 720.952892][ T823] usb 9-1: USB disconnect, device number 11 [ 721.004821][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 721.005044][ T1248] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 721.024806][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 721.025738][ T1248] usb 2-1: device descriptor read/8, error -71 [ 721.154852][ T10] usb 4-1: device descriptor read/64, error -71 [ 721.156001][ T9] usb 10-1: too many configurations: 40, using maximum allowed: 8 [ 721.157651][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 721.157692][ T9] usb 10-1: can't read configurations, error -61 [ 721.265577][ T1248] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 721.297984][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 721.299990][ T1248] usb 2-1: device descriptor read/8, error -71 [ 721.395235][ T10] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 721.405413][ T1248] usb usb2-port1: unable to enumerate USB device [ 721.465738][ T9] usb 10-1: too many configurations: 40, using maximum allowed: 8 [ 721.475022][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 721.475062][ T9] usb 10-1: can't read configurations, error -61 [ 721.475468][ T9] usb usb10-port1: attempt power cycle [ 721.525059][ T10] usb 4-1: device descriptor read/64, error -71 [ 721.641680][ T10] usb usb4-port1: attempt power cycle [ 721.815286][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 721.839173][ T9] usb 10-1: too many configurations: 40, using maximum allowed: 8 [ 721.840912][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 721.840949][ T9] usb 10-1: can't read configurations, error -61 [ 721.966199][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 721.987216][ T10] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 721.988542][ T9] usb 10-1: too many configurations: 40, using maximum allowed: 8 [ 721.990206][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 721.990241][ T9] usb 10-1: can't read configurations, error -61 [ 721.990601][ T9] usb usb10-port1: unable to enumerate USB device [ 722.018655][ T10] usb 4-1: device descriptor read/8, error -71 [ 722.260127][ T10] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 722.277442][ T10] usb 4-1: device descriptor read/8, error -71 [ 722.386095][ T10] usb usb4-port1: unable to enumerate USB device [ 722.535720][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 722.690208][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.692453][ T9] usb 9-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 722.692478][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.692494][ T9] usb 9-1: Product: syz [ 722.692505][ T9] usb 9-1: Manufacturer: syz [ 722.692516][ T9] usb 9-1: SerialNumber: syz [ 722.775335][ T9] usb 9-1: config 0 descriptor?? [ 722.792141][ T9] redrat3 9-1:0.0: Couldn't find all endpoints [ 723.046564][ T823] usb 9-1: USB disconnect, device number 12 [ 723.308683][T13714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.309337][T13714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.649705][ T38] kauditd_printk_skb: 31 callbacks suppressed [ 723.649725][ T38] audit: type=1800 audit(1786682591.562:4820): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 723.701311][ T38] audit: type=1800 audit(1786682591.612:4821): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 723.786574][ T38] audit: type=1800 audit(1786682591.692:4822): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 723.870940][ T38] audit: type=1800 audit(1786682591.782:4823): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=215072 res=0 errno=0 [ 723.969121][ T38] audit: type=1800 audit(1786682591.872:4824): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 723.972548][ T38] audit: type=1800 audit(1786682591.882:4825): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=215087 res=0 errno=0 [ 724.064991][ T38] audit: type=1800 audit(1786682591.952:4826): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 724.286439][ T38] audit: type=1800 audit(1786682592.192:4827): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 724.444528][ T38] audit: type=1800 audit(1786682592.342:4828): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15899 res=0 errno=0 [ 724.552130][ T38] audit: type=1800 audit(1786682592.462:4829): pid=4958 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 725.089430][T13758] netlink: 140 bytes leftover after parsing attributes in process `syz.9.2192'. [ 725.394560][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 725.396028][T13765] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2194'. [ 725.396052][T13765] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2194'. [ 725.426923][T13765] C: renamed from veth1_to_team (while UP) [ 725.492836][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 725.514613][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 725.553318][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 725.554164][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 725.620223][T13765] netlink: 'syz.1.2194': attribute type 4 has an invalid length. [ 725.620245][T13765] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2194'. [ 725.620260][T13765] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 725.620348][T13766] netlink: 'syz.1.2194': attribute type 4 has an invalid length. [ 725.620362][T13766] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2194'. [ 725.620374][T13766] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 725.767881][ T39] INFO: task syz.5.1732:11748 blocked for more than 143 seconds. [ 725.767912][ T39] Tainted: G L syzkaller #0 [ 725.767924][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.767932][ T39] task:syz.5.1732 state:D stack:28112 pid:11748 tgid:11729 ppid:8510 task_flags:0x400040 flags:0x00080002 [ 725.767994][ T39] Call Trace: [ 725.768001][ T39] [ 725.768014][ T39] __schedule+0x1709/0x5530 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 725.768051][ T39] ? __lock_acquire+0x6df/0x2e40 [ 725.768093][ T39] ? __pfx___schedule+0x10/0x10 [ 725.768120][ T39] ? lock_acquire+0x115/0x350 [ 725.768159][ T39] ? schedule+0x90/0x2b0 [ 725.768191][ T39] schedule+0x164/0x2b0 [ 725.768232][ T39] cgroup_lock_and_drain_offline+0x51a/0x650 [ 725.768276][ T39] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 725.768307][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 725.768350][ T39] cgroup_kn_lock_live+0x120/0x230 [ 725.768384][ T39] cgroup_subtree_control_write+0x4b5/0x1080 [ 725.768417][ T39] ? lock_acquire+0x115/0x350 [ 725.768453][ T39] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 725.768481][ T39] ? kernfs_root+0x1c/0x230 [ 725.768499][ T39] ? kernfs_root+0x1c/0x230 [ 725.768519][ T39] ? kernfs_root+0x1ea/0x230 [ 725.768539][ T39] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 725.768567][ T39] cgroup_file_write+0x331/0x8f0 [ 725.768599][ T39] ? __pfx_cgroup_file_write+0x10/0x10 [ 725.768625][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 725.768645][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 725.768671][ T39] ? __pfx_cgroup_file_write+0x10/0x10 [ 725.768695][ T39] kernfs_fop_write_iter+0x3a5/0x540 [ 725.768731][ T39] vfs_write+0x61e/0xbb0 [ 725.768761][ T39] ? __pfx_vfs_write+0x10/0x10 [ 725.768793][ T39] ? mutex_lock_nested+0x168/0x1d0 [ 725.768816][ T39] ? __fget_files+0x2a/0x420 [ 725.768845][ T39] ksys_write+0x156/0x270 [ 725.768870][ T39] ? __pfx_ksys_write+0x10/0x10 [ 725.768890][ T39] ? __pfx_kcov_ioctl+0x10/0x10 [ 725.768928][ T39] do_syscall_64+0x17b/0x530 [ 725.768951][ T39] ? irqentry_exit+0x10f/0x8f0 [ 725.768971][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.768995][ T39] ? clear_bhb_loop+0x40/0x90 [ 725.769039][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.769058][ T39] RIP: 0033:0x7fb31a93e019 [ 725.769075][ T39] RSP: 002b:00007fb318731028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 725.769094][ T39] RAX: ffffffffffffffda RBX: 00007fb31abc6270 RCX: 00007fb31a93e019 [ 725.796152][ T39] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 000000000000000b [ 725.796172][ T39] RBP: 00007fb31a9d500c R08: 0000000000000000 R09: 0000000000000000 [ 725.796187][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.796200][ T39] R13: 00007fb31abc6308 R14: 00007fb31abc6270 R15: 00007ffd7fdf5478 [ 725.796244][ T39] [ 725.796300][ T39] [ 725.796300][ T39] Showing all locks held in the system: [ 725.796334][ T39] locks held by kworker/0:1/10: 3, last CPU#0: [ 725.796468][ T39] #0: ffff88813fe62538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 725.796605][ T39] #1: ffffc900000f7c60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 725.796649][ T39] #2: ffffffff8ef03ad8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 725.796707][ T39] locks held by pr/legacy/17: 4, last CPU#0: [ 725.796722][ T39] #0: ffffffff8e3b5a40 (console_lock){+.+.}-{0:0}, at: leg[ 725.796722][ T39] #0: ffffffff8e3b5a40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 725.796780][ T39] #1: ffffffff8e29d338 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 725.796836][ T39] #2: ffffffff9a078558 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x17c/0x1b40 [ 725.796880][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 725.796930][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 725.796944][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 725.796992][ T39] locks held by kworker/u9:0/60: 14, last CPU#1: [ 725.797005][ T39] #0: ffff888060559138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 725.797054][ T39] #1: ffffc9000126fc60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 725.797107][ T39] #2: ffff888061e2c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 725.797161][ T39] #3: ffffffff8fb6d938 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 725.797223][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 725.797274][ T39] #5: ffff88803421e618 (&si->socket.wq.wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1f0 [ 725.797334][ T39] #6: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 725.797387][ T39] #7: ffff888037afb208 (&ep->lock){+.+.}-{3:3}, at: ep_poll_callback+0x79/0x7e0 [ 725.797435][ T39] #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 725.797480][ T39] #9: ffff888037afb0d8 (&ep->wq){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1f0 [ 725.797529][ T39] #10: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 725.797577][ T39] #11: ffff8880b873b8e0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 725.797623][ T39] #12: ffff8880b8728458 (hrtimer_bases.lock){-...}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3f0 [ 726.001560][ T39] #13: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_change+0xc9/0x320 [ 726.001752][ T39] locks held by kworker/u8:10/1175: 6, last CPU#1: [ 726.001798][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.001949][ T39] #1: ffffc9000590fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.002076][ T39] #2: ffff88805d3f4310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 726.002292][ T39] #3: ffff88804f443d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 726.002476][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 726.002679][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 726.041261][ T39] locks held by getty/5345: 2, on CPU#0: [ 726.041327][ T39] #0: ffff88823bf920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 726.041570][ T39] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 726.041730][ T39] locks held by syz-executor/5579: 5, last CPU#1: [ 726.041774][ T39] #0: ffff888035898430 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 726.041952][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 726.042131][ T39] #2: ffff888025560ad8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 726.042286][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 726.042403][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x500 [ 726.042586][ T39] locks held by kworker/u9:5/5606: 4, on CPU#0: [ 726.042631][ T39] #0: ffff88802b3b1138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.042778][ T39] #1: ffffc9000511fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.042937][ T39] #2: ffff888061e2cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 726.043115][ T39] #3: ffff888061e2c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_update_scan_sync+0x211/0x4f0 [ 726.043278][ T39] locks held by udevd/5778: 3, last CPU#0: [ 726.043321][ T39] #0: ffff88803c2e6458 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7e0/0x1c20 [ 726.043527][ T39] #1: ffffffff8e41a4b8 (kauditd_wait.lock){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1f0 [ 726.043700][ T39] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 726.043872][ T39] locks held by syz.3.826/8444: 2, last CPU#1: [ 726.043923][ T39] #0: ffff88802b1ac0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 726.044085][ T39] #1: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 726.044262][ T39] locks held by kworker/u8:25/9589: 6, last CPU#0: [ 726.044306][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.044452][ T39] #1: ffffc90007797c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.044602][ T39] #2: ffff888038b44310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 726.044802][ T39] #3: ffff88805d305d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 726.045004][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 726.045163][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 726.045306][ T39] locks held by kworker/u8:32/10116: 6, last CPU#0: [ 726.045358][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.045496][ T39] #1: ffffc9001099fc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.045639][ T39] #2: ffff8880777408d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 726.045769][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 726.045823][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 726.045896][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 726.046046][ T39] locks held by kworker/u8:50/10803: 6, last CPU#0: [ 726.046105][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.046252][ T39] #1: ffffc90020f2fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.046406][ T39] #2: ffff88803d074310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 726.046593][ T39] #3: ffff88804f56e920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 726.046764][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 726.046935][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 726.047075][ T39] locks held by kworker/u8:52/11033: 5, last CPU#1: [ 726.047125][ T39] #0: ffff888033086138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.047269][ T39] #1: ffffc900211b7c60 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.047367][ T39] #2: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 726.047487][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 726.047650][ T39] #4: ffff88805b367ad8 (&hash->list_locks[i]){+...}-{3:3}, at: __batadv_dat_purge+0x131/0x400 [ 726.189678][ T39] locks held by kworker/u8:63/11045: 1, last CPU#1: [ 726.189736][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x7fd/0x1480 [ 726.189912][ T39] locks held by kworker/u8:65/11047: 6, last CPU#0: [ 726.189955][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.190102][ T39] #1: ffffc900216cfc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 726.190286][ T39] #2: ffff888078d208d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 726.190436][ T39] #3: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 726.190584][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 726.190730][ T39] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 726.190901][ T39] locks held by syz.5.1732/11748: 3, on CPU#0: [ 726.190943][ T39] #0: ffff88803bc89528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 726.191092][ T39] #1: ffff888036a6c510 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 726.209756][ T39] #2: ffff8880278c7078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 726.209978][ T39] locks held by syz.9.2192/13756: 5, last CPU#0: [ 726.210024][ T39] #0: ffff88803f3e6d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 726.210173][ T39] #1: ffff88804036a510 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 726.210335][ T39] #2: ffff8880783ffb90 (&sb->s_type->i_mutex_key#14){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 726.210536][ T39] #3: ffff8880404aacb0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 726.210712][ T39] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: mt_find+0x186/0x630 [ 726.210803][ T39] locks held by syz.9.2192/13758: 1, last CPU#1: [ 726.210846][ T39] #0: ffff8880317d33d8 (&sig->exec_update_lock){++++}-{4:4}, at: landlock_restrict_sibling_threads+0x24b/0x1240 [ 726.211025][ T39] locks held by syz.8.2193/13762: 4, last CPU#0: [ 726.211068][ T39] #0: ffff8880339e11b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 726.231476][ T39] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 726.231686][ T39] #2: ffff88803f18f658 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 726.231861][ T39] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 726.232041][ T39] locks held by syz-executor/13763: 3, last CPU#0: [ 726.232085][ T39] #0: ffff88803474c510 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 726.232244][ T39] #1: ffff8880b8640358 ((&pcs->lock)){+.+.}-{3:3}, at: __kvmalloc_node_noprof+0x366/0x880 [ 726.232409][ T39] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 726.232570][ T39] locks held by syz.1.2194/13764: 3, on CPU#1: [ 726.232613][ T39] #0: ffff88803ce867f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 726.232781][ T39] #1: ffffffff8f833b60 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 726.245972][ T39] #2: ffff88803625c4c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x148/0xe60 [ 726.246142][ T39] [ 726.246155][ T39] ============================================= [ 726.246155][ T39] [ 726.246283][ T39] NMI backtrace for cpu 1 [ 726.246338][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 726.246431][ T39] Tainted: [L]=SOFTLOCKUP [ 726.246467][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.246512][ T39] Call Trace: [ 726.246542][ T39] [ 726.246573][ T39] dump_stack_lvl+0xe8/0x150 [ 726.246660][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 726.246747][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 726.246844][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 726.246939][ T39] sys_info+0x135/0x170 [ 726.247007][ T39] watchdog+0xfd7/0x1030 [ 726.247123][ T39] ? watchdog+0x1c7/0x1030 [ 726.247232][ T39] kthread+0x388/0x470 [ 726.247321][ T39] ? __pfx_watchdog+0x10/0x10 [ 726.247401][ T39] ? __pfx_kthread+0x10/0x10 [ 726.247486][ T39] ret_from_fork+0x514/0xb70 [ 726.247573][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 726.247657][ T39] ? __switch_to+0xc89/0x1420 [ 726.247734][ T39] ? __pfx_kthread+0x10/0x10 [ 726.247821][ T39] ret_from_fork_asm+0x1a/0x30 [ 726.247944][ T39] [ 726.248000][ T39] Sending NMI from CPU 1 to CPUs 0: [ 726.248034][ C0] NMI backtrace for cpu 0 [ 726.248057][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 726.248084][ C0] Tainted: [L]=SOFTLOCKUP [ 726.248092][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.248103][ C0] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 726.248129][ C0] Code: 20 d0 cb 8b 48 c7 c6 60 d0 cb 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 d7 9e 72 07 65 8b 0d cc 9e 72 07 f7 c1 ff [ 726.248145][ C0] RSP: 0018:ffffc900001579d0 EFLAGS: 00000087 [ 726.248162][ C0] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff99cc2503 [ 726.248175][ C0] RDX: 0000000000000001 RSI: ffffffff8bcbd060 RDI: ffffffff8bcbd020 [ 726.248189][ C0] RBP: ffffc90000157b30 R08: ffff8880b862625f R09: 1ffff110170c4c4b [ 726.248204][ C0] R10: dffffc0000000000 R11: ffffed10170c4c4c R12: 1ffff9200002af59 [ 726.248219][ C0] R13: ffffffff8b527b0a R14: ffff8880b8626220 R15: ffffc90000157ac0 [ 726.248234][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 726.248251][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.248264][ C0] CR2: 00007fa8b967feec CR3: 000000003460e000 CR4: 00000000003526f0 [ 726.248288][ C0] Call Trace: [ 726.248296][ C0] [ 726.248303][ C0] rcu_is_watching+0x15/0xb0 [ 726.248327][ C0] lock_release+0x4b/0x3c0 [ 726.248345][ C0] ? rcu_is_watching+0x15/0xb0 [ 726.248369][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 726.248388][ C0] rt_spin_lock+0x17a/0x400 [ 726.248416][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 726.248442][ C0] ? rcu_is_watching+0x15/0xb0 [ 726.248466][ C0] __run_timer_base+0x11a/0x9b0 [ 726.248492][ C0] ? sched_clock_cpu+0x74/0x440 [ 726.248512][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 726.248533][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 726.248553][ C0] ? lock_acquire+0x115/0x350 [ 726.248588][ C0] run_timer_softirq+0xb7/0x170 [ 726.248608][ C0] handle_softirqs+0x1d9/0x6c0 [ 726.248634][ C0] run_ktimerd+0x69/0x100 [ 726.248656][ C0] smpboot_thread_fn+0x57c/0xa80 [ 726.248681][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 726.248707][ C0] kthread+0x388/0x470 [ 726.248733][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 726.248754][ C0] ? __pfx_kthread+0x10/0x10 [ 726.248781][ C0] ret_from_fork+0x514/0xb70 [ 726.248809][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 726.248835][ C0] ? __switch_to+0xc89/0x1420 [ 726.248859][ C0] ? __pfx_kthread+0x10/0x10 [ 726.248885][ C0] ret_from_fork_asm+0x1a/0x30 [ 726.248921][ C0] [ 726.261596][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 726.261671][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 726.261758][ T39] Tainted: [L]=SOFTLOCKUP [ 726.261789][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.261831][ T39] Call Trace: [ 726.261855][ T39] [ 726.261886][ T39] vpanic+0x56c/0xa60 [ 726.261963][ T39] ? __pfx___schedule+0x10/0x10 [ 726.262062][ T39] ? __pfx_vpanic+0x10/0x10 [ 726.262151][ T39] panic+0xc5/0xd0 [ 726.262206][ T39] ? __pfx_panic+0x10/0x10 [ 726.262262][ T39] ? preempt_schedule_common+0x82/0xd0 [ 726.262383][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 726.262463][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 726.262559][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 726.262649][ T39] watchdog+0x1030/0x1030 [ 726.262766][ T39] ? watchdog+0x1c7/0x1030 [ 726.262874][ T39] kthread+0x388/0x470 [ 726.262959][ T39] ? __pfx_watchdog+0x10/0x10 [ 726.263054][ T39] ? __pfx_kthread+0x10/0x10 [ 726.263140][ T39] ret_from_fork+0x514/0xb70 [ 726.263229][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 726.263312][ T39] ? __switch_to+0xc89/0x1420 [ 726.263396][ T39] ? __pfx_kthread+0x10/0x10 [ 726.263475][ T39] ret_from_fork_asm+0x1a/0x30 [ 726.263596][ T39] [ 726.264230][ T39] Kernel Offset: disabled