last executing test programs: 5m46.855901653s ago: executing program 1 (id=238): syz_io_uring_setup(0x4aec, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000080c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0xc19, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2f, 0x0, 0x0, 0x1}}}], 0x18}}], 0x2, 0x4000080) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x56b1fc1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x7ffd) write$ppp(r1, &(0x7f0000000500)="3aebd037495fc3c52f1c60074cd33eb953cc3365788ee0265743abbb1d3c", 0xffffff16) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, 0x0, 0x0) 5m45.524013526s ago: executing program 1 (id=243): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') 5m45.446820664s ago: executing program 1 (id=244): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40012163, 0x0) 5m45.34055391s ago: executing program 1 (id=245): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="a5ea1cbeef", 0x5}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5m45.111963758s ago: executing program 1 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 5m44.703093712s ago: executing program 1 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe008004000080060021"], 0x28}, 0x1, 0x0, 0x0, 0x4008894}, 0x24000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x420401, 0x102) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x48a, 0x4) sendmmsg(r3, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x24004810) 5m44.297577462s ago: executing program 32 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe008004000080060021"], 0x28}, 0x1, 0x0, 0x0, 0x4008894}, 0x24000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x420401, 0x102) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x48a, 0x4) sendmmsg(r3, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x24004810) 4m0.596166753s ago: executing program 2 (id=769): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4m0.529123732s ago: executing program 2 (id=770): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c02000002000000", @ANYRES32=r4], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40012163, 0x0) 4m0.203915093s ago: executing program 2 (id=771): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04"], 0x7) 3m59.662679687s ago: executing program 2 (id=772): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m59.115609915s ago: executing program 2 (id=773): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[], 0xb) 3m57.835942802s ago: executing program 2 (id=781): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m57.533978774s ago: executing program 33 (id=781): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m25.971385625s ago: executing program 4 (id=1497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1m25.893185611s ago: executing program 4 (id=1498): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0xcd, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0x3, 0xd0, 0x91, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "2b4641af"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x1000, 0x6}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x9, [0x6]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xd0, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x4f, 0x40, 0x2}, @mdlm_detail={0x58, 0x24, 0x13, 0x1f, "bf6471efb62f66048cdb6eda918bdc84e8ead28fc6b7729890b9c45e1926d550194c2baa62802ea6d7cc362bcd1e4db893b34b74215b9b5db5aea77b7966f4755763c46a1b3a3fd6c0fa1497edeed1cc7ba8c14c"}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0xa0}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x26, 0x3, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x8, 0xd, 0x9a, 0x40, 0x4}, 0xcf, &(0x7f0000000240)={0x5, 0xf, 0xcf, 0x1, [@generic={0xca, 0x10, 0xa, "3335075835a029bc5ba076da9f0b7a93ab3b3e14f5a6cd5f41b1918126dc32f0268149ea1dc1b6bc826170d018c08c05c7eda3bc77464a031836b0861a47f3657c81e89ea52b74dff771473880959875bd7acc41d461e9f4b8ccbfd3d425315b7bbcfdc5d19544426a1ed58b01ec0e1169cd984c70b9b9b78f42fce389e6c919e4f5cb08d20b327f48dcd3c74d673a40f8b0c2432a5ed948f3ec5d314205c36b5567b7e01601aee690544a5c49268b07016702924524d595f67c960cbeccc0beacd28c9398d550"}]}, 0x1, [{0xc8, &(0x7f0000000340)=@string={0xc8, 0x3, "e779a8641454d182f9f6f531128b71a08603f6810f26fd401a137f055d67212833e105b2759df4dc2f8108bc3d34132804591886f94f144b2f1a3b47d69096dff04b281873b3f1956a9ba77887e6b7898d506af2aefa78d457aa0acb6e126b9c301a3a314aaf48959ab9ef9abb89d9871c0a9624540f3492759db3ec3887d41f969d51ced79693687313435e6a586dfc3d26e8600b007e6820c99230b967d9a3fd982868674dd8122e0ed3810e68ef78ff38bd3dd55458b1e2a870e6f64789bff7c05aa4c079"}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000005c0)={r2, 0x1, 0x6, @broadcast}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04062d20"], 0x7) 1m24.519840407s ago: executing program 4 (id=1508): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x0, 0x200, 0x800}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x1094) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000100)="3b000100010000", 0x7) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_proto_private(r3, 0x89e0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x20008000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000002c0)="7028a07fd29ba17abcfde9ed017e340fc36b8ec845274823088b20a32e78fce666c54e7d42156d7d19dc65da65c5cd7f28f1c4b82eba51baf7ba3befb24e479be2a0d1dea553ac44d38569a5a4a139eadba452a6cbe73a79317072bb1549a028d23868182687d98be451a75d27e2ace47de6a4203af1c12a393644316c15f8be583b8eb54a5d1607f0a4ecce14c9ed4721d79a5d194b1184541b60eed54d91786ea82c77751fe7bca1b153c8ee4a39b0", 0xb0) 1m23.583533469s ago: executing program 4 (id=1516): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x2}, 0x18, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40002062, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x4, 0x2a40}) mmap(&(0x7f0000499000/0x7000)=nil, 0x7000, 0x1000006, 0x28011, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) landlock_restrict_self(r0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) 1m23.239485441s ago: executing program 4 (id=1518): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') socket$can_j1939(0x1d, 0x2, 0x7) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m22.858981107s ago: executing program 4 (id=1522): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c934000) 1m22.373201817s ago: executing program 34 (id=1522): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c934000) 1m0.603608211s ago: executing program 5 (id=1618): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fcntl$addseals(r1, 0x409, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x3000}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) ioctl$sock_inet_SIOCSARP(r6, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x8, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) 59.535802848s ago: executing program 5 (id=1621): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280), &(0x7f0000000380)=0x8) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 59.276903367s ago: executing program 5 (id=1622): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 58.193483195s ago: executing program 5 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$fuse(0x600, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 57.787943949s ago: executing program 5 (id=1625): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) getsockname$qrtr(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) 57.105489308s ago: executing program 5 (id=1628): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 56.723937824s ago: executing program 35 (id=1628): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 55.028057265s ago: executing program 3 (id=1654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 54.526200169s ago: executing program 3 (id=1659): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 53.425189778s ago: executing program 3 (id=1663): munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) r2 = getpid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_pidfd_open(r2, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058ff0b, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x6, 0x18e65, 0x35aef3}) 53.243874342s ago: executing program 3 (id=1665): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x7, 0x7, 0x2}}) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d80)={'syz1\x00', {0x9, 0x0, 0x6, 0x1}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x3, 0xffffffff, 0xfffffffd, 0xffff, 0x2, 0x20, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x7fc, 0x0, 0xfffffffc, 0xe, 0x1, 0x2, 0x3, 0x800ec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x6ed8ec1a, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x100, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x80000, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7fff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x2e270, 0xfffe, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x9, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x401, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x82ce, 0xe, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x7, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x2000003, 0x40, 0x0, 0x80, 0x0, 0x8, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x7, 0x0, 0x0, 0x4, 0x8000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x7, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0xc) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000980)=ANY=[@ANYBLOB='-p'], 0x1f) r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r6, 0x8917, 0x0) setpgid(r5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="9da207", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r7, 0x0, 0x0) setpgid(0x0, r5) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 52.372065138s ago: executing program 3 (id=1667): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) io_setup(0x20, &(0x7f0000001140)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = eventfd(0x2009) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x72, r1, &(0x7f0000000100)="8397751e51ada111fc17d25fc920a1c5a043073546c21c467849406a2379ba8db84ac219f348f4f3e9f3b838a6ead03e526c270a883c7ab4edb5c3815fdd2669e5b6cd8fad2f79c61b07", 0x4a, 0x100, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x80, r1, &(0x7f0000000280)="0e6dc73e2471567af3f27d09bf7bb19bd1acb4dc2487c9e1d6794e79e172f4af2f028a742c1eef13b8e88674aaec44180c45eff625d105eedcca24f927dd56050591c4334007feb94a6f91e4976cdb7c4c7ed44803afe3515ff822e452e38bd7108c40333f56a200faddf1becf505d1d30939bd4a1d89812b943795e928ed51b39197335f7123eab6fba60d4a9bf9a6a323c7701bf17b3c30bc182250881f9f903c1fd0177d0f1dd1c8a86dd4df655b05aae3eca35ce786b3b9017898ce3c3a3bbda343a9d66b69e444883aeba814f2cd6ef9d63a8fceeaede5878fc423fe2c980", 0xe1, 0x8000000000000001, 0x0, 0x3, r2}]) chdir(&(0x7f0000000080)='./file1\x00') r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000000)={0x8, {{0xa, 0x4e24, 0xc86, @mcast2, 0x79}}}, 0x90) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000240)='./bus\x00', 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 49.845522488s ago: executing program 3 (id=1669): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x0, 0x200, 0x800}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="3b000100010000", 0x7) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_proto_private(r3, 0x89e0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x20008000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000002c0)="7028a07fd29ba17abcfde9ed017e340fc36b8ec845274823088b20a32e78fce666c54e7d42156d7d19dc65da65c5cd7f28f1c4b82eba51baf7ba3befb24e479be2a0d1dea553ac44d38569a5a4a139eadba452a6cbe73a79317072bb1549a028d23868182687d98be451a75d27e2ace47de6a4203af1c12a393644316c15f8be583b8eb54a5d1607f0a4ecce14c9ed4721d79a5d194b1184541b60eed54d91786ea82c77751fe7bca1b153c8ee4a39b0", 0xb0) 48.710596942s ago: executing program 36 (id=1669): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x0, 0x200, 0x800}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="3b000100010000", 0x7) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_proto_private(r3, 0x89e0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x20008000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000002c0)="7028a07fd29ba17abcfde9ed017e340fc36b8ec845274823088b20a32e78fce666c54e7d42156d7d19dc65da65c5cd7f28f1c4b82eba51baf7ba3befb24e479be2a0d1dea553ac44d38569a5a4a139eadba452a6cbe73a79317072bb1549a028d23868182687d98be451a75d27e2ace47de6a4203af1c12a393644316c15f8be583b8eb54a5d1607f0a4ecce14c9ed4721d79a5d194b1184541b60eed54d91786ea82c77751fe7bca1b153c8ee4a39b0", 0xb0) 28.661879209s ago: executing program 7 (id=1738): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf251200000008001500c0000000080001006b"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x2c819) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) r3 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000002c0)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 28.255936104s ago: executing program 7 (id=1739): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x52) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f4159555681422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, 0x0, &(0x7f00000004c0)=0x18) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 27.30807439s ago: executing program 7 (id=1743): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fcntl$addseals(r1, 0x409, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) ioctl$sock_inet_SIOCSARP(r6, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x8, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) 24.00581011s ago: executing program 7 (id=1756): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x6, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}]}}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x40030000000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_fuse_handle_req(r2, &(0x7f0000000cc0)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x3c}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82400, 0x85) 23.077899907s ago: executing program 7 (id=1758): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000440), 0x2000000}) 22.733180347s ago: executing program 7 (id=1760): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x8, 0xfffffffe, 0x4, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x67, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0xc, [{@local, 0x70}, {@broadcast, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x1, 0x0, 0x3, {{0x17, 0x4, 0x2, 0x2e, 0x5c, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @local, {[@timestamp={0x44, 0x1c, 0xf7, 0x0, 0x0, [0x3, 0x6, 0x3, 0x3ff, 0x8, 0x6634c274]}, @rr={0x7, 0x2b, 0x8d, [@local, @multicast1, @multicast2, @empty, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010102, @loopback, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000200)={0x514, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "8cc4c871017d3af900f7cb9da6a8cbdfcbd95548c19c7b1193fb7b3ca00fd9a9ad777330f5d76ae6d53c9798e9e73352e58a1adb9ddab355"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa0}]}, @ETHTOOL_A_WOL_SOPASS={0xb0, 0x3, "a6ba46bcc70dae5bb343a0332be802d469b932b16622404bc4e6384815f2c3d04c9bf0a4a09057651e7c0c9ceb349c07dd858157be1512bdc1a61badf38a94938ab0f9fb8320ad8f0dc36f945f2bc52720ae8797514a7884d8263a328f5a1f8417163c35ea3f20b79f04a1c34e9d922ed33759ef58781ca999049117b51474fd26bda363f36610d5bb50286b4cbdf80e4f982b659338b9e50f6318afc3773c03e2f21c647d0408368d42eba4"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_MODES={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x52, 0x4, "736aa250ff77111a7591817d5ee2b19c05b5c035aee9d949e8a25d24985d7cb462c279d58e842ba22cf02da624d81fa48f3c49bffdd3e0c9d9f60db24683f023ba99b411198f2e614c03d8d4f765"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&&])\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']]W-:E.,}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\x11+\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x88, 0x5, "1ce631ee3bab73a9c088011c44b92798529a2116d6c8f80b2ba630ddbaa1fa0a661880d3536e8a9762407e73436729c2d489248e8c122bf9837ffce3072e5aa0f3b47cb1133361e8c51fac4940fe12138f609f746188674ee1779a17f191807d5f1bbcf510947d76b864e61fd59afc3c963cb4606791d78d1bf6f3f620020016744a47aa"}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0xb0, 0x3, "c233d7a69030e5c32abf70f6ed06ce2635b8fbaf498afa2707f24596b721839e0f81db444022c6d354661a683235ad626ceb1eb33b3e8f25c415fb23576b263543a1df8f7555c141d434e82340a5f4cb749e95861b5acf07c9f2630034a451cb125c021c8b257a24b39830f4eeb5fd382e22ac9add828c1fa9d77dee8bb904111e33c9194a1069ca4830f7910b2e2add5ada3fb4898ef2dee5b72839e6a39a1f0e8f89db341c0298c8630889"}, @ETHTOOL_A_WOL_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\x8e\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x704}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb356}, @ETHTOOL_A_BITSET_MASK={0x8b, 0x5, "9e43820b73755841f1d555088107116f6bfe306ff1d37b7c0952d615468d7025272cc640ed46bfeadc3adb68cde18f49e8189730f944575782ab776710206df40d36159cd9720335f5bbd1ec2b61eb68dfc6fa32673992a726188b90bc153abeab834b74b0a320d1ee5dbb40be3e116e7c09c7f1386fbf0b4d7126b5370ce919204f14b8ab92d4"}]}]}, 0x514}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 22.537825162s ago: executing program 37 (id=1760): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x8, 0xfffffffe, 0x4, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x67, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0xc, [{@local, 0x70}, {@broadcast, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x1, 0x0, 0x3, {{0x17, 0x4, 0x2, 0x2e, 0x5c, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @local, {[@timestamp={0x44, 0x1c, 0xf7, 0x0, 0x0, [0x3, 0x6, 0x3, 0x3ff, 0x8, 0x6634c274]}, @rr={0x7, 0x2b, 0x8d, [@local, @multicast1, @multicast2, @empty, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010102, @loopback, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000200)={0x514, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "8cc4c871017d3af900f7cb9da6a8cbdfcbd95548c19c7b1193fb7b3ca00fd9a9ad777330f5d76ae6d53c9798e9e73352e58a1adb9ddab355"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa0}]}, @ETHTOOL_A_WOL_SOPASS={0xb0, 0x3, "a6ba46bcc70dae5bb343a0332be802d469b932b16622404bc4e6384815f2c3d04c9bf0a4a09057651e7c0c9ceb349c07dd858157be1512bdc1a61badf38a94938ab0f9fb8320ad8f0dc36f945f2bc52720ae8797514a7884d8263a328f5a1f8417163c35ea3f20b79f04a1c34e9d922ed33759ef58781ca999049117b51474fd26bda363f36610d5bb50286b4cbdf80e4f982b659338b9e50f6318afc3773c03e2f21c647d0408368d42eba4"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_MODES={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x52, 0x4, "736aa250ff77111a7591817d5ee2b19c05b5c035aee9d949e8a25d24985d7cb462c279d58e842ba22cf02da624d81fa48f3c49bffdd3e0c9d9f60db24683f023ba99b411198f2e614c03d8d4f765"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&&])\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']]W-:E.,}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\x11+\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x88, 0x5, "1ce631ee3bab73a9c088011c44b92798529a2116d6c8f80b2ba630ddbaa1fa0a661880d3536e8a9762407e73436729c2d489248e8c122bf9837ffce3072e5aa0f3b47cb1133361e8c51fac4940fe12138f609f746188674ee1779a17f191807d5f1bbcf510947d76b864e61fd59afc3c963cb4606791d78d1bf6f3f620020016744a47aa"}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0xb0, 0x3, "c233d7a69030e5c32abf70f6ed06ce2635b8fbaf498afa2707f24596b721839e0f81db444022c6d354661a683235ad626ceb1eb33b3e8f25c415fb23576b263543a1df8f7555c141d434e82340a5f4cb749e95861b5acf07c9f2630034a451cb125c021c8b257a24b39830f4eeb5fd382e22ac9add828c1fa9d77dee8bb904111e33c9194a1069ca4830f7910b2e2add5ada3fb4898ef2dee5b72839e6a39a1f0e8f89db341c0298c8630889"}, @ETHTOOL_A_WOL_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\x8e\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x704}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb356}, @ETHTOOL_A_BITSET_MASK={0x8b, 0x5, "9e43820b73755841f1d555088107116f6bfe306ff1d37b7c0952d615468d7025272cc640ed46bfeadc3adb68cde18f49e8189730f944575782ab776710206df40d36159cd9720335f5bbd1ec2b61eb68dfc6fa32673992a726188b90bc153abeab834b74b0a320d1ee5dbb40be3e116e7c09c7f1386fbf0b4d7126b5370ce919204f14b8ab92d4"}]}]}, 0x514}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 7.603941362s ago: executing program 9 (id=1809): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e12080016c1b90b601a3e80667080f7cb682cab34b03d6ab73fc6184ac31aa33e8148e0353a17d33fae3f0b487778098d063a7884bfdb092147541d03cdcf1f8c5921e7966c8ad66923a0dc5ef2a54acca5ac2d5c7bbf4cd48ec2b039b95957699a9661564d3c6766d7f31c2fd10a66e06e1cf65b8c336b83dad8d395f6afbd47b0c3e45896a19dfedf0a2659c11f6963cc6077656e97874552139e8c64cfc710c87f3a027fc8bb1ff417a670172186fcf05d43ae8747c0f5bb4061270b2be86ac8e41b22e60a5b986fcd", 0xf1}], 0x1, 0x0, 0x0, 0x6000}, 0x80) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000001c0)=0xd, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000001c0)=0xd, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="b7d3772235fa90c21cbcfeb521b85429d41476c2e9e568de9de94a04f87186d6d3fcb035ef996ad0623f3d53843019e54cc547", 0x33}, {&(0x7f0000000540)="cf1607220e39070b08485896e9ca94dc0fd0e62bbbc644a3351e17c601af68d4a4f0f73917", 0x25}, {&(0x7f0000000080)="36e0fd03e9daffda1a6ea08bb80f18b72c0f9f034a06c492", 0x18}], 0x3, 0x0, 0x0, 0x8000}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="b7d3772235fa90c21cbcfeb521b85429d41476c2e9e568de9de94a04f87186d6d3fcb035ef996ad0623f3d53843019e54cc547", 0x33}, {&(0x7f0000000540)="cf1607220e39070b08485896e9ca94dc0fd0e62bbbc644a3351e17c601af68d4a4f0f73917", 0x25}, {&(0x7f0000000080)="36e0fd03e9daffda1a6ea08bb80f18b72c0f9f034a06c492", 0x18}], 0x3, 0x0, 0x0, 0x8000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x80) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}}, [0x9, 0x80000000, 0x80, 0x6a, 0x2, 0x0, 0x600000000000000, 0x7fff, 0x400, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x5]}, &(0x7f00000002c0)=0x100) 7.447848833s ago: executing program 9 (id=1810): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000180081054e81f782db0cb904021d080406037c09e8fe55a10a0015400400142603600e122f001e0006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5b277470703152b414f872766247a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x800) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x300, 0x0, 0xff, 0x3, 0x7, 0xb}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x91e1, 0x81, 0xffffffff, 0x2}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000a40)={'bridge_slave_0\x00', {0x2, 0x4e24, @multicast2}}) syz_usb_disconnect(r1) creat(&(0x7f0000000240)='./file0\x00', 0x100) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRES16, @ANYRES16, @ANYBLOB="275d568bf6ef2534f9448283d8bc04a4250f2d4a5330263f0190d0f62d595a5a9b37cbdb2f0ea9a5c1dcd61b5e350094966b056d55670d1228c0fcd0c737932ab9efaa910d74acd3b8ca9876007b72c67a4c496e130697a2399faeb65aaac6e875b0117a609dfe0839eeb5f3324192065109075eec2ce82c", @ANYRESHEX=r1, @ANYRESDEC=r1], 0x0) 6.109555085s ago: executing program 6 (id=1818): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020400000e000000000000000000000005000600000000000a004e22000000000000000000000000000000000000000000000000000000000200010000000000000002020000002005000500000000000a00000000000000ff01000000000000000000000000000100000000000000000f62e8b1bf1bbdc9c193bb671259c6605b1191abb5c89c86692bd3a87be17595a5228cfdd537185bc0798a1758c3baf3bd3cf7bf37dbcb34e02920426fb3d693aad55fc3e6a56c26d30b61a0cf0dc95c575638ede8dc32"], 0x70}}, 0x0) (async) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020400000e000000000000000000000005000600000000000a004e22000000000000000000000000000000000000000000000000000000000200010000000000000002020000002005000500000000000a00000000000000ff01000000000000000000000000000100000000000000000f62e8b1bf1bbdc9c193bb671259c6605b1191abb5c89c86692bd3a87be17595a5228cfdd537185bc0798a1758c3baf3bd3cf7bf37dbcb34e02920426fb3d693aad55fc3e6a56c26d30b61a0cf0dc95c575638ede8dc32"], 0x70}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, 0x0, 0x0) r9 = semget$private(0x0, 0x3, 0x0) semop(r9, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x0, 0x200, 0x800}], 0x2) semctl$GETZCNT(r9, 0x2, 0xf, 0x0) (async) semctl$GETZCNT(r9, 0x2, 0xf, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0, @ANYRESHEX=r8, @ANYRES64=r1], 0x0}, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0, @ANYRESHEX=r8, @ANYRES64=r1], 0x0}, 0x0) 5.30335091s ago: executing program 8 (id=1819): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fcntl$addseals(r1, 0x409, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) ioctl$sock_inet_SIOCSARP(r6, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x8, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) 3.956007521s ago: executing program 9 (id=1827): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x58, {0x58, 0xc, "6914faf76f0781b77f7b53b524b379a8211c57a305d6d35679007256a6083f45d6ea6d0ba1340a9fb8360622a9ab3c224eed613b285ccc8a528aea1a459a6b8efe525a9a32580603069952c2575883e01e629cea454b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x40, 0x17, 0xc8, "45dc80147c079fb1e112c0b227204bc1a26111b704b42b500e1203ce964579d07213448da2f0f4b2209be627278006798423c5b395eb79f5fdad213cac09d3d8db28c90fc4b2411084e98d9f91f24eed94d1624010bc14963d11e4a881dae13490614d53172c809cbd276f39085893459ea567343daab62941c8120e6684bb4357c0a177292fd3546f6bd7ddda8b2a10827b7e52365e5cc5fa2a46725c2ee4508caa381da744cd46a68a5f269c78fa6684a0fa4f0c633f14013874a4b4905577d59f3ec687991776"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) 2.945567696s ago: executing program 6 (id=1832): r0 = syz_usb_connect(0x4, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) read$ptp(r1, &(0x7f00000000c0)=""/21, 0x15) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000080)) 2.711594422s ago: executing program 0 (id=1834): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x100, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffe, 0x2, 0x0) (async) r1 = mq_open(&(0x7f0000000080)='\x00', 0x80, 0x149, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff, 0x2}) mq_getsetattr(r1, &(0x7f0000000100)={0x6, 0x6, 0x1ff, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x5, 0x10, 0x79b, 0xffffffff}, &(0x7f0000000180)=0x18) (async) close_range(r1, r0, 0x0) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) (async) r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x6, 0x400) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000200)={0x2, 0x1, 0x7551, 0x257, 0x9, 0x10}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000280)) (async) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f00000002c0)={0xa, 0x1}) sendmsg$nl_generic(r4, &(0x7f0000001840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f0000000340)={0x1498, 0x12, 0x200, 0x70bd25, 0x25dfdbfe, {0x1c}, [@generic="bced752b05025cc8ff15aa34599b6754b1c968d7a287ef7d47f2d5750d642482b827e17768378cf28cf8509337281261a625badf69b0150f828504f65f32709828288dbfda404a1dfc27de93e406bd2ef8398b517d162993f2198d9fb92e8b4dfc3998dc35897e35bdaf5dc563", @nested={0x23c, 0xc4, 0x0, 0x1, [@generic="d20e8c7e0bee71dba23d2223c252db3b9726d397e9b7db0852d8acf02c78ad87815aada68ae866240fb151d3d01cc6a5a570f151d07a4081a3de9bb54eaecb6082839389600625704e7209a14d9853edb10e16ac6c27d7422a501069a73257c37f5ced85b6f7a92d49144b29ef01", @generic="ed1340a462f543340c971d58a6041ef697adff048ec4ec1e80856d29c341a0e6b85ae4bae9eb71b0cb77f96ed6edfe7d10772a11d394aaaa52a8d931e31632d91065001e90c4e6efb0c8fe262b92240d4e99bdd390f0593c6c3d5cb85df8c61e15344e6db76e346eeacc0e0ad8cd0b577fd5c1b2947c8e20ec84c2a3d7fa0c79daadb7826e44f92e0e470a3e5a6ba2b1554a9c4e5f60c3fbf5e3a0c55a19535949d9bca065084f065ebb6d", @typed={0x4, 0x120}, @generic="622f384bff300daa889aff0a20a803f4eb0ddfde952239cd43bb733ff126169eee42abb10dcec5caf0da0223e9e2401961ac510d05a06c30a30c8983700a2ea40fdcf8fcead6b8acb73e28cb603934c1afff604f23f7f7058f138ecc0510fdd75e7cc42b299eebe54bc176", @typed={0xc, 0x150, 0x0, 0x0, @u64=0x9}, @generic="121e3b98384fa09ccc93c6a1366fd1497f930fae1bb39e3de0fefce17c48f3cf741a3df7ea14be96a588bb3d934619e029a508676d6bb5ec0dad242b21e316d21066a1cd2102b32e5c19e92e5888c4274a925441fe4f50bb1ca7f0fc200f86af41ca4df79a01e981c561c107e9b5d44c51db6a9cd95d4038ef10fd3178931d95ae0ec37ff72f585cbf462ab5500aad600795f52252d89fe93c36d59739a3fdde", @nested={0x4, 0x73}]}, @nested={0x9f, 0xde, 0x0, 0x1, [@nested={0x4, 0x7d}, @generic="78e19c8a240bab5e62306136a651965d53a99060a112db4dda1d3309518855a4d14075c7714611b76d67bb5faca2befe47bfb2fff20abc10e8d93dc2535b664c03096c", @generic="73c52738cc5bd36ae1bbf526d4569475c110b68298c04a714fbb9b2ef343a0d54130ed14654c757939338e9714c2256a74dabd19b343a36a46ef1fc75070d5f81ed5f798dd84a8fe641edd992cc501f0c3938000"]}, @generic="52644f6e4be08ee0ade80eacdad4ef5b4633bebc12b5bafe7326128daa49a189b20dabadf05e446b1b44a2276e7c", @generic="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", @generic="dd10f68cd1847c14c3f7d9c85b5faf365427a86c1558242f8469462e797d34831c19c6ed98a919f9b3b3", @typed={0x8, 0xc3, 0x0, 0x0, @u32=0x7}, @generic="496590d26fc671b3b6732a3cbed3a570b07ac21a83a17b90d44c8a561224dcb45a7b82f75070ebe0a0a915b6f5dba860a5194e802412aa0484e00379113d7313854c9dee3e29db2389b52d497cc4124bef8aa70ef68db6fda7452dcc6aaf52c93b312a3f90dbecb47a13030b53d253cdba692f2ba77ec18a73972dd9897c082838668eef243c8f48e391edc08114c1da94fbe87805d80d69c10e1496fc49fa0536ea79be32c254a9789369dc7c7567024d37375287b46b95e8148a4fdf02063dfbd4148f7446e2b9812fb98d89292a6770c3f17486ea600b11"]}, 0x1498}, 0x1, 0x0, 0x0, 0x10}, 0x840) write$cgroup_subtree(r4, &(0x7f0000001880)={[{0x2d, 'memory'}, {0x2b, 'rdma'}, {0x2b, 'net'}, {0x2b, 'rdma'}, {0x2b, 'net_prio'}, {0x2d, 'pids'}, {0x2d, 'io'}]}, 0x2d) (async) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000018c0)=""/139, &(0x7f0000001980)=0x8b) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x48, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x14) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000001b40)={0x7, 'ip6tnl0\x00', {0x2}, 0x5}) r7 = socket(0x6, 0x800, 0x1) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000001b80)={r2, 0xfffffff7}, &(0x7f0000001bc0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001c40)={r8, 0x20, &(0x7f0000001c00)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000001c80)=0x10) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000001cc0)={0x1, 0x8}) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000001d00)={0x6, 0x7}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000001d40)={0x2, [0x0, 0x0]}, &(0x7f0000001d80)=0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001dc0)={r9, 0x3e80}, 0x8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000001e00)={{{@in6}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001f00)=0xe8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000001f40)={r2, 0x6}, &(0x7f0000001f80)=0x8) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa810}, 0x0) 2.670037888s ago: executing program 0 (id=1835): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x5, @vbi={0xfffffffc, 0x0, 0x4, 0x0, [], [0x796], 0x1}}}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect(r1, &(0x7f00000002c0)=@nfc_llcp={0x25, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x25}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000280), &(0x7f0000000300)=[r9], &(0x7f0000000440)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000340)=[0x0], &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x4, 0x6, 0x1}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x8, r12}) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000780)={0x200, 0x1, &(0x7f0000000280)=[r12], &(0x7f00000002c0)=[0x9], &(0x7f0000000400)=[r14, r16, r15, 0x0, 0x0, r13, r16, r13], &(0x7f0000000740), 0x0, 0x522}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000940)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000a00)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], 0x5, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000c40)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[{}, {}, {}, {}], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000d40)={0x600, 0x2, &(0x7f0000000100)=[r2, r4], &(0x7f0000000140)=[0x8, 0x1000, 0x0], &(0x7f0000000cc0)=[r5, r9, r10, r14, r17, r18, r19], &(0x7f0000000d00)=[0x7, 0x7, 0x7, 0x4, 0x9, 0xfd, 0x8b9a], 0x0, 0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x1ff, 0x3, "ce267c373d1394b59dda9ab93f9369dc6e57418a9ddfc4b9a18c4b47986d7c08", 0x0, 0x7, 0x0, 0xffff, 0x110}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 2.582761412s ago: executing program 0 (id=1836): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x1, r1, 0x0, &(0x7f0000c8c000/0x4000)=nil, 0x4000, 0x5}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000180)={0x18, r1}) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid}, {@cache_fscache}, {@fscache}], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 2.503629252s ago: executing program 0 (id=1837): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xff97) 2.363629628s ago: executing program 0 (id=1838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, &(0x7f00000035c0)='quota') unshare(0x22020600) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0xca267000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x4) r4 = openat$cgroup_ro(r3, &(0x7f00000011c0)='cgroup.stat\x00', 0x5000000, 0x0) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ptrace(0x11, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x9d, 0x1, 0x5}, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYRES8=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000001140)={0x3000, 0x109000, 0xffffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 2.33895014s ago: executing program 6 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a54000000060a0b0400000000000000000200fffe28000480240001800b0001006f626a7265660000140002800800054000000001080003400000000d0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) 2.23473577s ago: executing program 6 (id=1840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000180a11000000000000000000020000001c0003801800038014000100776732000000000000000000000000000900020073797a30000000000900010073797a30"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2.116066736s ago: executing program 6 (id=1841): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x507, &(0x7f00000015c0)={&(0x7f0000001580)=[{0x1, 0x4200, 0x0, 0x0}, {0x1ff, 0xa800, 0x0, 0x0}], 0x2}) 2.004962349s ago: executing program 8 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000180a03000000000000000000020000001c0003801800038014000100776732000000000000000000000000000900020073797a30000000000900010073797a30"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (fail_nth: 8) 1.471179858s ago: executing program 8 (id=1843): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x4044080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8=r4]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r6, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r4]) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x18, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe0040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd55000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2caa, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x40000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1, 0xc00, 0x8}) 1.26382179s ago: executing program 9 (id=1844): write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fb, 0x5, 0x87, 0xd615, 0xbf, 0x7fffffff, 0x1, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000008fddbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) 1.118670218s ago: executing program 9 (id=1845): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x1, r1, 0x0, &(0x7f0000c8c000/0x4000)=nil, 0x4000, 0x5}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000180)={0x18, r1}) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}, {@cache_fscache}, {@fscache}], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 1.091594987s ago: executing program 8 (id=1846): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5489, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) (fail_nth: 12) 688.844546ms ago: executing program 9 (id=1847): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x10, 0xd4201) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000}) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) 471.911438ms ago: executing program 8 (id=1848): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x300, 0x4}) 413.303179ms ago: executing program 6 (id=1849): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000240)="0fc79bc98d00000f329a0ed900003e0066baf80cb81e053187ef66bafc0c66b8090066efb863eef6dd0f23c80f21f835040090000f23f80f18a4e5010000000f1f617d66baf80cb8d8a5b680ef66bafc0ced0f20078fe800ce62032c", 0x5c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000f80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x0, @broadcast}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7f, 0x20203143, 0x3, [0x2], [0x101], [0x0, 0x1]}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 264.880225ms ago: executing program 8 (id=1850): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="5400000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e31"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0xf, 0x4d, {0x4d, 0x30, "219257c1860ceffdb5da449fbe2c574d8b90fe645d7b58087a32ea3bb1dfd49640414263a1e78b630bdc12c111668e99e590c5cacc6b37b20ece58b953efc8e8c8321883ddd01654b2c5af"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x0, 0x7, 0xcd, "de59a867e0948a89373c8a1112928f024bb73154ba07217538a3db5e7010b27fb184eb4bd592ca6eae92fbee6ebb6dd424fd020e49246a187737684853bb6a34cad0d74e3fa75d8a6d4c3ab6ed11b11a46e5dfed843ffe5a58208b9bdfe515b778c1ddf142319627d93c151555b58ad9a81dbb1dcf90bdcaabc63725624a326516f3d4f3bb61258b26ecdb3d91d622715fad4fef2370fab4054839b92acf3c6e64ade40c17a2381ccf9d3f26e7b471f2dc1e77a3bf4831bc753ac3893e57ae0a29b3249298212a83699736e818"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}}) syz_usb_control_io$hid(r0, 0x0, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x3000)=nil) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') syz_usb_ep_write(r0, 0x5, 0x65, &(0x7f0000000040)="9c660ed14677346b707bed2f291eb1cb64b91fd99aeeffe5b7eabddd2c7b8b05ccfb3c55b0f223b23f09b65bc27fcc175a9ad2c08c553abb08498daa2163e23f919679275ce6e46794f6ff8a0d4490cef65b0c1c54c369a2c5ded2e975578300129dd0f691") 0s ago: executing program 0 (id=1851): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xc0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04062d20"], 0x7) kernel console output (not intermixed with test programs): 92] should_failslab+0xa8/0x100 [ 422.750125][T10892] __kmalloc_cache_noprof+0x6f/0x6f0 [ 422.750151][T10892] ? usb_control_msg+0x73/0x3e0 [ 422.750192][T10892] usb_control_msg+0x73/0x3e0 [ 422.750233][T10892] ? __pfx___mutex_trylock_common+0x10/0x10 [ 422.750269][T10892] hub_ext_port_status+0x116/0x820 [ 422.750325][T10892] hub_activate+0x77d/0x1a70 [ 422.750371][T10892] hub_resume+0xa4/0x3c0 [ 422.750395][T10892] ? __pfx_hub_resume+0x10/0x10 [ 422.750428][T10892] usb_resume_both+0x5ca/0xae0 [ 422.750462][T10892] ? __pfx_usb_runtime_resume+0x10/0x10 [ 422.750490][T10892] __rpm_callback+0x2f1/0x7f0 [ 422.750516][T10892] ? rcu_is_watching+0x15/0xb0 [ 422.750540][T10892] ? dev_pm_disable_wake_irq_check+0xb5/0x160 [ 422.750565][T10892] ? __pfx_usb_runtime_resume+0x10/0x10 [ 422.750588][T10892] rpm_resume+0xf98/0x15f0 [ 422.750625][T10892] ? __pfx_rpm_resume+0x10/0x10 [ 422.750645][T10892] ? do_raw_spin_lock+0x121/0x290 [ 422.750670][T10892] ? rpm_resume+0x859/0x15f0 [ 422.750690][T10892] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.750726][T10892] rpm_resume+0x8c1/0x15f0 [ 422.750762][T10892] ? __pfx_rpm_resume+0x10/0x10 [ 422.750782][T10892] ? do_raw_spin_lock+0x121/0x290 [ 422.750807][T10892] ? rpm_resume+0x859/0x15f0 [ 422.750828][T10892] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.750864][T10892] rpm_resume+0x8c1/0x15f0 [ 422.750900][T10892] ? __pfx_rpm_resume+0x10/0x10 [ 422.750926][T10892] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 422.750952][T10892] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 422.750976][T10892] ? do_raw_spin_lock+0x121/0x290 [ 422.751010][T10892] __pm_runtime_resume+0x11c/0x180 [ 422.751036][T10892] usb_autopm_get_interface+0x20/0xf0 [ 422.751064][T10892] wdm_open+0x20a/0x550 [ 422.751094][T10892] ? __pfx_wdm_open+0x10/0x10 [ 422.751118][T10892] usb_open+0x156/0x1e0 [ 422.751144][T10892] chrdev_open+0x4cc/0x5e0 [ 422.751172][T10892] ? __pfx_chrdev_open+0x10/0x10 [ 422.751205][T10892] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 422.751236][T10892] ? __pfx_chrdev_open+0x10/0x10 [ 422.751258][T10892] do_dentry_open+0x950/0x13f0 [ 422.751306][T10892] vfs_open+0x3b/0x340 [ 422.751335][T10892] ? path_openat+0x2ecd/0x3830 [ 422.751362][T10892] path_openat+0x2ee5/0x3830 [ 422.751412][T10892] ? __pfx_path_openat+0x10/0x10 [ 422.751448][T10892] do_filp_open+0x1fa/0x410 [ 422.751465][T10892] ? __lock_acquire+0xab9/0xd20 [ 422.751490][T10892] ? __pfx_do_filp_open+0x10/0x10 [ 422.751530][T10892] ? _raw_spin_unlock+0x28/0x50 [ 422.751554][T10892] ? alloc_fd+0x64c/0x6c0 [ 422.751587][T10892] do_sys_openat2+0x121/0x1c0 [ 422.751606][T10892] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.751631][T10892] ? ksys_write+0x22a/0x250 [ 422.751655][T10892] ? __pfx_ksys_write+0x10/0x10 [ 422.751678][T10892] __x64_sys_openat+0x138/0x170 [ 422.751700][T10892] do_syscall_64+0xfa/0xfa0 [ 422.751716][T10892] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.751732][T10892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.751749][T10892] ? clear_bhb_loop+0x60/0xb0 [ 422.751777][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.751794][T10892] RIP: 0033:0x7fa96f58d550 [ 422.751811][T10892] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 422.751827][T10892] RSP: 002b:00007fa9703a4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 422.751847][T10892] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa96f58d550 [ 422.751860][T10892] RDX: 0000000000000002 RSI: 00007fa9703a4c10 RDI: 00000000ffffff9c [ 422.751872][T10892] RBP: 00007fa9703a4c10 R08: 0000000000000000 R09: 00007fa9703a4987 [ 422.751884][T10892] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 422.751897][T10892] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 422.751930][T10892] [ 423.183744][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.236346][T10892] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 423.263562][ T5865] Bluetooth: hci2: command 0x041b tx timeout [ 423.344879][ T5932] usb 4-1: USB disconnect, device number 106 [ 423.647415][T10892] usb 1-1: reset high-speed USB device number 123 using dummy_hcd [ 424.365630][ T5932] usb 1-1: USB disconnect, device number 123 [ 425.296717][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.465076][T10954] FAULT_INJECTION: forcing a failure. [ 425.465076][T10954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.480442][T10954] CPU: 0 UID: 0 PID: 10954 Comm: syz.0.1585 Not tainted syzkaller #0 PREEMPT(full) [ 425.480478][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.480498][T10954] Call Trace: [ 425.480507][T10954] [ 425.480517][T10954] dump_stack_lvl+0x189/0x250 [ 425.480545][T10954] ? __pfx____ratelimit+0x10/0x10 [ 425.480580][T10954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.480601][T10954] ? __pfx__printk+0x10/0x10 [ 425.480637][T10954] ? fs_reclaim_acquire+0x7d/0x100 [ 425.480675][T10954] should_fail_ex+0x414/0x560 [ 425.480708][T10954] prepare_alloc_pages+0x213/0x610 [ 425.480745][T10954] __alloc_frozen_pages_noprof+0x123/0x370 [ 425.480779][T10954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.480814][T10954] ? __pfx__copy_from_iter+0x10/0x10 [ 425.480848][T10954] ? policy_nodemask+0x27c/0x720 [ 425.480881][T10954] alloc_pages_mpol+0x232/0x4a0 [ 425.480914][T10954] alloc_pages_noprof+0xa9/0x190 [ 425.480944][T10954] anon_pipe_write+0xb85/0x1360 [ 425.481007][T10954] ? __pfx_anon_pipe_write+0x10/0x10 [ 425.481036][T10954] ? common_file_perm+0x1b5/0x230 [ 425.481075][T10954] ? bpf_lsm_file_permission+0x9/0x20 [ 425.481109][T10954] ? security_file_permission+0x75/0x290 [ 425.481147][T10954] vfs_write+0x5c9/0xb30 [ 425.481179][T10954] ? __pfx_anon_pipe_write+0x10/0x10 [ 425.481212][T10954] ? __pfx_vfs_write+0x10/0x10 [ 425.481251][T10954] ? __fget_files+0x2a/0x420 [ 425.481292][T10954] ksys_write+0x145/0x250 [ 425.481321][T10954] ? __pfx_ksys_write+0x10/0x10 [ 425.481352][T10954] ? do_syscall_64+0xbe/0xfa0 [ 425.481377][T10954] do_syscall_64+0xfa/0xfa0 [ 425.481397][T10954] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.481418][T10954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.481440][T10954] ? clear_bhb_loop+0x60/0xb0 [ 425.481467][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.481494][T10954] RIP: 0033:0x7fa96f58ebe9 [ 425.481514][T10954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.481534][T10954] RSP: 002b:00007fa970384038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.481558][T10954] RAX: ffffffffffffffda RBX: 00007fa96f7c6090 RCX: 00007fa96f58ebe9 [ 425.481575][T10954] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 425.481591][T10954] RBP: 00007fa970384090 R08: 0000000000000000 R09: 0000000000000000 [ 425.481606][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.481619][T10954] R13: 00007fa96f7c6128 R14: 00007fa96f7c6090 R15: 00007ffe6d47ec58 [ 425.481657][T10954] [ 425.485776][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.570119][ T5932] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 425.813489][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.890140][ T5918] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 425.928162][ T5932] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 425.939718][ T5932] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 425.947645][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.964911][ T5932] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 425.975725][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.984374][ T5932] usb 7-1: Product: syz [ 425.988703][ T5932] usb 7-1: Manufacturer: syz [ 425.992742][T10965] netlink: 'syz.0.1592': attribute type 142 has an invalid length. [ 425.994596][ T5932] usb 7-1: SerialNumber: syz [ 426.011551][ T5932] usb 7-1: config 0 descriptor?? [ 426.019466][T10956] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 426.043721][T10956] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 426.052271][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 426.068115][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.078245][ T5918] usb 4-1: config 4 interface 0 has no altsetting 0 [ 426.088890][ T5918] usb 4-1: string descriptor 0 read error: -22 [ 426.104639][ T5918] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 426.123783][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.165336][ T5918] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 426.214703][ T5918] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 426.256285][ T5918] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 426.279136][ T5918] usb 4-1: media controller created [ 426.291157][T10956] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 426.307192][ T36] bridge_slave_1: left allmulticast mode [ 426.320937][T10956] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 426.335101][ T36] bridge_slave_1: left promiscuous mode [ 426.339767][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.351562][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.414982][ T36] bridge_slave_0: left allmulticast mode [ 426.432569][ T36] bridge_slave_0: left promiscuous mode [ 426.439655][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.458799][T10972] FAULT_INJECTION: forcing a failure. [ 426.458799][T10972] name failslab, interval 1, probability 0, space 0, times 0 [ 426.478802][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.0.1594 Not tainted syzkaller #0 PREEMPT(full) [ 426.478836][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.478851][T10972] Call Trace: [ 426.478861][T10972] [ 426.478871][T10972] dump_stack_lvl+0x189/0x250 [ 426.478899][T10972] ? __pfx____ratelimit+0x10/0x10 [ 426.478935][T10972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.478957][T10972] ? __pfx__printk+0x10/0x10 [ 426.478998][T10972] ? __pfx___might_resched+0x10/0x10 [ 426.479033][T10972] should_fail_ex+0x414/0x560 [ 426.479067][T10972] should_failslab+0xa8/0x100 [ 426.479098][T10972] __kmalloc_cache_noprof+0x6f/0x6f0 [ 426.479125][T10972] ? nft_trans_table_add+0x56/0x430 [ 426.479162][T10972] nft_trans_table_add+0x56/0x430 [ 426.479199][T10972] nf_tables_newtable+0xce3/0x1890 [ 426.479248][T10972] nfnetlink_rcv+0x1132/0x2520 [ 426.479317][T10972] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 426.479368][T10972] ? ref_tracker_free+0x63a/0x7d0 [ 426.479432][T10972] ? __netlink_deliver_tap+0x807/0x850 [ 426.479455][T10972] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.479496][T10972] netlink_unicast+0x82c/0x9e0 [ 426.479540][T10972] ? __pfx_netlink_unicast+0x10/0x10 [ 426.479576][T10972] ? netlink_sendmsg+0x642/0xb30 [ 426.479597][T10972] ? skb_put+0x11b/0x210 [ 426.479635][T10972] netlink_sendmsg+0x805/0xb30 [ 426.479669][T10972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.479696][T10972] ? aa_sock_msg_perm+0xf1/0x1d0 [ 426.479734][T10972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.479766][T10972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.479790][T10972] __sock_sendmsg+0x219/0x270 [ 426.479827][T10972] ____sys_sendmsg+0x505/0x830 [ 426.479860][T10972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.479896][T10972] ? import_iovec+0x74/0xa0 [ 426.479926][T10972] ___sys_sendmsg+0x21f/0x2a0 [ 426.479954][T10972] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.480018][T10972] ? __fget_files+0x2a/0x420 [ 426.480046][T10972] ? __fget_files+0x3a0/0x420 [ 426.480088][T10972] __x64_sys_sendmsg+0x19b/0x260 [ 426.480116][T10972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.480153][T10972] ? __pfx_ksys_write+0x10/0x10 [ 426.480183][T10972] ? do_syscall_64+0xbe/0xfa0 [ 426.480208][T10972] do_syscall_64+0xfa/0xfa0 [ 426.480228][T10972] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.480249][T10972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.480271][T10972] ? clear_bhb_loop+0x60/0xb0 [ 426.480297][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.480319][T10972] RIP: 0033:0x7fa96f58ebe9 [ 426.480340][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.480359][T10972] RSP: 002b:00007fa9703a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.480383][T10972] RAX: ffffffffffffffda RBX: 00007fa96f7c5fa0 RCX: 00007fa96f58ebe9 [ 426.480400][T10972] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 426.480414][T10972] RBP: 00007fa9703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 426.480427][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.480440][T10972] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 426.480476][T10972] [ 426.951028][ T5932] Error reading MAC address [ 427.307136][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.343256][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.478303][ T36] dvmrp1 (unregistering): left allmulticast mode [ 427.656012][T10961] netlink: 'syz.3.1590': attribute type 1 has an invalid length. [ 427.670162][T10961] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1590'. [ 427.694639][ T5918] zl10353_read_register: readreg error (reg=127, ret==0) [ 427.767856][ T36] tipc: Left network mode [ 427.835594][ T5918] usb 4-1: USB disconnect, device number 107 [ 427.914742][T11000] kAFS: No cell specified [ 428.785182][T11018] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1599'. [ 428.810150][T11018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1599'. [ 428.881747][ T36] hsr_slave_0: left promiscuous mode [ 428.914847][ T36] hsr_slave_1: left promiscuous mode [ 428.921312][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.928760][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.988445][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.997207][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.078978][ T36] veth1_macvtap: left promiscuous mode [ 429.105405][ T36] veth0_macvtap: left promiscuous mode [ 429.116424][ T36] veth1_vlan: left promiscuous mode [ 429.137621][T11030] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1603'. [ 429.151685][ T36] veth0_vlan: left promiscuous mode [ 429.324505][ T44] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 429.501683][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 429.519438][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 429.534271][ T44] usb 4-1: config 106 has an invalid interface number: 15 but max is 0 [ 429.566950][ T44] usb 4-1: config 106 has no interface number 0 [ 429.575024][ T44] usb 4-1: config 106 interface 15 has no altsetting 0 [ 429.612880][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=56.45 [ 429.629155][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.652597][ T44] usb 4-1: Product: syz [ 429.657185][ T44] usb 4-1: Manufacturer: syz [ 429.664434][ T44] usb 4-1: SerialNumber: syz [ 429.903317][T11047] FAULT_INJECTION: forcing a failure. [ 429.903317][T11047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.918452][T11047] CPU: 1 UID: 0 PID: 11047 Comm: syz.5.1606 Not tainted syzkaller #0 PREEMPT(full) [ 429.918489][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.918504][T11047] Call Trace: [ 429.918514][T11047] [ 429.918524][T11047] dump_stack_lvl+0x189/0x250 [ 429.918559][T11047] ? __pfx____ratelimit+0x10/0x10 [ 429.918594][T11047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.918616][T11047] ? __pfx__printk+0x10/0x10 [ 429.918650][T11047] ? __might_fault+0xb0/0x130 [ 429.918685][T11047] should_fail_ex+0x414/0x560 [ 429.918717][T11047] _copy_from_user+0x2d/0xb0 [ 429.918742][T11047] ___sys_sendmsg+0x158/0x2a0 [ 429.918771][T11047] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.918844][T11047] ? __might_fault+0xb0/0x130 [ 429.918872][T11047] __sys_sendmmsg+0x227/0x430 [ 429.918904][T11047] ? __pfx___sys_sendmmsg+0x10/0x10 [ 429.918941][T11047] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.918980][T11047] ? ksys_write+0x22a/0x250 [ 429.919010][T11047] ? __pfx_ksys_write+0x10/0x10 [ 429.919043][T11047] __x64_sys_sendmmsg+0xa0/0xc0 [ 429.919072][T11047] do_syscall_64+0xfa/0xfa0 [ 429.919095][T11047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.919116][T11047] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.919140][T11047] ? clear_bhb_loop+0x60/0xb0 [ 429.919168][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.919190][T11047] RIP: 0033:0x7f955238ebe9 [ 429.919211][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.919231][T11047] RSP: 002b:00007f955324b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.919256][T11047] RAX: ffffffffffffffda RBX: 00007f95525c5fa0 RCX: 00007f955238ebe9 [ 429.919273][T11047] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000003 [ 429.919289][T11047] RBP: 00007f955324b090 R08: 0000000000000000 R09: 0000000000000000 [ 429.919303][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.919317][T11047] R13: 00007f95525c6038 R14: 00007f95525c5fa0 R15: 00007fff38bfff58 [ 429.919354][T11047] [ 430.142146][ T5918] usb 7-1: USB disconnect, device number 2 [ 431.084787][ T36] team0 (unregistering): Port device team_slave_1 removed [ 431.167829][ T36] team0 (unregistering): Port device team_slave_0 removed [ 431.269550][ T5918] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 431.431992][ T5918] usb 7-1: not running at top speed; connect to a high speed hub [ 431.447810][ T5918] usb 7-1: config 1 interface 0 altsetting 129 endpoint 0x2 has invalid maxpacket 520, setting to 64 [ 431.461662][ T5918] usb 7-1: config 1 interface 0 has no altsetting 0 [ 431.474007][ T5918] usb 7-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.40 [ 431.485267][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.507436][ T5918] usb 7-1: Product: 풹슡깩軚쀒셢°飗㋖퇖ⵇ넢뮮꾲ⷁ틨웃烮߻償ᢋ묳㾽뾟썼骓檮霷ꐝ [ 431.523956][ T5918] usb 7-1: Manufacturer: 珹邸蝸起瀘宛싻⋒썈操踗뼮ᇔ◙邁쏘嘑䜫ၽ콡谍䭻ٌ㲹浗鷹㡾ᨗ훬ﰪ콇༒﹇蹠뮽ᣒ灤酕ܶ챟曀虋聇ጝ㴆轵྽珦䗊썈ㅲ፥틘â儃搵꽚阭넹뷍ৈᐜ৸抎芠밀䰖ᐰ继⸱뛣じ㑒혏倛圲彠짤၇峂麜镣ࢁ籃勼锿芖웙ꍣꡓ浄匡쒡඲Ƚ뫻쎊폥鹼焣Ⴒ㰕ݟ᩼ [ 431.560415][ T5918] usb 7-1: SerialNumber: 魨䨽χ圤뱰皀䐈殎奁Ꞟﱊꑮ頃곃觌擦ķ^嵐䗱鏹꾘됕蹟卬曕嚢쐥鼈㣂퟿췓飾䖒桋굿⯰⡒㈒嗎餎끨ղ츚竫᜖ቦᔯ朗쉽ꅒ숫ꑇ갶쥏厞ᕩꇠ⍁哚쓍ᖝ昌㝘뷚䋄㫦铍Ð硪㩒❖走穈햾饇퀇蜹㟃⢦㜥Ꝯॖ髠޵罷겭䕀ᄲ尿讂띿䞶嗴െ؈♸潤꯻醪䝂춮넽ٴ [ 431.606480][T11055] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 431.892156][ T5918] usbhid 7-1:1.0: can't add hid device: -71 [ 431.898609][ T5918] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 431.925866][ T5918] usb 7-1: USB disconnect, device number 3 [ 432.410926][ T44] cdc_subset 4-1:106.15: probe with driver cdc_subset failed with error -71 [ 432.484841][ T44] usb 4-1: USB disconnect, device number 108 [ 432.589610][T11067] FAULT_INJECTION: forcing a failure. [ 432.589610][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 432.650178][T11067] CPU: 0 UID: 0 PID: 11067 Comm: syz.0.1612 Not tainted syzkaller #0 PREEMPT(full) [ 432.650208][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.650221][T11067] Call Trace: [ 432.650230][T11067] [ 432.650240][T11067] dump_stack_lvl+0x189/0x250 [ 432.650269][T11067] ? __pfx____ratelimit+0x10/0x10 [ 432.650305][T11067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.650326][T11067] ? __pfx__printk+0x10/0x10 [ 432.650361][T11067] ? __pfx___might_resched+0x10/0x10 [ 432.650384][T11067] ? fs_reclaim_acquire+0x7d/0x100 [ 432.650414][T11067] should_fail_ex+0x414/0x560 [ 432.650444][T11067] should_failslab+0xa8/0x100 [ 432.650470][T11067] __kmalloc_noprof+0xcb/0x7f0 [ 432.650491][T11067] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 432.650518][T11067] ? rcu_is_watching+0x15/0xb0 [ 432.650548][T11067] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 432.650582][T11067] genl_family_rcv_msg_doit+0xb8/0x300 [ 432.650614][T11067] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.650648][T11067] ? apparmor_capable+0x137/0x1b0 [ 432.650673][T11067] ? bpf_lsm_capable+0x9/0x20 [ 432.650693][T11067] ? security_capable+0x7e/0x2e0 [ 432.650728][T11067] genl_rcv_msg+0x60e/0x790 [ 432.650760][T11067] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.650783][T11067] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 432.650811][T11067] ? __pfx_nl802154_stop_beacons+0x10/0x10 [ 432.650841][T11067] ? __pfx_nl802154_post_doit+0x10/0x10 [ 432.650885][T11067] netlink_rcv_skb+0x208/0x470 [ 432.650913][T11067] ? __lock_acquire+0xab9/0xd20 [ 432.650936][T11067] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.650962][T11067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.651014][T11067] ? down_read+0x1ad/0x2e0 [ 432.651039][T11067] genl_rcv+0x28/0x40 [ 432.651061][T11067] netlink_unicast+0x82c/0x9e0 [ 432.651111][T11067] ? __pfx_netlink_unicast+0x10/0x10 [ 432.651142][T11067] ? netlink_sendmsg+0x642/0xb30 [ 432.651160][T11067] ? skb_put+0x11b/0x210 [ 432.651184][T11067] netlink_sendmsg+0x805/0xb30 [ 432.651213][T11067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.651237][T11067] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.651270][T11067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.651299][T11067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.651319][T11067] __sock_sendmsg+0x219/0x270 [ 432.651362][T11067] ____sys_sendmsg+0x505/0x830 [ 432.651391][T11067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.651423][T11067] ? import_iovec+0x74/0xa0 [ 432.651447][T11067] ___sys_sendmsg+0x21f/0x2a0 [ 432.651472][T11067] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.651538][T11067] ? __fget_files+0x2a/0x420 [ 432.651565][T11067] ? __fget_files+0x3a0/0x420 [ 432.651603][T11067] __x64_sys_sendmsg+0x19b/0x260 [ 432.651629][T11067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.651661][T11067] ? __pfx_ksys_write+0x10/0x10 [ 432.651689][T11067] ? do_syscall_64+0xbe/0xfa0 [ 432.651712][T11067] do_syscall_64+0xfa/0xfa0 [ 432.651737][T11067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.651756][T11067] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.651776][T11067] ? clear_bhb_loop+0x60/0xb0 [ 432.651804][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.651824][T11067] RIP: 0033:0x7fa96f58ebe9 [ 432.651844][T11067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.651862][T11067] RSP: 002b:00007fa9703a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.651885][T11067] RAX: ffffffffffffffda RBX: 00007fa96f7c5fa0 RCX: 00007fa96f58ebe9 [ 432.651900][T11067] RDX: 0000000004040000 RSI: 00002000000015c0 RDI: 0000000000000004 [ 432.651913][T11067] RBP: 00007fa9703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 432.651926][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.651938][T11067] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 432.651971][T11067] [ 433.533250][ T44] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 433.701233][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 433.716986][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.759034][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.791409][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 433.803754][ T44] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 433.823534][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.851372][ T44] usb 1-1: config 0 descriptor?? [ 434.270097][ T5918] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 434.321691][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.328905][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.336417][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.343957][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.353531][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.371110][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.378186][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.386166][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.407788][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.430958][ T5851] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 434.440185][ T44] cougar 0003:060B:500A.001A: unknown main item tag 0x0 [ 434.448111][ T44] cougar 0003:060B:500A.001A: unexpected long global item [ 434.465087][ T5918] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 434.476820][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.493127][ T44] cougar 0003:060B:500A.001A: parse failed [ 434.499117][ T44] cougar 0003:060B:500A.001A: probe with driver cougar failed with error -22 [ 434.526037][ T5918] usb 4-1: Product: syz [ 434.533505][ T5918] usb 4-1: Manufacturer: syz [ 434.538164][ T5918] usb 4-1: SerialNumber: syz [ 434.559834][ T44] usb 1-1: USB disconnect, device number 124 [ 434.569263][ T5918] usb 4-1: config 0 descriptor?? [ 434.594292][ T5918] gspca_main: sq930x-2.14.0 probing 2770:930c [ 434.614952][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.630080][ T5851] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 434.649844][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.673741][ T5851] usb 7-1: config 0 descriptor?? [ 435.107384][T11122] overlayfs: failed to resolve './file1': -2 [ 435.541226][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1613'. [ 435.741542][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.757870][ T5851] nintendo 0003:057E:200E.001B: item fetching failed at offset 5/7 [ 435.776827][ T5851] nintendo 0003:057E:200E.001B: HID parse failed [ 435.812744][ T5851] nintendo 0003:057E:200E.001B: probe - fail = -22 [ 435.833928][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.850800][ T5851] nintendo 0003:057E:200E.001B: probe with driver nintendo failed with error -22 [ 435.972770][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.983436][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.195568][T11137] FAULT_INJECTION: forcing a failure. [ 436.195568][T11137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.221683][T11137] CPU: 1 UID: 0 PID: 11137 Comm: syz.0.1626 Not tainted syzkaller #0 PREEMPT(full) [ 436.221716][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.221732][T11137] Call Trace: [ 436.221741][T11137] [ 436.221752][T11137] dump_stack_lvl+0x189/0x250 [ 436.221783][T11137] ? __pfx____ratelimit+0x10/0x10 [ 436.221817][T11137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.221839][T11137] ? __pfx__printk+0x10/0x10 [ 436.221873][T11137] ? __might_fault+0xb0/0x130 [ 436.221910][T11137] should_fail_ex+0x414/0x560 [ 436.221943][T11137] _copy_from_user+0x2d/0xb0 [ 436.221967][T11137] ___sys_sendmsg+0x158/0x2a0 [ 436.222005][T11137] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.222078][T11137] ? __might_fault+0xb0/0x130 [ 436.222105][T11137] __sys_sendmmsg+0x227/0x430 [ 436.222137][T11137] ? __pfx___sys_sendmmsg+0x10/0x10 [ 436.222173][T11137] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.222216][T11137] ? ksys_write+0x22a/0x250 [ 436.222245][T11137] ? __pfx_ksys_write+0x10/0x10 [ 436.222278][T11137] __x64_sys_sendmmsg+0xa0/0xc0 [ 436.222307][T11137] do_syscall_64+0xfa/0xfa0 [ 436.222328][T11137] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.222349][T11137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.222372][T11137] ? clear_bhb_loop+0x60/0xb0 [ 436.222400][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.222422][T11137] RIP: 0033:0x7fa96f58ebe9 [ 436.222443][T11137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.222464][T11137] RSP: 002b:00007fa9703a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 436.222490][T11137] RAX: ffffffffffffffda RBX: 00007fa96f7c5fa0 RCX: 00007fa96f58ebe9 [ 436.222508][T11137] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000003 [ 436.222523][T11137] RBP: 00007fa9703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 436.222538][T11137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.222552][T11137] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 436.222589][T11137] [ 436.502831][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'. [ 436.512758][ T981] usb 6-1: USB disconnect, device number 14 [ 436.533624][ T5918] gspca_sq930x: reg_w 0105 0f00 failed -110 [ 436.750027][ T5918] gspca_sq930x: Sensor ov9630 not yet treated [ 436.757500][ T5918] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 437.053341][T11139] could not allocate digest TFM handle cryptd(streebog512-generic) [ 437.080123][ T981] usb 4-1: USB disconnect, device number 109 [ 437.596798][ T981] usb 7-1: USB disconnect, device number 4 [ 437.689468][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.703381][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.713698][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 437.732414][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 437.744437][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.258259][T11167] chnl_net:caif_netlink_parms(): no params data found [ 438.530619][T11167] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.538787][T11167] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.562266][T11167] bridge_slave_0: entered allmulticast mode [ 438.590560][T11167] bridge_slave_0: entered promiscuous mode [ 438.601804][T11167] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.613491][T11167] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.626687][T11167] bridge_slave_1: entered allmulticast mode [ 438.644063][T11167] bridge_slave_1: entered promiscuous mode [ 438.743223][T11167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.774068][T11167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.895733][T11167] team0: Port device team_slave_0 added [ 438.915071][T11167] team0: Port device team_slave_1 added [ 439.058207][T11167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.067197][T11167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.093199][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.100415][T11167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.114711][T11167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.130052][T11167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.159635][T11167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.181331][T11220] .6: renamed from team_slave_1 (while UP) [ 439.305854][T11167] hsr_slave_0: entered promiscuous mode [ 439.314711][T11167] hsr_slave_1: entered promiscuous mode [ 439.321692][T11167] debugfs: 'hsr0' already exists in 'hsr' [ 439.327516][T11167] Cannot create hsr debugfs directory [ 439.862351][ T5874] Bluetooth: hci0: command tx timeout [ 439.894981][T11234] overlayfs: failed to resolve './file1': -2 [ 440.767177][T11167] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.786410][T11245] input: syz1 as /devices/virtual/input/input27 [ 440.881807][T11167] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.903669][T11167] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.934459][T11167] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.980212][ T10] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 440.997014][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1666'. [ 441.084914][T11167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.117371][T11167] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.133518][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.144608][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.145275][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.151856][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.162109][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.178630][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.195835][ T10] usb 1-1: config 0 descriptor?? [ 441.198221][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.208046][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.418956][ T10] usb 1-1: string descriptor 0 read error: -71 [ 441.440785][ T10] usb 1-1: USB disconnect, device number 125 [ 441.497874][T11167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.820855][T11167] veth0_vlan: entered promiscuous mode [ 441.838793][T11167] veth1_vlan: entered promiscuous mode [ 441.871530][T11167] veth0_macvtap: entered promiscuous mode [ 441.882623][T11167] veth1_macvtap: entered promiscuous mode [ 441.904477][T11167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.924768][T11167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.941295][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.951028][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.962144][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.971167][ T5944] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.991991][ T5874] Bluetooth: hci0: command tx timeout [ 443.020849][ T5874] Bluetooth: hci2: command 0x041b tx timeout [ 443.031399][T11249] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 443.861803][T11249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 443.869775][T11249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 443.879009][T11249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.885445][T11249] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 443.893406][T11249] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 444.049787][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.080369][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.199644][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.354897][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.388236][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.527100][T11278] overlayfs: failed to resolve './file1': -2 [ 445.202309][ T5874] Bluetooth: hci2: command 0x041b tx timeout [ 445.220798][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.364216][T11284] FAULT_INJECTION: forcing a failure. [ 445.364216][T11284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.385914][T11284] CPU: 1 UID: 0 PID: 11284 Comm: syz.6.1673 Not tainted syzkaller #0 PREEMPT(full) [ 445.385945][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.385961][T11284] Call Trace: [ 445.385970][T11284] [ 445.385981][T11284] dump_stack_lvl+0x189/0x250 [ 445.386009][T11284] ? __pfx____ratelimit+0x10/0x10 [ 445.386045][T11284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.386067][T11284] ? __pfx__printk+0x10/0x10 [ 445.386112][T11284] ? __might_fault+0xb0/0x130 [ 445.386151][T11284] should_fail_ex+0x414/0x560 [ 445.386186][T11284] _copy_from_user+0x2d/0xb0 [ 445.386212][T11284] kstrtouint_from_user+0xc4/0x170 [ 445.386249][T11284] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 445.386302][T11284] proc_fail_nth_write+0x88/0x200 [ 445.386327][T11284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 445.386357][T11284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 445.386383][T11284] vfs_write+0x27b/0xb30 [ 445.386422][T11284] ? __pfx_vfs_write+0x10/0x10 [ 445.386452][T11284] ? __fget_files+0x2a/0x420 [ 445.386490][T11284] ? __fget_files+0x3a0/0x420 [ 445.386520][T11284] ? __fget_files+0x2a/0x420 [ 445.386562][T11284] ksys_write+0x145/0x250 [ 445.386594][T11284] ? __pfx_ksys_write+0x10/0x10 [ 445.386626][T11284] ? do_syscall_64+0xbe/0xfa0 [ 445.386653][T11284] do_syscall_64+0xfa/0xfa0 [ 445.386674][T11284] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.386696][T11284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.386720][T11284] ? clear_bhb_loop+0x60/0xb0 [ 445.386749][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.386772][T11284] RIP: 0033:0x7f659198d69f [ 445.386795][T11284] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 445.386817][T11284] RSP: 002b:00007f658fbf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 445.386841][T11284] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f659198d69f [ 445.386858][T11284] RDX: 0000000000000001 RSI: 00007f658fbf60a0 RDI: 0000000000000003 [ 445.386874][T11284] RBP: 00007f658fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 445.386890][T11284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 445.386904][T11284] R13: 00007f6591bc6038 R14: 00007f6591bc5fa0 R15: 00007fff268876f8 [ 445.386944][T11284] [ 445.389018][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.518232][T11286] FAULT_INJECTION: forcing a failure. [ 445.518232][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 445.597118][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.597187][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.745549][T11286] CPU: 0 UID: 0 PID: 11286 Comm: syz.0.1672 Not tainted syzkaller #0 PREEMPT(full) [ 445.745582][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.745597][T11286] Call Trace: [ 445.745606][T11286] [ 445.745617][T11286] dump_stack_lvl+0x189/0x250 [ 445.745645][T11286] ? __pfx____ratelimit+0x10/0x10 [ 445.745680][T11286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.745701][T11286] ? __pfx__printk+0x10/0x10 [ 445.745742][T11286] ? __pfx___might_resched+0x10/0x10 [ 445.745775][T11286] should_fail_ex+0x414/0x560 [ 445.745809][T11286] should_failslab+0xa8/0x100 [ 445.745839][T11286] __kmalloc_cache_noprof+0x6f/0x6f0 [ 445.745864][T11286] ? __kasan_kmalloc+0x93/0xb0 [ 445.745887][T11286] ? fuse_file_alloc+0x56/0x230 [ 445.745925][T11286] fuse_file_alloc+0x56/0x230 [ 445.745960][T11286] fuse_create_open+0x1fc/0xc80 [ 445.745998][T11286] ? do_raw_spin_unlock+0x122/0x240 [ 445.746038][T11286] ? __pfx_fuse_create_open+0x10/0x10 [ 445.746080][T11286] ? fuse_change_entry_timeout+0x2d2/0x430 [ 445.746124][T11286] ? fuse_lookup+0x553/0x640 [ 445.746176][T11286] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 445.746200][T11286] ? from_kgid+0x1b0/0x650 [ 445.746229][T11286] fuse_atomic_open+0x294/0x440 [ 445.746265][T11286] ? __pfx_fuse_atomic_open+0x10/0x10 [ 445.746297][T11286] path_openat+0xf66/0x3830 [ 445.746362][T11286] ? __pfx_path_openat+0x10/0x10 [ 445.746406][T11286] do_filp_open+0x1fa/0x410 [ 445.746428][T11286] ? __lock_acquire+0xab9/0xd20 [ 445.746455][T11286] ? __pfx_do_filp_open+0x10/0x10 [ 445.746505][T11286] ? _raw_spin_unlock+0x28/0x50 [ 445.746536][T11286] ? alloc_fd+0x64c/0x6c0 [ 445.746578][T11286] do_sys_openat2+0x121/0x1c0 [ 445.746604][T11286] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.746627][T11286] ? ksys_write+0x22a/0x250 [ 445.746657][T11286] ? __pfx_ksys_write+0x10/0x10 [ 445.746688][T11286] __x64_sys_creat+0x8f/0xc0 [ 445.746714][T11286] do_syscall_64+0xfa/0xfa0 [ 445.746734][T11286] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.746755][T11286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.746778][T11286] ? clear_bhb_loop+0x60/0xb0 [ 445.746806][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.746829][T11286] RIP: 0033:0x7fa96f58ebe9 [ 445.746849][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.746870][T11286] RSP: 002b:00007fa970384038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 445.746895][T11286] RAX: ffffffffffffffda RBX: 00007fa96f7c6090 RCX: 00007fa96f58ebe9 [ 445.746912][T11286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 445.746927][T11286] RBP: 00007fa970384090 R08: 0000000000000000 R09: 0000000000000000 [ 445.746942][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.746955][T11286] R13: 00007fa96f7c6128 R14: 00007fa96f7c6090 R15: 00007ffe6d47ec58 [ 445.746993][T11286] [ 446.070487][T11294] kvm: user requested TSC rate below hardware speed [ 446.084492][ T5874] Bluetooth: hci0: command 0x0419 tx timeout [ 446.127132][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 446.172202][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 446.191837][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 446.264827][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.274198][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.347450][T11302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.395548][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.567408][ T30] audit: type=1326 audit(1757105704.192:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659198ebe9 code=0x7ffc0000 [ 446.663836][T11305] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4004af07, magic af != 6b] [ 446.774553][T11308] fuseblk: Unknown parameter 'smackfstransmute' [ 446.780696][ T30] audit: type=1326 audit(1757105704.192:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f659198d550 code=0x7ffc0000 [ 446.782936][T11308] Scaler: ================= START STATUS ================= [ 446.843887][T11308] Scaler: ================== END STATUS ================== [ 446.868254][ T30] audit: type=1326 audit(1757105704.192:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659198ebe9 code=0x7ffc0000 [ 446.897253][ T30] audit: type=1326 audit(1757105704.222:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659198ebe9 code=0x7ffc0000 [ 446.947789][ T30] audit: type=1326 audit(1757105704.322:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f659198ebe9 code=0x7ffc0000 [ 446.972854][ T30] audit: type=1326 audit(1757105704.322:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659198ebe9 code=0x7ffc0000 [ 446.996375][ T30] audit: type=1326 audit(1757105704.322:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659198ebe9 code=0x7ffc0000 [ 447.099691][ T36] bridge_slave_1: left allmulticast mode [ 447.127311][ T36] bridge_slave_1: left promiscuous mode [ 447.150313][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.179843][ T36] bridge_slave_0: left allmulticast mode [ 447.186262][ T36] bridge_slave_0: left promiscuous mode [ 447.192468][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.260426][ T5865] Bluetooth: hci2: command 0x041b tx timeout [ 447.330193][ T30] audit: type=1326 audit(1757105704.952:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f659198ebe9 code=0x7ffc0000 [ 447.687668][ T44] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 448.180519][ T5865] Bluetooth: hci0: command 0x0419 tx timeout [ 448.380115][ T5865] Bluetooth: hci3: command tx timeout [ 448.423621][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 448.433238][ T44] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 448.457312][ T44] usb 7-1: config 0 has no interface number 0 [ 448.502112][ T44] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 448.516064][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.524494][ T44] usb 7-1: Product: syz [ 448.528843][ T44] usb 7-1: Manufacturer: syz [ 448.544612][ T44] usb 7-1: SerialNumber: syz [ 448.563567][ T44] usb 7-1: config 0 descriptor?? [ 448.582174][T11324] FAULT_INJECTION: forcing a failure. [ 448.582174][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 448.595756][T11324] CPU: 0 UID: 0 PID: 11324 Comm: syz.0.1680 Not tainted syzkaller #0 PREEMPT(full) [ 448.595789][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.595804][T11324] Call Trace: [ 448.595813][T11324] [ 448.595824][T11324] dump_stack_lvl+0x189/0x250 [ 448.595851][T11324] ? __pfx____ratelimit+0x10/0x10 [ 448.595886][T11324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.595909][T11324] ? __pfx__printk+0x10/0x10 [ 448.595946][T11324] ? __lock_acquire+0xab9/0xd20 [ 448.595978][T11324] should_fail_ex+0x414/0x560 [ 448.596011][T11324] should_failslab+0xa8/0x100 [ 448.596040][T11324] kmem_cache_alloc_noprof+0x74/0x6e0 [ 448.596065][T11324] ? skb_clone+0x212/0x3a0 [ 448.596096][T11324] skb_clone+0x212/0x3a0 [ 448.596124][T11324] __netlink_deliver_tap+0x404/0x850 [ 448.596160][T11324] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.596185][T11324] netlink_deliver_tap+0x19c/0x1b0 [ 448.596207][T11324] netlink_unicast+0x7fa/0x9e0 [ 448.596248][T11324] ? __pfx_netlink_unicast+0x10/0x10 [ 448.596281][T11324] ? netlink_sendmsg+0x642/0xb30 [ 448.596300][T11324] ? skb_put+0x11b/0x210 [ 448.596325][T11324] netlink_sendmsg+0x805/0xb30 [ 448.596358][T11324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.596384][T11324] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.596419][T11324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.596450][T11324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.596481][T11324] __sock_sendmsg+0x219/0x270 [ 448.596515][T11324] ____sys_sendmsg+0x505/0x830 [ 448.596546][T11324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.596581][T11324] ? import_iovec+0x74/0xa0 [ 448.596608][T11324] ___sys_sendmsg+0x21f/0x2a0 [ 448.596635][T11324] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.596701][T11324] ? __fget_files+0x2a/0x420 [ 448.596737][T11324] ? __fget_files+0x3a0/0x420 [ 448.596777][T11324] __x64_sys_sendmsg+0x19b/0x260 [ 448.596827][T11324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.596863][T11324] ? __pfx_ksys_write+0x10/0x10 [ 448.596894][T11324] ? do_syscall_64+0xbe/0xfa0 [ 448.596918][T11324] do_syscall_64+0xfa/0xfa0 [ 448.596941][T11324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.596961][T11324] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.596985][T11324] ? clear_bhb_loop+0x60/0xb0 [ 448.597011][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.597034][T11324] RIP: 0033:0x7fa96f58ebe9 [ 448.597055][T11324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.597074][T11324] RSP: 002b:00007fa9703a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.597099][T11324] RAX: ffffffffffffffda RBX: 00007fa96f7c5fa0 RCX: 00007fa96f58ebe9 [ 448.597116][T11324] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 448.597131][T11324] RBP: 00007fa9703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 448.597145][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.597159][T11324] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 448.597190][ T44] smsc95xx v2.0.0 [ 448.597194][T11324] [ 448.597356][T11324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1680'. [ 448.933247][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.947600][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.969416][ T36] bond0 (unregistering): Released all slaves [ 449.000600][T11314] netdevsim netdevsim7: Firmware load for '../file0/file0' refused, path contains '..' component [ 449.027748][T11290] pim6reg: entered allmulticast mode [ 449.034758][T11297] pim6reg: left allmulticast mode [ 449.366908][ T44] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 449.387220][ T44] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 449.405963][ T44] usb 7-1: USB disconnect, device number 5 [ 449.539108][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1684'. [ 449.695806][ T36] hsr_slave_0: left promiscuous mode [ 449.715615][ T36] hsr_slave_1: left promiscuous mode [ 449.726441][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.734709][T11344] block nbd6: Send control failed (result -22) [ 449.737709][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.750754][T11344] block nbd6: Request send failed, requeueing [ 449.751295][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.757469][ T1077] block nbd6: Dead connection, failed to find a fallback [ 449.772055][ T1077] block nbd6: shutting down sockets [ 449.777293][ T1077] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 449.787971][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.881875][ T36] veth1_macvtap: left promiscuous mode [ 449.888781][ T36] veth0_macvtap: left promiscuous mode [ 449.894928][ T36] veth1_vlan: left promiscuous mode [ 449.903249][ T36] veth0_vlan: left promiscuous mode [ 450.240862][ T5865] Bluetooth: hci0: command 0x0419 tx timeout [ 450.480909][ T5865] Bluetooth: hci3: command tx timeout [ 451.303925][T11373] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1690'. [ 451.609614][ T36] team0 (unregistering): Port device team_slave_1 removed [ 451.672999][ T36] team0 (unregistering): Port device team_slave_0 removed [ 452.310418][ T5865] Bluetooth: hci0: command 0x0419 tx timeout [ 452.354428][T11341] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1684'. [ 452.380033][T11363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1688'. [ 452.389612][T11363] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.417595][T11295] chnl_net:caif_netlink_parms(): no params data found [ 452.541821][ T5874] Bluetooth: hci3: command tx timeout [ 452.688819][T11384] netlink: 'syz.0.1693': attribute type 3 has an invalid length. [ 452.880303][ T5932] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 452.940599][T11295] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.948023][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.978900][T11295] bridge_slave_0: entered allmulticast mode [ 452.983822][T11392] netlink: 'syz.6.1695': attribute type 6 has an invalid length. [ 453.005192][T11295] bridge_slave_0: entered promiscuous mode [ 453.027378][T11295] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.037849][T11392] block nbd0: Attempted send on invalid socket [ 453.046160][T11392] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 453.078068][ T5932] usb 8-1: Using ep0 maxpacket: 8 [ 453.086155][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.090881][ T5932] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.114702][T11295] bridge_slave_1: entered allmulticast mode [ 453.124860][T11295] bridge_slave_1: entered promiscuous mode [ 453.126757][ T5932] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 453.170109][ T5932] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 453.192830][ T5932] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 453.219078][ T5932] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 453.230013][ T5918] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 453.249487][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.308622][ T5932] hub 8-1:1.0: bad descriptor, ignoring hub [ 453.329401][ T5932] hub 8-1:1.0: probe with driver hub failed with error -5 [ 453.349335][ T5932] cdc_wdm 8-1:1.0: skipping garbage [ 453.368072][ T5932] cdc_wdm 8-1:1.0: skipping garbage [ 453.394653][ T5932] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 453.424719][ T5932] cdc_wdm 8-1:1.0: Unknown control protocol [ 453.499128][T11379] FAULT_INJECTION: forcing a failure. [ 453.499128][T11379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.523649][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.7.1692 Not tainted syzkaller #0 PREEMPT(full) [ 453.523682][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.523697][T11379] Call Trace: [ 453.523707][T11379] [ 453.523718][T11379] dump_stack_lvl+0x189/0x250 [ 453.523746][T11379] ? __pfx____ratelimit+0x10/0x10 [ 453.523782][T11379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.523804][T11379] ? __pfx__printk+0x10/0x10 [ 453.523852][T11379] should_fail_ex+0x414/0x560 [ 453.523886][T11379] _copy_to_user+0x31/0xb0 [ 453.523912][T11379] simple_read_from_buffer+0xe1/0x170 [ 453.523947][T11379] proc_fail_nth_read+0x1b3/0x220 [ 453.523974][T11379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.524001][T11379] ? rw_verify_area+0x2a6/0x4d0 [ 453.524025][T11379] ? __lock_acquire+0xab9/0xd20 [ 453.524049][T11379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.524074][T11379] vfs_read+0x200/0xa30 [ 453.524100][T11379] ? fdget_pos+0x247/0x320 [ 453.524136][T11379] ? __pfx___mutex_lock+0x10/0x10 [ 453.524160][T11379] ? __pfx_vfs_read+0x10/0x10 [ 453.524189][T11379] ? __fget_files+0x2a/0x420 [ 453.524225][T11379] ? __fget_files+0x3a0/0x420 [ 453.524255][T11379] ? __fget_files+0x2a/0x420 [ 453.524302][T11379] ksys_read+0x145/0x250 [ 453.524331][T11379] ? __pfx_ksys_read+0x10/0x10 [ 453.524363][T11379] ? do_syscall_64+0xbe/0xfa0 [ 453.524389][T11379] do_syscall_64+0xfa/0xfa0 [ 453.524410][T11379] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.524431][T11379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.524454][T11379] ? clear_bhb_loop+0x60/0xb0 [ 453.524483][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.524505][T11379] RIP: 0033:0x7fb89178d5fc [ 453.524526][T11379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 453.524547][T11379] RSP: 002b:00007fb8925d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.524572][T11379] RAX: ffffffffffffffda RBX: 00007fb8919c5fa0 RCX: 00007fb89178d5fc [ 453.524590][T11379] RDX: 000000000000000f RSI: 00007fb8925d60a0 RDI: 0000000000000004 [ 453.524605][T11379] RBP: 00007fb8925d6090 R08: 0000000000000000 R09: 00007fb8925d5987 [ 453.524621][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.524635][T11379] R13: 00007fb8919c6038 R14: 00007fb8919c5fa0 R15: 00007ffc77d54078 [ 453.524673][T11379] [ 453.782121][ T5918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 453.791646][ T5918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.867056][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.274164][T11295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.316420][ T5918] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.358601][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.380526][ T5874] Bluetooth: hci0: command 0x0419 tx timeout [ 454.405360][T11295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.429045][ T5918] usb 1-1: Product: syz [ 454.440417][ T5918] usb 1-1: Manufacturer: syz [ 454.490623][ T5918] usb 1-1: SerialNumber: syz [ 454.582402][ T5932] usb 8-1: USB disconnect, device number 2 [ 454.620159][ T5874] Bluetooth: hci3: command tx timeout [ 454.641507][T11295] team0: Port device team_slave_0 added [ 454.666835][T11295] team0: Port device team_slave_1 added [ 454.694890][T11415] FAULT_INJECTION: forcing a failure. [ 454.694890][T11415] name failslab, interval 1, probability 0, space 0, times 0 [ 454.715512][T11415] CPU: 0 UID: 0 PID: 11415 Comm: syz.7.1700 Not tainted syzkaller #0 PREEMPT(full) [ 454.715545][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.715560][T11415] Call Trace: [ 454.715571][T11415] [ 454.715581][T11415] dump_stack_lvl+0x189/0x250 [ 454.715609][T11415] ? __pfx____ratelimit+0x10/0x10 [ 454.715648][T11415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.715671][T11415] ? __pfx__printk+0x10/0x10 [ 454.715710][T11415] ? __pfx___might_resched+0x10/0x10 [ 454.715739][T11415] ? fs_reclaim_acquire+0x7d/0x100 [ 454.715774][T11415] should_fail_ex+0x414/0x560 [ 454.715809][T11415] should_failslab+0xa8/0x100 [ 454.715842][T11415] __kmalloc_cache_noprof+0x6f/0x6f0 [ 454.715868][T11415] ? nft_pernet+0x23/0x240 [ 454.715896][T11415] ? nf_tables_newtable+0x435/0x1890 [ 454.715930][T11415] nf_tables_newtable+0x435/0x1890 [ 454.715955][T11415] ? nfnl_pernet+0x2/0x240 [ 454.716016][T11415] nfnetlink_rcv+0x1132/0x2520 [ 454.716087][T11415] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 454.716140][T11415] ? ref_tracker_free+0x63a/0x7d0 [ 454.716203][T11415] ? __netlink_deliver_tap+0x807/0x850 [ 454.716226][T11415] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.716280][T11415] netlink_unicast+0x82c/0x9e0 [ 454.716322][T11415] ? __pfx_netlink_unicast+0x10/0x10 [ 454.716358][T11415] ? netlink_sendmsg+0x642/0xb30 [ 454.716377][T11415] ? skb_put+0x11b/0x210 [ 454.716405][T11415] netlink_sendmsg+0x805/0xb30 [ 454.716437][T11415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.716465][T11415] ? aa_sock_msg_perm+0xf1/0x1d0 [ 454.716501][T11415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.716532][T11415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.716556][T11415] __sock_sendmsg+0x219/0x270 [ 454.716590][T11415] ____sys_sendmsg+0x505/0x830 [ 454.716623][T11415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.716658][T11415] ? import_iovec+0x74/0xa0 [ 454.716685][T11415] ___sys_sendmsg+0x21f/0x2a0 [ 454.716714][T11415] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.716780][T11415] ? __fget_files+0x2a/0x420 [ 454.716811][T11415] ? __fget_files+0x3a0/0x420 [ 454.716855][T11415] __x64_sys_sendmsg+0x19b/0x260 [ 454.716884][T11415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.716922][T11415] ? __pfx_ksys_write+0x10/0x10 [ 454.716954][T11415] ? do_syscall_64+0xbe/0xfa0 [ 454.716989][T11415] do_syscall_64+0xfa/0xfa0 [ 454.717009][T11415] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.717031][T11415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.717055][T11415] ? clear_bhb_loop+0x60/0xb0 [ 454.717084][T11415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.717106][T11415] RIP: 0033:0x7fb89178ebe9 [ 454.717127][T11415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.717149][T11415] RSP: 002b:00007fb8925d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.717174][T11415] RAX: ffffffffffffffda RBX: 00007fb8919c5fa0 RCX: 00007fb89178ebe9 [ 454.717192][T11415] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 454.717208][T11415] RBP: 00007fb8925d6090 R08: 0000000000000000 R09: 0000000000000000 [ 454.717223][T11415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.717237][T11415] R13: 00007fb8919c6038 R14: 00007fb8919c5fa0 R15: 00007ffc77d54078 [ 454.717272][T11415] [ 455.137510][ T5918] usb 1-1: USB disconnect, device number 126 [ 455.162318][T11295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.169336][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.197499][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 455.209298][T11295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.224075][T11295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.231290][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.257915][T11295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.307932][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.344535][T11295] hsr_slave_0: entered promiscuous mode [ 455.351498][T11295] hsr_slave_1: entered promiscuous mode [ 455.357956][T11295] debugfs: 'hsr0' already exists in 'hsr' [ 455.363847][T11295] Cannot create hsr debugfs directory [ 455.369349][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 455.377346][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 455.387786][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 455.397337][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.405532][ T9] usb 7-1: Product: 䴍돠뽂媃삋쏫葏䭦妳紏➒ᵿ鷍Қ䂭켿꒾輌䚼︅銫崶腬┐궸麙昄砠권곋꩟떏뛸ㅱ圝匋 [ 455.421212][ T9] usb 7-1: Manufacturer: Dz⭧㈝杳Ʃ잭矨ෝ菋㴮웿搦鵡㏯粖ᮐ掷몃䖆ວ偄芟앂劸䳋뒁䳗氞䢢᯳㢾≒鿪検◖ꝿ饩友㴴뗖竬ꇠ刌ᨮ印쭿脃몇ᑕ닁ﹾ힜껏閇屭ᄎ⾵㳡⎡麦閹锚ҏ䧤새ᚕ⌛錯浥΂䍥㢈Ⱋ逯禲♑琩毈ካ憅蹗䄯゙⯒ [ 455.450534][ T9] usb 7-1: SerialNumber: ࡠ [ 455.919839][ T9] usb 7-1: USB disconnect, device number 6 [ 455.979695][T11442] FAULT_INJECTION: forcing a failure. [ 455.979695][T11442] name failslab, interval 1, probability 0, space 0, times 0 [ 456.040202][T11442] CPU: 1 UID: 0 PID: 11442 Comm: syz.0.1705 Not tainted syzkaller #0 PREEMPT(full) [ 456.040234][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.040254][T11442] Call Trace: [ 456.040263][T11442] [ 456.040274][T11442] dump_stack_lvl+0x189/0x250 [ 456.040301][T11442] ? __pfx____ratelimit+0x10/0x10 [ 456.040335][T11442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.040355][T11442] ? __pfx__printk+0x10/0x10 [ 456.040392][T11442] ? __pfx___might_resched+0x10/0x10 [ 456.040420][T11442] ? fs_reclaim_acquire+0x7d/0x100 [ 456.040453][T11442] should_fail_ex+0x414/0x560 [ 456.040486][T11442] should_failslab+0xa8/0x100 [ 456.040517][T11442] __kmalloc_cache_noprof+0x6f/0x6f0 [ 456.040542][T11442] ? nf_tables_newflowtable+0x901/0x2390 [ 456.040578][T11442] nf_tables_newflowtable+0x901/0x2390 [ 456.040624][T11442] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 456.040674][T11442] ? __nla_parse+0x40/0x60 [ 456.040714][T11442] nfnetlink_rcv+0x1132/0x2520 [ 456.040781][T11442] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 456.040831][T11442] ? ref_tracker_free+0x63a/0x7d0 [ 456.040891][T11442] ? __netlink_deliver_tap+0x807/0x850 [ 456.040913][T11442] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.040953][T11442] netlink_unicast+0x82c/0x9e0 [ 456.040996][T11442] ? __pfx_netlink_unicast+0x10/0x10 [ 456.041054][T11442] ? netlink_sendmsg+0x642/0xb30 [ 456.041074][T11442] ? skb_put+0x11b/0x210 [ 456.041101][T11442] netlink_sendmsg+0x805/0xb30 [ 456.041135][T11442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.041161][T11442] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.041198][T11442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.041229][T11442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.041252][T11442] __sock_sendmsg+0x219/0x270 [ 456.041288][T11442] ____sys_sendmsg+0x505/0x830 [ 456.041320][T11442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.041356][T11442] ? import_iovec+0x74/0xa0 [ 456.041382][T11442] ___sys_sendmsg+0x21f/0x2a0 [ 456.041410][T11442] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.041475][T11442] ? __fget_files+0x2a/0x420 [ 456.041504][T11442] ? __fget_files+0x3a0/0x420 [ 456.041544][T11442] __x64_sys_sendmsg+0x19b/0x260 [ 456.041571][T11442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.041606][T11442] ? __pfx_ksys_write+0x10/0x10 [ 456.041637][T11442] ? do_syscall_64+0xbe/0xfa0 [ 456.041663][T11442] do_syscall_64+0xfa/0xfa0 [ 456.041684][T11442] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.041704][T11442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.041727][T11442] ? clear_bhb_loop+0x60/0xb0 [ 456.041755][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.041778][T11442] RIP: 0033:0x7fa96f58ebe9 [ 456.041799][T11442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.041819][T11442] RSP: 002b:00007fa9703a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.041844][T11442] RAX: ffffffffffffffda RBX: 00007fa96f7c5fa0 RCX: 00007fa96f58ebe9 [ 456.041861][T11442] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 456.041876][T11442] RBP: 00007fa9703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 456.041891][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.041905][T11442] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 456.041942][T11442] [ 456.432082][T11295] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 456.484802][T11295] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 456.496293][T11295] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 456.507652][T11295] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 457.488248][T11295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.527227][T11471] FAULT_INJECTION: forcing a failure. [ 457.527227][T11471] name failslab, interval 1, probability 0, space 0, times 0 [ 457.549737][T11295] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.560994][ T5918] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 457.586155][T11471] CPU: 0 UID: 0 PID: 11471 Comm: syz.0.1711 Not tainted syzkaller #0 PREEMPT(full) [ 457.586187][T11471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.586201][T11471] Call Trace: [ 457.586212][T11471] [ 457.586222][T11471] dump_stack_lvl+0x189/0x250 [ 457.586249][T11471] ? __pfx____ratelimit+0x10/0x10 [ 457.586281][T11471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.586302][T11471] ? __pfx__printk+0x10/0x10 [ 457.586341][T11471] ? __pfx___might_resched+0x10/0x10 [ 457.586374][T11471] should_fail_ex+0x414/0x560 [ 457.586405][T11471] should_failslab+0xa8/0x100 [ 457.586434][T11471] __kmalloc_noprof+0xcb/0x7f0 [ 457.586456][T11471] ? kfree+0x4d/0x6d0 [ 457.586472][T11471] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 457.586516][T11471] tomoyo_realpath_from_path+0xe3/0x5d0 [ 457.586565][T11471] tomoyo_check_open_permission+0x1c1/0x3b0 [ 457.586595][T11471] ? dentry_open+0x44/0xa0 [ 457.586640][T11471] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 457.586671][T11471] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 457.586699][T11471] ? __x64_sys_rmdir+0x47/0x50 [ 457.586763][T11471] ? lockref_get+0x15/0x60 [ 457.586824][T11471] ? tomoyo_file_open+0x165/0x220 [ 457.586851][T11471] security_file_open+0xb1/0x270 [ 457.586882][T11471] do_dentry_open+0x384/0x13f0 [ 457.586924][T11471] ? vfs_open+0x31/0x340 [ 457.586962][T11471] vfs_open+0x3b/0x340 [ 457.586998][T11471] dentry_open+0x61/0xa0 [ 457.587031][T11471] ovl_dir_read+0x85/0x5f0 [ 457.587059][T11471] ? do_raw_spin_lock+0x121/0x290 [ 457.587099][T11471] ? __pfx_ovl_dir_read+0x10/0x10 [ 457.587123][T11471] ? ovl_path_upper+0x105/0x170 [ 457.587148][T11471] ? ovl_path_next+0x3b8/0x470 [ 457.587185][T11471] ovl_dir_read_merged+0x2b8/0x4b0 [ 457.587215][T11471] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 457.587242][T11471] ? dput+0x37/0x2b0 [ 457.587269][T11471] ? __pfx_ovl_fill_merge+0x10/0x10 [ 457.587305][T11471] ? dput+0x37/0x2b0 [ 457.587336][T11471] ? ovl_revert_creds+0x14/0x50 [ 457.587370][T11471] ? ovl_lower_positive+0x546/0x5d0 [ 457.587411][T11471] ovl_check_empty_dir+0xbd/0x490 [ 457.587444][T11471] ? __pfx_ovl_check_empty_dir+0x10/0x10 [ 457.587481][T11471] ovl_do_remove+0x1bc/0xda0 [ 457.587516][T11471] ? __pfx_ovl_do_remove+0x10/0x10 [ 457.587542][T11471] ? down_write+0x162/0x1f0 [ 457.587567][T11471] ? __pfx_down_write+0x10/0x10 [ 457.587608][T11471] ? do_raw_spin_unlock+0x122/0x240 [ 457.587641][T11471] ? bpf_lsm_inode_rmdir+0x9/0x20 [ 457.587677][T11471] vfs_rmdir+0x3b7/0x520 [ 457.587709][T11471] do_rmdir+0x25f/0x550 [ 457.587739][T11471] ? __pfx_do_rmdir+0x10/0x10 [ 457.587765][T11471] ? strncpy_from_user+0x150/0x290 [ 457.587795][T11471] ? getname_flags+0x1e5/0x540 [ 457.587831][T11471] __x64_sys_rmdir+0x47/0x50 [ 457.587857][T11471] do_syscall_64+0xfa/0xfa0 [ 457.587877][T11471] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.587898][T11471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.587920][T11471] ? clear_bhb_loop+0x60/0xb0 [ 457.587948][T11471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.587969][T11471] RIP: 0033:0x7fa96f58ebe9 [ 457.587989][T11471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.588009][T11471] RSP: 002b:00007fa9703a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 457.588033][T11471] RAX: ffffffffffffffda RBX: 00007fa96f7c5fa0 RCX: 00007fa96f58ebe9 [ 457.588050][T11471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 457.588064][T11471] RBP: 00007fa9703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 457.588079][T11471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.588092][T11471] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 457.588131][T11471] [ 457.698796][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.704962][T11471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 457.707956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.021512][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.028730][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.045451][ T5918] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 458.054704][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.063358][ T5918] usb 7-1: Product: syz [ 458.067626][ T5918] usb 7-1: Manufacturer: syz [ 458.078779][ T5918] usb 7-1: SerialNumber: syz [ 458.103514][ T5918] usb 7-1: config 0 descriptor?? [ 458.352616][ T5918] hso 7-1:0.0: Failed to find BULK IN ep [ 458.382551][ T5918] usb-storage 7-1:0.0: USB Mass Storage device detected [ 458.567227][ T44] usb 7-1: USB disconnect, device number 7 [ 458.630550][ T981] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 458.665007][T11295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.793966][ T981] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 458.802379][ T981] usb 1-1: config 0 has no interface number 0 [ 458.820756][ T981] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 458.850541][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.872780][ T981] usb 1-1: config 0 descriptor?? [ 458.905627][ T981] usb 1-1: selecting invalid altsetting 1 [ 458.923328][ T981] dvb_ttusb_budget: ttusb_init_controller: error [ 458.929730][ T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 459.068892][ T981] DVB: Unable to find symbol cx22700_attach() [ 459.218321][ T981] DVB: Unable to find symbol tda10046_attach() [ 459.225765][ T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 459.250295][ T981] usb 1-1: USB disconnect, device number 127 [ 460.318158][T11295] veth0_vlan: entered promiscuous mode [ 460.379351][T11295] veth1_vlan: entered promiscuous mode [ 460.467961][T11538] FAULT_INJECTION: forcing a failure. [ 460.467961][T11538] name failslab, interval 1, probability 0, space 0, times 0 [ 460.496388][T11295] veth0_macvtap: entered promiscuous mode [ 460.516024][T11538] CPU: 1 UID: 0 PID: 11538 Comm: syz.7.1721 Not tainted syzkaller #0 PREEMPT(full) [ 460.516054][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.516068][T11538] Call Trace: [ 460.516077][T11538] [ 460.516088][T11538] dump_stack_lvl+0x189/0x250 [ 460.516116][T11538] ? __pfx____ratelimit+0x10/0x10 [ 460.516153][T11538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.516174][T11538] ? __pfx__printk+0x10/0x10 [ 460.516211][T11538] ? __pfx___might_resched+0x10/0x10 [ 460.516241][T11538] ? fs_reclaim_acquire+0x7d/0x100 [ 460.516275][T11538] should_fail_ex+0x414/0x560 [ 460.516307][T11538] should_failslab+0xa8/0x100 [ 460.516336][T11538] __kmalloc_cache_noprof+0x6f/0x6f0 [ 460.516371][T11538] ? nft_pernet+0x23/0x240 [ 460.516397][T11538] ? nf_tables_newtable+0x435/0x1890 [ 460.516429][T11538] nf_tables_newtable+0x435/0x1890 [ 460.516455][T11538] ? nfnl_pernet+0x2/0x240 [ 460.516517][T11538] nfnetlink_rcv+0x1132/0x2520 [ 460.516582][T11538] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 460.516630][T11538] ? ref_tracker_free+0x63a/0x7d0 [ 460.516691][T11538] ? __netlink_deliver_tap+0x807/0x850 [ 460.516712][T11538] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.516752][T11538] netlink_unicast+0x82c/0x9e0 [ 460.516795][T11538] ? __pfx_netlink_unicast+0x10/0x10 [ 460.516829][T11538] ? netlink_sendmsg+0x642/0xb30 [ 460.516849][T11538] ? skb_put+0x11b/0x210 [ 460.516876][T11538] netlink_sendmsg+0x805/0xb30 [ 460.516908][T11538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.516935][T11538] ? aa_sock_msg_perm+0xf1/0x1d0 [ 460.516971][T11538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.517001][T11538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.517022][T11538] __sock_sendmsg+0x219/0x270 [ 460.517057][T11538] ____sys_sendmsg+0x505/0x830 [ 460.517085][T11538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.517113][T11538] ? import_iovec+0x74/0xa0 [ 460.517137][T11538] ___sys_sendmsg+0x21f/0x2a0 [ 460.517164][T11538] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.517227][T11538] ? __fget_files+0x2a/0x420 [ 460.517256][T11538] ? __fget_files+0x3a0/0x420 [ 460.517297][T11538] __x64_sys_sendmsg+0x19b/0x260 [ 460.517326][T11538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.517371][T11538] ? __pfx_ksys_write+0x10/0x10 [ 460.517403][T11538] ? do_syscall_64+0xbe/0xfa0 [ 460.517429][T11538] do_syscall_64+0xfa/0xfa0 [ 460.517447][T11538] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.517468][T11538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.517490][T11538] ? clear_bhb_loop+0x60/0xb0 [ 460.517518][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.517540][T11538] RIP: 0033:0x7fb89178ebe9 [ 460.517551][T11295] veth1_macvtap: entered promiscuous mode [ 460.517561][T11538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.517581][T11538] RSP: 002b:00007fb8925d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.517602][T11538] RAX: ffffffffffffffda RBX: 00007fb8919c5fa0 RCX: 00007fb89178ebe9 [ 460.517617][T11538] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 460.517630][T11538] RBP: 00007fb8925d6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.517644][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.517659][T11538] R13: 00007fb8919c6038 R14: 00007fb8919c5fa0 R15: 00007ffc77d54078 [ 460.517702][T11538] [ 460.570074][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 460.672622][T11295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.867426][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 460.902455][T11295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.922043][T11546] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 460.933245][ T44] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 460.934137][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1724'. [ 460.955930][ T6393] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.970347][ T44] usb 1-1: config 0 has no interface number 0 [ 460.995489][ T6393] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.011809][ T44] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 461.060074][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.068145][ T44] usb 1-1: Product: syz [ 461.093746][ T6393] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.107267][ T44] usb 1-1: Manufacturer: syz [ 461.120920][ T44] usb 1-1: SerialNumber: syz [ 461.134249][ T6393] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.149817][ T44] usb 1-1: config 0 descriptor?? [ 461.191342][ T44] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 461.408007][ T7285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.435223][ T7285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.609764][ T6436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.636117][ T6436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.771067][ T44] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 461.822910][ T44] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 462.109406][T11532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.577151][T11532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.774299][T11566] netlink: 'syz.6.1729': attribute type 10 has an invalid length. [ 462.844651][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 462.879459][ T7666] usb 1-1: USB disconnect, device number 2 [ 462.941911][ T7666] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 463.039054][ T7666] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 463.086357][ T7666] quatech2 1-1:0.51: device disconnected [ 463.105031][ T6436] tipc: Subscription rejected, illegal request [ 463.277438][ T10] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 463.420416][ T7666] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 463.458483][ T10] usb 9-1: config 252 has an invalid interface number: 73 but max is 0 [ 463.479426][ T10] usb 9-1: config 252 has no interface number 0 [ 463.487430][ T10] usb 9-1: config 252 interface 73 altsetting 122 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 463.499730][ T10] usb 9-1: config 252 interface 73 has no altsetting 0 [ 463.520653][ T10] usb 9-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=b8.e5 [ 463.535491][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.543776][ T5932] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 463.557953][T11566] team0 (unregistering): Port device team_slave_0 removed [ 463.558170][ T10] usb 9-1: Product: syz [ 463.578676][ T10] usb 9-1: Manufacturer: syz [ 463.587108][ T10] usb 9-1: SerialNumber: syz [ 463.590229][ T7666] usb 1-1: Using ep0 maxpacket: 16 [ 463.609299][T11566] team0 (unregistering): Port device 5.6 removed [ 463.628700][ T7666] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 463.653843][ T7666] usb 1-1: config 128 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 463.687941][ T7666] usb 1-1: config 128 interface 0 has no altsetting 0 [ 463.699151][ T7666] usb 1-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.00 [ 463.716011][ T5932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.716438][ T7666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.738626][ T5932] usb 8-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 463.762282][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.797036][ T5932] usb 8-1: config 0 descriptor?? [ 463.855865][ T10] ti_usb_3410_5052 9-1:252.73: TI USB 3410 1 port adapter converter detected [ 463.905445][ T10] ti_usb_3410_5052 9-1:252.73: missing endpoints [ 463.946665][ T10] usb 9-1: USB disconnect, device number 2 [ 463.982938][T11588] overlayfs: failed to resolve './file1/file0': -2 [ 464.180985][T11593] FAULT_INJECTION: forcing a failure. [ 464.180985][T11593] name failslab, interval 1, probability 0, space 0, times 0 [ 464.194176][T11593] CPU: 1 UID: 0 PID: 11593 Comm: syz.6.1734 Not tainted syzkaller #0 PREEMPT(full) [ 464.194208][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.194227][T11593] Call Trace: [ 464.194237][T11593] [ 464.194247][T11593] dump_stack_lvl+0x189/0x250 [ 464.194276][T11593] ? __pfx____ratelimit+0x10/0x10 [ 464.194311][T11593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.194334][T11593] ? __pfx__printk+0x10/0x10 [ 464.194375][T11593] ? __pfx___might_resched+0x10/0x10 [ 464.194410][T11593] should_fail_ex+0x414/0x560 [ 464.194444][T11593] should_failslab+0xa8/0x100 [ 464.194475][T11593] __kmalloc_noprof+0xcb/0x7f0 [ 464.194498][T11593] ? kfree+0x4d/0x6d0 [ 464.194517][T11593] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 464.194562][T11593] tomoyo_realpath_from_path+0xe3/0x5d0 [ 464.194615][T11593] tomoyo_check_open_permission+0x1c1/0x3b0 [ 464.194646][T11593] ? dentry_open+0x44/0xa0 [ 464.194679][T11593] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 464.194710][T11593] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 464.194739][T11593] ? __x64_sys_rmdir+0x47/0x50 [ 464.194801][T11593] ? lockref_get+0x15/0x60 [ 464.194847][T11593] ? tomoyo_file_open+0x165/0x220 [ 464.194877][T11593] security_file_open+0xb1/0x270 [ 464.194907][T11593] do_dentry_open+0x384/0x13f0 [ 464.194951][T11593] ? vfs_open+0x31/0x340 [ 464.194990][T11593] vfs_open+0x3b/0x340 [ 464.195036][T11593] dentry_open+0x61/0xa0 [ 464.195071][T11593] ovl_dir_read+0x85/0x5f0 [ 464.195110][T11593] ? __pfx_ovl_dir_read+0x10/0x10 [ 464.195134][T11593] ? ovl_path_upper+0x105/0x170 [ 464.195159][T11593] ? ovl_path_next+0x23c/0x470 [ 464.195199][T11593] ovl_dir_read_merged+0x3bf/0x4b0 [ 464.195225][T11593] ? kasan_quarantine_put+0xdd/0x220 [ 464.195251][T11593] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 464.195276][T11593] ? from_kgid+0x1b0/0x650 [ 464.195301][T11593] ? __pfx_ovl_fill_merge+0x10/0x10 [ 464.195337][T11593] ? security_capable+0x7e/0x2e0 [ 464.195373][T11593] ? ovl_dentry_upper+0x40/0x80 [ 464.195394][T11593] ? ovl_lower_positive+0x436/0x5d0 [ 464.195429][T11593] ? look_up_lock_class+0x74/0x170 [ 464.195455][T11593] ovl_check_empty_dir+0xbd/0x490 [ 464.195491][T11593] ? __pfx_ovl_check_empty_dir+0x10/0x10 [ 464.195530][T11593] ovl_do_remove+0x1bc/0xda0 [ 464.195567][T11593] ? __pfx_ovl_do_remove+0x10/0x10 [ 464.195593][T11593] ? down_write+0x162/0x1f0 [ 464.195619][T11593] ? __pfx_down_write+0x10/0x10 [ 464.195650][T11593] ? do_raw_spin_unlock+0x122/0x240 [ 464.195683][T11593] ? bpf_lsm_inode_rmdir+0x9/0x20 [ 464.195718][T11593] vfs_rmdir+0x3b7/0x520 [ 464.195752][T11593] do_rmdir+0x25f/0x550 [ 464.195783][T11593] ? __pfx_do_rmdir+0x10/0x10 [ 464.195809][T11593] ? strncpy_from_user+0x150/0x290 [ 464.195839][T11593] ? getname_flags+0x1e5/0x540 [ 464.195876][T11593] __x64_sys_rmdir+0x47/0x50 [ 464.195902][T11593] do_syscall_64+0xfa/0xfa0 [ 464.195923][T11593] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.195943][T11593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.195966][T11593] ? clear_bhb_loop+0x60/0xb0 [ 464.195994][T11593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.196026][T11593] RIP: 0033:0x7f659198ebe9 [ 464.196048][T11593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.196069][T11593] RSP: 002b:00007f658fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 464.196094][T11593] RAX: ffffffffffffffda RBX: 00007f6591bc5fa0 RCX: 00007f659198ebe9 [ 464.196111][T11593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 464.196126][T11593] RBP: 00007f658fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 464.196141][T11593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.196171][T11593] R13: 00007f6591bc6038 R14: 00007f6591bc5fa0 R15: 00007fff268876f8 [ 464.196210][T11593] [ 464.196247][T11593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.294420][ T5932] nintendo 0003:057E:200E.001C: item fetching failed at offset 3/7 [ 464.911146][ T5932] nintendo 0003:057E:200E.001C: HID parse failed [ 464.944864][ T5932] nintendo 0003:057E:200E.001C: probe - fail = -22 [ 464.962947][ T5932] nintendo 0003:057E:200E.001C: probe with driver nintendo failed with error -22 [ 464.989027][ T5932] usb 8-1: USB disconnect, device number 3 [ 465.042203][ T44] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 465.257640][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.324739][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.350423][ T44] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 465.359813][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.490453][T11612] netlink: 7986 bytes leftover after parsing attributes in process `syz.7.1738'. [ 465.696618][ T44] usb 9-1: config 0 descriptor?? [ 466.456297][ T44] lg-g15 0003:046D:C222.001D: item fetching failed at offset 5/7 [ 466.493118][ T44] lg-g15 0003:046D:C222.001D: probe with driver lg-g15 failed with error -22 [ 466.509289][ T7666] usb 1-1: string descriptor 0 read error: -71 [ 466.524900][ T7666] usbhid 1-1:128.0: couldn't find an input interrupt endpoint [ 466.532732][ T44] usb 9-1: USB disconnect, device number 3 [ 466.561108][ T7666] usb 1-1: USB disconnect, device number 3 [ 467.180374][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 467.331898][ T10] usb 7-1: device descriptor read/64, error -71 [ 467.580154][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 468.511885][ T10] usb 7-1: device descriptor read/64, error -71 [ 468.625003][ T10] usb usb7-port1: attempt power cycle [ 468.980066][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 468.980080][ T7666] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 469.012035][ T10] usb 7-1: device descriptor read/8, error -71 [ 469.110148][ T7666] usb 9-1: device descriptor read/64, error -71 [ 469.250047][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 469.270682][ T10] usb 7-1: device descriptor read/8, error -71 [ 469.350262][ T7666] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 469.380938][ T10] usb usb7-port1: unable to enumerate USB device [ 469.448834][T11694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1753'. [ 469.462170][T11694] tmpfs: Bad value for 'mpol' [ 469.490117][ T7666] usb 9-1: device descriptor read/64, error -71 [ 469.524042][T11696] IPv6: syztnl0: Disabled Multicast RS [ 469.620628][ T7666] usb usb9-port1: attempt power cycle [ 469.840070][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 469.960064][ T7666] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 469.980304][ T44] usb 1-1: device descriptor read/64, error -71 [ 470.010662][ T7666] usb 9-1: device descriptor read/8, error -71 [ 470.404685][ T7666] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 470.416047][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 470.482533][ T7666] usb 9-1: device descriptor read/8, error -71 [ 470.590451][ T44] usb 1-1: device descriptor read/64, error -71 [ 470.604224][ T7666] usb usb9-port1: unable to enumerate USB device [ 470.702323][ T44] usb usb1-port1: attempt power cycle [ 470.874532][T11167] overlayfs: failed lookup in lower (newroot/29, name='bus', err=-40): overlapping layers [ 470.887640][T11167] overlayfs: failed lookup in lower (newroot/29, name='bus', err=-40): overlapping layers [ 471.100225][ T44] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 471.120994][ T44] usb 1-1: device descriptor read/8, error -71 [ 471.226343][ T6436] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.310027][ T5950] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 471.348744][ T6436] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.380182][ T44] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 471.422951][ T44] usb 1-1: device descriptor read/8, error -71 [ 471.457058][ T6436] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.493824][ T5950] usb 7-1: Using ep0 maxpacket: 16 [ 471.502015][ T5950] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.513348][ T5950] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.523622][ T5950] usb 7-1: config 0 interface 0 has no altsetting 0 [ 471.536293][ T5950] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 471.547682][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.570589][ T44] usb usb1-port1: unable to enumerate USB device [ 471.578467][ T5950] usb 7-1: config 0 descriptor?? [ 471.584673][ T6436] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.893734][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.922285][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.936327][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.946264][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.958624][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.985973][ T6436] bridge_slave_1: left allmulticast mode [ 471.996537][ T6436] bridge_slave_1: left promiscuous mode [ 472.008880][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.024525][ T6436] bridge_slave_0: left allmulticast mode [ 472.030822][ T6436] bridge_slave_0: left promiscuous mode [ 472.037641][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.068384][ T5950] cougar 0003:060B:500A.001E: unexpected long global item [ 472.076857][ T5950] cougar 0003:060B:500A.001E: parse failed [ 472.088269][ T5950] cougar 0003:060B:500A.001E: probe with driver cougar failed with error -22 [ 472.273344][ T5950] usb 7-1: USB disconnect, device number 12 [ 472.683829][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.696976][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.711902][ T6436] bond0 (unregistering): Released all slaves [ 473.212033][ T981] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 474.020900][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 474.043908][ T981] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 474.057208][ T6436] hsr_slave_0: left promiscuous mode [ 474.066264][ T5874] Bluetooth: hci0: command tx timeout [ 474.086918][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.105104][ T6436] hsr_slave_1: left promiscuous mode [ 474.105143][ T981] usb 7-1: Product: syz [ 474.119125][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.128433][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.143519][ T981] usb 7-1: Manufacturer: syz [ 474.148226][ T981] usb 7-1: SerialNumber: syz [ 474.159102][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.181173][ T981] usb 7-1: config 0 descriptor?? [ 474.187256][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.212382][ T981] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 474.266164][ T6436] veth1_macvtap: left promiscuous mode [ 474.272209][ T6436] veth0_macvtap: left promiscuous mode [ 474.277955][ T6436] veth1_vlan: left promiscuous mode [ 474.283698][ T6436] veth0_vlan: left promiscuous mode [ 475.076911][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 475.143383][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 475.211466][ T981] gspca_sonixj: reg_w1 err -71 [ 475.253748][ T981] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 475.268946][ T981] usb 7-1: USB disconnect, device number 13 [ 476.124465][T11710] chnl_net:caif_netlink_parms(): no params data found [ 476.159388][ T24] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 476.167414][ T5874] Bluetooth: hci0: command tx timeout [ 476.326800][ T24] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 476.351396][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.359484][ T24] usb 7-1: Product: syz [ 476.366479][ T44] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 476.384920][ T24] usb 7-1: Manufacturer: syz [ 476.389605][ T24] usb 7-1: SerialNumber: syz [ 476.423686][ T24] usb 7-1: config 0 descriptor?? [ 476.443782][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.444148][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 476.456654][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.465902][T11710] bridge_slave_0: entered allmulticast mode [ 476.480192][T11710] bridge_slave_0: entered promiscuous mode [ 476.494674][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.502752][T11710] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.520292][T11710] bridge_slave_1: entered allmulticast mode [ 476.541162][T11710] bridge_slave_1: entered promiscuous mode [ 476.582630][ T44] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 476.600501][ T44] usb 1-1: config 6 has no interface number 0 [ 476.633663][ T44] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 476.653720][ T44] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.672123][ T44] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 476.683617][ T44] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 476.698643][ T44] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 476.717741][ T44] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 476.730160][ T44] usb 1-1: Product: syz [ 476.734419][ T44] usb 1-1: Manufacturer: syz [ 476.739072][ T44] usb 1-1: SerialNumber: syz [ 476.808559][ T44] hso 1-1:6.2: Failed to find BULK IN ep [ 476.874337][T11710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.877533][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.897021][T11710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.925458][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.597918][ T7666] usb 1-1: USB disconnect, device number 8 [ 477.604266][ T24] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 477.686614][T11710] team0: Port device team_slave_0 added [ 477.718122][T11710] team0: Port device team_slave_1 added [ 477.815716][T11710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.840369][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.871729][T11710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.885187][T11710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.892998][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.920124][T11710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.073410][T11792] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 478.115802][T11710] hsr_slave_0: entered promiscuous mode [ 478.125615][T11710] hsr_slave_1: entered promiscuous mode [ 478.132982][T11710] debugfs: 'hsr0' already exists in 'hsr' [ 478.138859][T11710] Cannot create hsr debugfs directory [ 478.145239][T11792] syzkaller1: entered promiscuous mode [ 478.157149][T11792] syzkaller1: entered allmulticast mode [ 478.231080][ T5874] Bluetooth: hci0: command tx timeout [ 478.540201][ T24] gspca_sq930x: Unknown sensor [ 478.545594][ T24] sq930x 7-1:0.0: probe with driver sq930x failed with error -22 [ 478.583690][ T24] usb 7-1: USB disconnect, device number 14 [ 478.982262][T11710] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 479.028467][T11710] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 479.073147][T11710] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 479.107871][T11710] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 479.137874][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 479.334996][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.435054][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.595409][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 479.667979][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.899675][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.913462][T11710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.934287][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.964559][ T24] usb 7-1: config 0 descriptor?? [ 480.003990][T11710] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.021163][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.031337][ T7285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.063353][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.072912][ T7285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.300430][ T5874] Bluetooth: hci0: command tx timeout [ 480.450627][ T24] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 480.667693][T11710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.031579][T11857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.063437][T11857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.282745][T11710] veth0_vlan: entered promiscuous mode [ 481.315732][T11710] veth1_vlan: entered promiscuous mode [ 481.385978][T11710] veth0_macvtap: entered promiscuous mode [ 481.399264][T11710] veth1_macvtap: entered promiscuous mode [ 481.454119][T11710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.487326][T11710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.551894][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.570170][ T6393] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.606309][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.629116][ T6393] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.817961][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.850869][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.912612][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.936719][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.200991][ T10] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 482.289288][T11886] netlink: 'syz.8.1789': attribute type 1 has an invalid length. [ 482.315384][T11886] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1789'. [ 482.343962][T11886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.874611][T11899] block nbd8: Send control failed (result -22) [ 483.062867][T11899] block nbd8: Request send failed, requeueing [ 483.109216][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 483.236739][ T11] block nbd8: Dead connection, failed to find a fallback [ 483.247454][ T11] block nbd8: shutting down sockets [ 483.267611][ T5932] usb 7-1: USB disconnect, device number 15 [ 483.273972][ T11] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 483.570220][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 483.616574][ T9] usb 10-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 483.655564][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.700247][ T9] usb 10-1: Product: syz [ 483.730131][ T9] usb 10-1: Manufacturer: syz [ 483.734904][ T9] usb 10-1: SerialNumber: syz [ 483.772766][ T9] usb 10-1: config 0 descriptor?? [ 483.870811][T11921] netlink: 'syz.0.1796': attribute type 21 has an invalid length. [ 483.899028][T11921] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1796'. [ 483.927779][T11921] netlink: 'syz.0.1796': attribute type 4 has an invalid length. [ 483.951486][T11921] netlink: 'syz.0.1796': attribute type 3 has an invalid length. [ 483.969625][T11921] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1796'. [ 483.990316][ T9] usb 10-1: USB disconnect, device number 2 [ 484.680691][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 484.840103][ T9] usb 1-1: device descriptor read/64, error -71 [ 485.254484][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 485.401893][ T9] usb 1-1: device descriptor read/64, error -71 [ 485.544679][ T9] usb usb1-port1: attempt power cycle [ 486.110058][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 486.172945][ T9] usb 1-1: device descriptor read/8, error -71 [ 486.250463][T11706] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 486.420093][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 486.433730][T11706] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 486.464938][ T9] usb 1-1: device descriptor read/8, error -71 [ 486.469995][T11706] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.524341][T12001] netlink: 'syz.9.1810': attribute type 21 has an invalid length. [ 486.534464][T11706] usb 9-1: config 0 descriptor?? [ 486.548009][T12001] netlink: 'syz.9.1810': attribute type 30 has an invalid length. [ 486.592148][ T9] usb usb1-port1: unable to enumerate USB device [ 486.749730][T11706] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.775329][T11706] asix 9-1:0.0: probe with driver asix failed with error -71 [ 486.810456][T11413] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 486.834604][T11706] usb 9-1: USB disconnect, device number 8 [ 486.994382][T11413] usb 10-1: Using ep0 maxpacket: 8 [ 487.011207][T11413] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.030088][T11413] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 487.067735][T11413] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 487.108560][T11413] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 487.116772][T12015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.129229][T11413] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 487.142871][T11413] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.187608][T11413] hub 10-1:1.0: bad descriptor, ignoring hub [ 487.198333][T11413] hub 10-1:1.0: probe with driver hub failed with error -5 [ 487.221614][T11413] cdc_wdm 10-1:1.0: skipping garbage [ 487.227289][T11413] cdc_wdm 10-1:1.0: skipping garbage [ 487.248692][T11413] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 487.264584][T11413] cdc_wdm 10-1:1.0: Unknown control protocol [ 487.627907][T12030] 9pnet_fd: Insufficient options for proto=fd [ 487.968089][T12001] cdc_wdm 10-1:1.0: Error autopm - -16 [ 487.989810][ T979] usb 10-1: USB disconnect, device number 3 [ 488.574405][ T30] audit: type=1326 audit(1757105746.202:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.6.1818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f659198ebe9 code=0x0 [ 488.716501][ T979] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 488.860248][ T979] usb 10-1: device descriptor read/64, error -71 [ 488.920059][ T44] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 488.988982][T12060] loop7: detected capacity change from 0 to 3 [ 489.096000][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.112024][ T979] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 489.140638][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.159285][ T44] usb 7-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 489.168950][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.180931][ T44] usb 7-1: config 0 descriptor?? [ 489.281066][ T979] usb 10-1: device descriptor read/64, error -71 [ 489.305833][T12071] sctp: [Deprecated]: syz.0.1824 (pid 12071) Use of int in max_burst socket option. [ 489.305833][T12071] Use struct sctp_assoc_value instead [ 489.390901][ T979] usb usb10-port1: attempt power cycle [ 489.424483][T12075] FAULT_INJECTION: forcing a failure. [ 489.424483][T12075] name failslab, interval 1, probability 0, space 0, times 0 [ 489.438830][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.0.1825 Not tainted syzkaller #0 PREEMPT(full) [ 489.438863][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.438878][T12075] Call Trace: [ 489.438888][T12075] [ 489.438898][T12075] dump_stack_lvl+0x189/0x250 [ 489.438925][T12075] ? __pfx____ratelimit+0x10/0x10 [ 489.438960][T12075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.438994][T12075] ? __pfx__printk+0x10/0x10 [ 489.439031][T12075] ? __pfx___might_resched+0x10/0x10 [ 489.439059][T12075] ? fs_reclaim_acquire+0x7d/0x100 [ 489.439092][T12075] should_fail_ex+0x414/0x560 [ 489.439125][T12075] should_failslab+0xa8/0x100 [ 489.439156][T12075] kmem_cache_alloc_noprof+0x74/0x6e0 [ 489.439180][T12075] ? skb_clone+0x212/0x3a0 [ 489.439212][T12075] skb_clone+0x212/0x3a0 [ 489.439237][T12075] ? nfnetlink_rcv+0x486/0x2520 [ 489.439271][T12075] nfnetlink_rcv+0x4b4/0x2520 [ 489.439307][T12075] ? __dev_queue_xmit+0x1d79/0x3b50 [ 489.439335][T12075] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 489.439367][T12075] ? __dev_queue_xmit+0x27b/0x3b50 [ 489.439408][T12075] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 489.439458][T12075] ? ref_tracker_free+0x63a/0x7d0 [ 489.439488][T12075] ? __asan_memcpy+0x40/0x70 [ 489.439508][T12075] ? __pfx_ref_tracker_free+0x10/0x10 [ 489.439555][T12075] ? skb_clone+0x246/0x3a0 [ 489.439585][T12075] ? __netlink_deliver_tap+0x807/0x850 [ 489.439607][T12075] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.439647][T12075] netlink_unicast+0x82c/0x9e0 [ 489.439690][T12075] ? __pfx_netlink_unicast+0x10/0x10 [ 489.439725][T12075] ? netlink_sendmsg+0x642/0xb30 [ 489.439745][T12075] ? skb_put+0x11b/0x210 [ 489.439777][T12075] netlink_sendmsg+0x805/0xb30 [ 489.439809][T12075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.439836][T12075] ? aa_sock_msg_perm+0xf1/0x1d0 [ 489.439873][T12075] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.439909][T12075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.439932][T12075] __sock_sendmsg+0x219/0x270 [ 489.439965][T12075] ____sys_sendmsg+0x505/0x830 [ 489.439996][T12075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.440031][T12075] ? import_iovec+0x74/0xa0 [ 489.440057][T12075] ___sys_sendmsg+0x21f/0x2a0 [ 489.440085][T12075] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.440150][T12075] ? __fget_files+0x2a/0x420 [ 489.440179][T12075] ? __fget_files+0x3a0/0x420 [ 489.440222][T12075] __x64_sys_sendmsg+0x19b/0x260 [ 489.440250][T12075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.440286][T12075] ? __pfx_ksys_write+0x10/0x10 [ 489.440318][T12075] ? do_syscall_64+0xbe/0xfa0 [ 489.440344][T12075] do_syscall_64+0xfa/0xfa0 [ 489.440363][T12075] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.440383][T12075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.440406][T12075] ? clear_bhb_loop+0x60/0xb0 [ 489.440433][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.440455][T12075] RIP: 0033:0x7fa96f58ebe9 [ 489.440476][T12075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.440495][T12075] RSP: 002b:00007fa9703a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.440519][T12075] RAX: ffffffffffffffda RBX: 00007fa96f7c5fa0 RCX: 00007fa96f58ebe9 [ 489.440537][T12075] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 489.440552][T12075] RBP: 00007fa9703a5090 R08: 0000000000000000 R09: 0000000000000000 [ 489.440567][T12075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.440582][T12075] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 489.440618][T12075] [ 489.784869][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.021066][ T979] usb usb10-port1: Cannot enable. Maybe the USB cable is bad? [ 490.054031][T12081] 9pnet_fd: Insufficient options for proto=fd [ 490.144543][T12086] veth1_macvtap: left promiscuous mode [ 490.164842][T12086] macsec0: entered promiscuous mode [ 490.170535][ T979] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 490.183754][T12086] macsec0: entered allmulticast mode [ 490.208555][T12089] veth1_macvtap: entered promiscuous mode [ 490.211106][ T979] usb 10-1: Using ep0 maxpacket: 16 [ 490.230116][T12089] veth1_macvtap: entered allmulticast mode [ 490.236365][T12089] macsec0: left promiscuous mode [ 490.258933][ T979] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 490.307741][ T979] usb 10-1: config 0 has no interface number 0 [ 490.320479][T12089] macsec0: left allmulticast mode [ 490.329349][ T979] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 490.350185][T12089] veth1_macvtap: left allmulticast mode [ 490.355970][ T979] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.371922][T12086] netlink: 'syz.0.1828': attribute type 1 has an invalid length. [ 490.379839][ T979] usb 10-1: Product: syz [ 490.390176][ T979] usb 10-1: Manufacturer: syz [ 490.394961][ T979] usb 10-1: SerialNumber: syz [ 490.411498][T12086] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1828'. [ 490.442986][ T979] usb 10-1: config 0 descriptor?? [ 490.455352][T12086] openvswitch: netlink: Flow actions attr not present in new flow. [ 490.460348][ T979] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 490.645377][T12098] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1829'. [ 490.656865][T12098] fuse: Bad value for 'user_id' [ 490.662145][T12098] fuse: Bad value for 'user_id' [ 490.669018][T12098] overlayfs: failed to resolve '/X]-bca6NJl}6;tGeY޸ eEX-3щ1=s.Ի'9' [ 490.669018][T12098] 7c&bDwa!|_ZI1 .HZ}k$#+-krkH.?j#M@i ]th]ܼ2^P(L2#i0Uzb[C-&(8‡s噴Xj ?)`R&*'-Įm5-1bK ܰ`x|íQ-œciGv4وIK^WҘ2<Gg}TkеyVQ [ 490.669018][T12098] ?y|': -36 [ 490.714596][T12098] tmpfs: Bad value for 'mpol' [ 490.976501][ T44] usbhid 7-1:0.0: can't add hid device: -71 [ 490.982790][ T44] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 491.012330][ T44] usb 7-1: USB disconnect, device number 16 [ 491.406060][T12119] 9pnet_fd: Insufficient options for proto=fd [ 491.587050][T12123] block nbd0: Attempted send on invalid socket [ 491.606119][T12123] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 491.647047][T12123] gfs2: error -5 reading superblock [ 491.900784][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 491.985106][T12132] FAULT_INJECTION: forcing a failure. [ 491.985106][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 491.999028][T12132] CPU: 1 UID: 0 PID: 12132 Comm: syz.8.1842 Not tainted syzkaller #0 PREEMPT(full) [ 491.999058][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.999074][T12132] Call Trace: [ 491.999083][T12132] [ 491.999092][T12132] dump_stack_lvl+0x189/0x250 [ 491.999125][T12132] ? __pfx____ratelimit+0x10/0x10 [ 491.999156][T12132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.999171][T12132] ? __pfx__printk+0x10/0x10 [ 491.999200][T12132] ? __pfx___might_resched+0x10/0x10 [ 491.999220][T12132] ? fs_reclaim_acquire+0x7d/0x100 [ 491.999243][T12132] should_fail_ex+0x414/0x560 [ 491.999267][T12132] should_failslab+0xa8/0x100 [ 491.999287][T12132] __kmalloc_cache_noprof+0x6f/0x6f0 [ 491.999306][T12132] ? nft_netdev_hook_alloc+0x220/0x570 [ 491.999340][T12132] nft_netdev_hook_alloc+0x220/0x570 [ 491.999370][T12132] nf_tables_parse_netdev_hooks+0x138/0x950 [ 491.999401][T12132] nft_flowtable_parse_hook+0x465/0x910 [ 491.999425][T12132] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 491.999443][T12132] ? nft_pernet+0x23/0x240 [ 491.999470][T12132] nf_tables_delflowtable+0xb24/0x1440 [ 491.999499][T12132] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 491.999533][T12132] ? __nla_parse+0x40/0x60 [ 491.999559][T12132] nfnetlink_rcv+0x1132/0x2520 [ 491.999608][T12132] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 491.999644][T12132] ? ref_tracker_free+0x63a/0x7d0 [ 491.999689][T12132] ? __netlink_deliver_tap+0x807/0x850 [ 491.999704][T12132] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.999733][T12132] netlink_unicast+0x82c/0x9e0 [ 491.999763][T12132] ? __pfx_netlink_unicast+0x10/0x10 [ 491.999789][T12132] ? netlink_sendmsg+0x642/0xb30 [ 491.999802][T12132] ? skb_put+0x11b/0x210 [ 491.999822][T12132] netlink_sendmsg+0x805/0xb30 [ 491.999846][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.999866][T12132] ? aa_sock_msg_perm+0xf1/0x1d0 [ 491.999894][T12132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.999924][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.999945][T12132] __sock_sendmsg+0x219/0x270 [ 491.999980][T12132] ____sys_sendmsg+0x505/0x830 [ 492.000009][T12132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.000045][T12132] ? import_iovec+0x74/0xa0 [ 492.000072][T12132] ___sys_sendmsg+0x21f/0x2a0 [ 492.000099][T12132] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.000163][T12132] ? __fget_files+0x2a/0x420 [ 492.000193][T12132] ? __fget_files+0x3a0/0x420 [ 492.000234][T12132] __x64_sys_sendmsg+0x19b/0x260 [ 492.000261][T12132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.000296][T12132] ? __pfx_ksys_write+0x10/0x10 [ 492.000333][T12132] ? do_syscall_64+0xbe/0xfa0 [ 492.000357][T12132] do_syscall_64+0xfa/0xfa0 [ 492.000376][T12132] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.000396][T12132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.000418][T12132] ? clear_bhb_loop+0x60/0xb0 [ 492.000445][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.000466][T12132] RIP: 0033:0x7f6d68b8ebe9 [ 492.000487][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.000505][T12132] RSP: 002b:00007f6d699f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.000530][T12132] RAX: ffffffffffffffda RBX: 00007f6d68dc5fa0 RCX: 00007f6d68b8ebe9 [ 492.000546][T12132] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 492.000561][T12132] RBP: 00007f6d699f4090 R08: 0000000000000000 R09: 0000000000000000 [ 492.000576][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.000590][T12132] R13: 00007f6d68dc6038 R14: 00007f6d68dc5fa0 R15: 00007ffca3ac4bb8 [ 492.000628][T12132] [ 492.060160][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 492.087907][ T979] gspca_spca1528: reg_r err -32 [ 492.094182][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 492.096618][ T979] spca1528 10-1:0.1: probe with driver spca1528 failed with error -32 [ 492.103143][ T10] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 492.117436][ T979] usb 10-1: USB disconnect, device number 7 [ 492.126000][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 492.431371][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 492.441000][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.449149][ T10] usb 1-1: Product: syz [ 492.453493][ T10] usb 1-1: Manufacturer: syz [ 492.458157][ T10] usb 1-1: SerialNumber: syz [ 492.508560][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 492.516994][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 492.525549][ T9] usb 7-1: config 0 has no interface number 0 [ 492.535413][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 492.545125][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.553581][ T9] usb 7-1: Product: syz [ 492.557851][ T9] usb 7-1: Manufacturer: syz [ 492.562934][ T9] usb 7-1: SerialNumber: syz [ 492.578315][ T9] usb 7-1: config 0 descriptor?? [ 492.600562][ T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 492.609707][ T9] usb 7-1: selecting invalid altsetting 1 [ 492.620630][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 492.644708][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.655625][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 492.664355][ T9] usb 7-1: media controller created [ 492.688513][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.710623][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.766956][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.879014][ T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 492.900716][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 492.926868][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 492.975869][T12144] FAULT_INJECTION: forcing a failure. [ 492.975869][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 492.998931][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.8.1846 Not tainted syzkaller #0 PREEMPT(full) [ 492.998964][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.998979][T12144] Call Trace: [ 492.998990][T12144] [ 492.999002][T12144] dump_stack_lvl+0x189/0x250 [ 492.999030][T12144] ? __pfx____ratelimit+0x10/0x10 [ 492.999067][T12144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.999089][T12144] ? __pfx__printk+0x10/0x10 [ 492.999129][T12144] ? __pfx___might_resched+0x10/0x10 [ 492.999156][T12144] ? fs_reclaim_acquire+0x7d/0x100 [ 492.999201][T12144] should_fail_ex+0x414/0x560 [ 492.999235][T12144] should_failslab+0xa8/0x100 [ 492.999266][T12144] __kmalloc_noprof+0xcb/0x7f0 [ 492.999290][T12144] ? ovl_alloc_entry+0x22/0x80 [ 492.999310][T12144] ? kfree+0x199/0x6d0 [ 492.999336][T12144] ovl_alloc_entry+0x22/0x80 [ 492.999358][T12144] ovl_lookup+0x1435/0x1bc0 [ 492.999463][T12144] ? __pfx_ovl_lookup+0x10/0x10 [ 492.999495][T12144] ? do_raw_spin_lock+0x121/0x290 [ 492.999542][T12144] ? do_raw_spin_unlock+0x122/0x240 [ 492.999580][T12144] ? _raw_spin_unlock+0x28/0x50 [ 492.999612][T12144] ? d_alloc+0x144/0x190 [ 492.999650][T12144] lookup_one_qstr_excl+0x12e/0x360 [ 492.999693][T12144] do_renameat2+0x3dd/0xa80 [ 492.999741][T12144] ? __pfx_do_renameat2+0x10/0x10 [ 492.999783][T12144] ? strncpy_from_user+0x150/0x290 [ 492.999813][T12144] ? getname_flags+0x1e5/0x540 [ 492.999851][T12144] __x64_sys_renameat2+0xce/0xe0 [ 492.999888][T12144] do_syscall_64+0xfa/0xfa0 [ 492.999908][T12144] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.999928][T12144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.999950][T12144] ? clear_bhb_loop+0x60/0xb0 [ 492.999976][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.999997][T12144] RIP: 0033:0x7f6d68b8ebe9 [ 493.000017][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.000037][T12144] RSP: 002b:00007f6d699f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 493.000060][T12144] RAX: ffffffffffffffda RBX: 00007f6d68dc5fa0 RCX: 00007f6d68b8ebe9 [ 493.000076][T12144] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 493.000094][T12144] RBP: 00007f6d699f4090 R08: 0000000000000000 R09: 0000000000000000 [ 493.000108][T12144] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000002 [ 493.000122][T12144] R13: 00007f6d68dc6038 R14: 00007f6d68dc5fa0 R15: 00007ffca3ac4bb8 [ 493.000159][T12144] [ 493.337738][ T10] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 493.394475][ T9] usb 7-1: USB disconnect, device number 17 [ 493.418454][ T10] usb 1-1: No valid video chain found. [ 493.481536][ T10] usb 1-1: USB disconnect, device number 13 [ 493.640344][ T5932] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 493.785325][ T30] audit: type=1326 audit(1757105751.412:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.8.1850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d68b8ebe9 code=0x0 [ 493.808176][ T5932] usb 10-1: Using ep0 maxpacket: 32 [ 493.829369][ T5932] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 493.850194][ T5932] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.879646][ T5932] usb 10-1: config 0 descriptor?? [ 493.921051][ T5932] gspca_main: sq930x-2.14.0 probing 041e:403c [ 493.968594][T12168] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 494.012864][T12168] sp0: Synchronizing with TNC [ 494.042982][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 494.049110][ C0] CPU: 0 UID: 0 PID: 12168 Comm: syz.0.1851 Not tainted syzkaller #0 PREEMPT(full) [ 494.058522][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.068617][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 494.074738][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 494.094389][ C0] RSP: 0018:ffffc90000007958 EFLAGS: 00010046 [ 494.100588][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff8880257fe280 [ 494.108600][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880312ed000 [ 494.116590][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 494.124573][ C0] R10: dffffc0000000000 R11: ffffffff88f947e0 R12: dffffc0000000000 [ 494.132820][ C0] R13: ffff8880257fe238 R14: 0000000000000000 R15: ffff8880257fe200 [ 494.140802][ C0] FS: 00007fa9703a56c0(0000) GS:ffff8881257ba000(0000) knlGS:0000000000000000 [ 494.149745][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.158767][ C0] CR2: 0000001b32d23ffc CR3: 000000001bed8000 CR4: 00000000003526f0 [ 494.166754][ C0] Call Trace: [ 494.170041][ C0] [ 494.172897][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 494.178306][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 494.183886][ C0] das16m1_handler+0x213/0x4b0 [ 494.188667][ C0] das16m1_interrupt+0xaf/0x180 [ 494.193538][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 494.199020][ C0] __handle_irq_event_percpu+0x295/0xab0 [ 494.204675][ C0] ? __lock_acquire+0xab9/0xd20 [ 494.209555][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 494.215734][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 494.220973][ C0] handle_irq_event+0x8b/0x1e0 [ 494.226105][ C0] ? handle_edge_irq+0x229/0xa10 [ 494.231068][ C0] handle_edge_irq+0x23b/0xa10 [ 494.235858][ C0] __common_interrupt+0x141/0x1f0 [ 494.240895][ C0] common_interrupt+0x5e/0xe0 [ 494.245587][ C0] asm_common_interrupt+0x26/0x40 [ 494.250637][ C0] RIP: 0010:handle_softirqs+0x1b0/0x870 [ 494.256221][ C0] Code: 89 64 24 30 0f b7 db 48 c7 c7 e0 dd a9 8b e8 e7 c3 00 0a 65 66 c7 05 a5 27 60 11 00 00 e8 f8 78 42 00 fb 49 c7 c7 c0 c0 20 8e ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c [ 494.275842][ C0] RSP: 0018:ffffc90000007e40 EFLAGS: 00000286 [ 494.281941][ C0] RAX: ebfd2756d1ae8a00 RBX: 0000000000000100 RCX: ebfd2756d1ae8a00 [ 494.289949][ C0] RDX: 0000000000000002 RSI: ffffffff8dc9d691 RDI: ffffffff8c04ff80 [ 494.297926][ C0] RBP: ffffc90000007f50 R08: ffffffff8fe52c37 R09: 1ffffffff1fca586 [ 494.305938][ C0] R10: dffffc0000000000 R11: fffffbfff1fca587 R12: 000000000000000a [ 494.313934][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e20c0c0 [ 494.322017][ C0] ? lapic_next_event+0x11/0x20 [ 494.326889][ C0] ? clockevents_program_event+0x24d/0x360 [ 494.332730][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 494.337572][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 494.342914][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 494.348155][ C0] __irq_exit_rcu+0xca/0x1f0 [ 494.352790][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 494.358012][ C0] irq_exit_rcu+0x9/0x30 [ 494.362282][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 494.367962][ C0] [ 494.370991][ C0] [ 494.373942][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.379938][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 494.386466][ C0] Code: 74 05 e8 eb 39 3f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 d3 07 f6 65 8b 05 5c e8 5c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 494.406088][ C0] RSP: 0018:ffffc9000aecfbe0 EFLAGS: 00000206 [ 494.412190][ C0] RAX: ebfd2756d1ae8a00 RBX: 0000000000000a02 RCX: ebfd2756d1ae8a00 [ 494.420197][ C0] RDX: 0000000000000006 RSI: ffffffff8dc9d691 RDI: 0000000000000001 [ 494.428185][ C0] RBP: ffffc9000aecfc70 R08: ffffffff8fe52c37 R09: 1ffffffff1fca586 [ 494.436177][ C0] R10: dffffc0000000000 R11: fffffbfff1fca587 R12: dffffc0000000000 [ 494.444164][ C0] R13: dffffc0000000000 R14: ffffffff9a26eca0 R15: 1ffff920015d9f7c [ 494.452161][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.458514][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 494.464431][ C0] uart_port_unlock_deref+0x111/0x2f0 [ 494.469829][ C0] uart_write+0xe8/0x130 [ 494.474096][ C0] sixpack_open+0x6cb/0x9c0 [ 494.478623][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.483866][ C0] ? __pfx_sixpack_open+0x10/0x10 [ 494.488919][ C0] ? __pfx_sixpack_open+0x10/0x10 [ 494.493959][ C0] tty_ldisc_open+0x9e/0x100 [ 494.498655][ C0] tty_set_ldisc+0x373/0x560 [ 494.503263][ C0] tty_ioctl+0xc38/0xde0 [ 494.507530][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 494.512309][ C0] __se_sys_ioctl+0xf9/0x170 [ 494.516917][ C0] do_syscall_64+0xfa/0xfa0 [ 494.521429][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.526645][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.532722][ C0] ? clear_bhb_loop+0x60/0xb0 [ 494.537412][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.543318][ C0] RIP: 0033:0x7fa96f58ebe9 [ 494.547747][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.567363][ C0] RSP: 002b:00007fa9703a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.575796][ C0] RAX: ffffffffffffffda RBX: 00007fa96f7c5fa0 RCX: 00007fa96f58ebe9 [ 494.583783][ C0] RDX: 0000200000000240 RSI: 0000000000005423 RDI: 0000000000000003 [ 494.591759][ C0] RBP: 00007fa96f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.599820][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.607810][ C0] R13: 00007fa96f7c6038 R14: 00007fa96f7c5fa0 R15: 00007ffe6d47ec58 [ 494.615819][ C0] [ 494.618866][ C0] Modules linked in: [ 494.622776][ C0] ---[ end trace 0000000000000000 ]--- [ 494.628251][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 494.634359][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 494.653979][ C0] RSP: 0018:ffffc90000007958 EFLAGS: 00010046 [ 494.660066][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff8880257fe280 [ 494.668042][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880312ed000 [ 494.676021][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 494.684022][ C0] R10: dffffc0000000000 R11: ffffffff88f947e0 R12: dffffc0000000000 [ 494.692097][ C0] R13: ffff8880257fe238 R14: 0000000000000000 R15: ffff8880257fe200 [ 494.700095][ C0] FS: 00007fa9703a56c0(0000) GS:ffff8881257ba000(0000) knlGS:0000000000000000 [ 494.709046][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.715645][ C0] CR2: 0000001b32d23ffc CR3: 000000001bed8000 CR4: 00000000003526f0 [ 494.723631][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 494.731181][ C0] Kernel Offset: disabled [ 494.735507][ C0] Rebooting in 86400 seconds..