last executing test programs: 2m41.426218336s ago: executing program 0 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x58000, 0x1000, &(0x7f0000026000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x70001, 0x0, {[0xffffffffffffffff, 0x1fb, 0xffffffffffffffff, 0x8001, 0x16, 0x4, 0x1, 0x8]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_clone3(&(0x7f0000000400)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x21, 0x0, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000380)="0fc7ba0200000026f2afc4c3957c870e00000000f236650f01dbc4c2f932cb2edde0c4e249937c52097a00660f38815200b9150200000f32", 0x38}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x8001}, 0x10) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000000200)={0xdc, "6e07bbfb4e73917579e29ad53b2a7caff1db94caeb58e56124ed8815718d0de42ca3d13f9cbe9d40bc1611096906190bfa33d864051ba3d180173eeaf79b75daac541b1bd128b324382e17554e2c446814f480072b6df2a8078c966b2f6bed12786b3e7b00a1aebd4b13f7098e7c87d710340ba679934ec0f84bf04cd542236dc60490568b76d75a43090d653b978b185d812fa9417a3a6b6ea7b2ec85da252b4bd6ea60197c5a3de1db08464d3a8baa7bb87336da7e86c38dd18ff3583ed1764ea0e5adcfe9161a1896b4cdb7d9827823758d1005dbc1ec61cb911b"}) 2m37.63205491s ago: executing program 0 (id=153): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0xb, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000700)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m37.478720996s ago: executing program 0 (id=155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async, rerun: 32) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)="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", 0x1d8, 0xfffffffffffffffd) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000300)) 2m37.242685507s ago: executing program 0 (id=156): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002240)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000004340)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004380), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000043c0)='./file1\x00', 0x103042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000004400), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000004440)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d6650000000012", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 2m37.028504083s ago: executing program 0 (id=157): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xbb8}, 0x0) 2m36.597755846s ago: executing program 0 (id=159): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x4158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x20, r8, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000004, 0x319}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c71, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0xffffffde}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e77, 0x8000, 0x1, 0x310}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) setuid(0xee00) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x7, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x8, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xc, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0xfffffffd, 0x0, 0x4f, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0xdd5a, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0xa000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m36.154903942s ago: executing program 32 (id=159): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x4158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x20, r8, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000004, 0x319}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c71, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0xffffffde}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e77, 0x8000, 0x1, 0x310}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) setuid(0xee00) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x7, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x8, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xc, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0xfffffffd, 0x0, 0x4f, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0xdd5a, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0xa000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m17.94212498s ago: executing program 1 (id=272): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) userfaultfd(0x80001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) write$tun(r1, &(0x7f00000023c0)={@val={0x0, 0x8035}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @multicast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @multicast, @private0}}, 0x38) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000021c0)='./sys\x00', &(0x7f0000002200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./sys/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000002280)='driver_override\x00', 0x1, 0x0) write(r3, &(0x7f00000022c0)='vmxnet3', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./sys/bus/pci/drivers/vmxnet3\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000002340)='bind\x00', 0x1, 0x0) write(r5, &(0x7f0000002380)='0000:00:00.0', 0xc) socket$inet6(0xa, 0x1, 0x100) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m17.883229031s ago: executing program 1 (id=273): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x2000000) 2m17.80677438s ago: executing program 1 (id=274): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0xb, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000700)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0}, 0x0) 2m17.794630739s ago: executing program 1 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000005040)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f0000005080)="4987", 0x2}, {&(0x7f00000050c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604", 0x20}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) 2m17.721070437s ago: executing program 1 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000400)='6', 0x32) fsopen(&(0x7f0000000440)='ext2\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x8000, &(0x7f00000003c0)={0x2, 0x0, 0x100000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8100, &(0x7f0000000340)={0x84, 0x77, 0x80000}, 0x20) 2m17.55048844s ago: executing program 1 (id=277): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x8000, 0x7f, {0xffffffffffffffff}, {0x0}, 0x25, 0x6}) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080)) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000200)={0x1, 0x37cc, 0xa, 0x0, 0x2, 0x0, [{0xcb, 0x6, 0x6, '\x00', 0x800}, {0xe7ca, 0x781c, 0x101}]}) r4 = openat$cgroup_pressure(r2, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r5, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004041) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000600)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x210, r10, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6fe63a57c55eb111"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3e9057d9d76b1d9707b8dea68ddd2d3d6ad36595556880fed776e2343200c9f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="75dbf87075f53f0ec727edab6763be70"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b029a4a4be4f778836338714d0a86427fe4f0dc6bb6f6311cf6fb7807caf7408"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="134f715a501c71fbba10d05b8af32ee47657af0f1d80d5d4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "163ef329eda1524c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="80411b830e31e84792552856df4e429d625e7540e2bd309a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7c331869704cc01d2e7dd0672b3736f1"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "47b0ed56eab02df2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="71fc1320c3b4431ad3454e2e6f5cd4da03f5eed6130a42b4"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4dca654e99d64d0c1bf34893c53868102ca42f1e8ea303474016f91dd7fcff58"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fd9be0c4b4e001778aa25b242573a289"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a73b010319a43ee7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "16495d8a3fba071f"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5f3405a959f0eb83fbba6855891c268d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b72fa715dc8cbee8680872816cceaa82"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c25f033968b2bd57"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cd9c48a3393732c3201210272d65bb03a61741c6f9601c098f9999dd9eaf3fdf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b221fe7c033c135f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2490922f7047c04e"}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$COMEDI_SETRSUBD(r2, 0x6410) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001a00)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, {&(0x7f00000009c0)=""/4096, 0x1000}, &(0x7f00000019c0), 0x45}, 0xa0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000001ac0)={0x800, 0x8, 0x2, 0x6}) flock(0xffffffffffffffff, 0x0) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000602, r1, &(0x7f0000001b00)={0x3, 0xffffffffffffffff, 0x1}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b80), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001bc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x34, r11, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x8804) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001d00)={@rand_addr, 0x0}, &(0x7f0000001d40)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001d80)=0x0, &(0x7f0000001dc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001e00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000020c0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002080)={&(0x7f0000001e40)={0x23c, 0x0, 0x100, 0x70bd27, 0x4, {}, [@ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "f716cb2aa8b60eb97871428bace9ce260c327b8b018622675f84b26e12253010f421f7ff4e27be55e01c981889f88978463fe61b61ef4735409973d28b8b01e336f649d2cf1442514c5bcdae59e8a7e9f2e6fb8e1cbb23748c66a0b6fb2012b27425908077bba0f975b59637c4d139ebb2453cf6fa1a27fbfcd0f52f31b9dfd2eef5a5eadb5f3f7fc7cf4896fc087d1e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@@({,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x0f\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-#]/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'memory.pressure\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#+)!:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000002100)) 2m2.498625281s ago: executing program 33 (id=277): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x8000, 0x7f, {0xffffffffffffffff}, {0x0}, 0x25, 0x6}) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080)) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000200)={0x1, 0x37cc, 0xa, 0x0, 0x2, 0x0, [{0xcb, 0x6, 0x6, '\x00', 0x800}, {0xe7ca, 0x781c, 0x101}]}) r4 = openat$cgroup_pressure(r2, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r5, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24004041) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000600)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x210, r10, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6fe63a57c55eb111"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3e9057d9d76b1d9707b8dea68ddd2d3d6ad36595556880fed776e2343200c9f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="75dbf87075f53f0ec727edab6763be70"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b029a4a4be4f778836338714d0a86427fe4f0dc6bb6f6311cf6fb7807caf7408"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="134f715a501c71fbba10d05b8af32ee47657af0f1d80d5d4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "163ef329eda1524c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="80411b830e31e84792552856df4e429d625e7540e2bd309a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7c331869704cc01d2e7dd0672b3736f1"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "47b0ed56eab02df2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="71fc1320c3b4431ad3454e2e6f5cd4da03f5eed6130a42b4"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4dca654e99d64d0c1bf34893c53868102ca42f1e8ea303474016f91dd7fcff58"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fd9be0c4b4e001778aa25b242573a289"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a73b010319a43ee7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "16495d8a3fba071f"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5f3405a959f0eb83fbba6855891c268d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b72fa715dc8cbee8680872816cceaa82"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c25f033968b2bd57"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cd9c48a3393732c3201210272d65bb03a61741c6f9601c098f9999dd9eaf3fdf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b221fe7c033c135f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2490922f7047c04e"}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$COMEDI_SETRSUBD(r2, 0x6410) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001a00)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, {&(0x7f00000009c0)=""/4096, 0x1000}, &(0x7f00000019c0), 0x45}, 0xa0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000001ac0)={0x800, 0x8, 0x2, 0x6}) flock(0xffffffffffffffff, 0x0) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000602, r1, &(0x7f0000001b00)={0x3, 0xffffffffffffffff, 0x1}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b80), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001bc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x34, r11, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x8804) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001d00)={@rand_addr, 0x0}, &(0x7f0000001d40)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001d80)=0x0, &(0x7f0000001dc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001e00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000020c0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002080)={&(0x7f0000001e40)={0x23c, 0x0, 0x100, 0x70bd27, 0x4, {}, [@ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "f716cb2aa8b60eb97871428bace9ce260c327b8b018622675f84b26e12253010f421f7ff4e27be55e01c981889f88978463fe61b61ef4735409973d28b8b01e336f649d2cf1442514c5bcdae59e8a7e9f2e6fb8e1cbb23748c66a0b6fb2012b27425908077bba0f975b59637c4d139ebb2453cf6fa1a27fbfcd0f52f31b9dfd2eef5a5eadb5f3f7fc7cf4896fc087d1e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@@({,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x0f\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-#]/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'memory.pressure\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#+)!:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000002100)) 1m59.382613439s ago: executing program 2 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2000, 0x103) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000007c0)={{0x3, 0x0, 0x800, 0x3}, 0x7, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x7f, 0x0, 0x100}) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r4) add_key(&(0x7f0000000700)='rxrpc\x00', 0x0, &(0x7f0000000740)="0000000000000002ff6900000000006ef829b975b4afa65a1100ecd9df1eaa01000000180000000200020086", 0x2c, r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x10830, &(0x7f00000004c0)='/dev/kvm\x00') sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebb7551382395afa4d23edfcbe6d55b57cc75e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 1m59.258964808s ago: executing program 2 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000005040)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f0000005080)="4987", 0x2}, {&(0x7f00000050c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c8", 0x29}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) 1m59.128756212s ago: executing program 2 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000005040)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f0000005080)="4987", 0x2}, {&(0x7f00000050c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}, {&(0x7f0000005100)="7583076989fe973a150f58a8a084842016b110af59c0ff712f2b78efb3d126c234adc5248e4aadabac8d8b0a83d5163904a2caa712826d62e925ea7d3b64cbba4f032b1a57d02b931d6d339c86225f3e77125940f380cd23197075202c90fa5b52b87753f2513a2b68d26a75c79ad0b1cc", 0x71}, {&(0x7f0000005180)="a05c79f61ca747f6f1f7195e12c964fe781cadac870528eb34a9180b9a6a2ec59230f2c03bf5800ac7af735caab6d9b9bb21d365d33a4116e029103169873269fc1b919235ec3d818fc39dbcc20c8b39ac11c0271f633a093d652950ccaf8a5ec5bda0e0b65a0cc0eb84a84423169c07dc4896f174a0413c015b06acccaf", 0x7e}], 0x5, 0x0, 0x0, 0x11000000}, 0x24008814) 1m59.057067462s ago: executing program 2 (id=370): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002240)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000004340)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004380), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000043c0)='./file1\x00', 0x103042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000004400), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000004440)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000020000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 1m58.825907375s ago: executing program 2 (id=373): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0xb, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000700)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x15, 0x700, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m56.740566994s ago: executing program 2 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000040)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1']) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x43) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002500)={0x10, 0x0, r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x58, r4, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) fcntl$notify(r2, 0x402, 0x17) creat(&(0x7f0000000080)='./file0\x00', 0x20) 1m56.176970295s ago: executing program 34 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000040)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1']) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x43) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002500)={0x10, 0x0, r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x58, r4, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) fcntl$notify(r2, 0x402, 0x17) creat(&(0x7f0000000080)='./file0\x00', 0x20) 1m7.837392306s ago: executing program 4 (id=657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000005040)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f0000005080)}, {&(0x7f00000050c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}, {&(0x7f0000005100)="7583076989fe973a150f58a8a084842016b110af59c0ff712f2b78efb3d126c234adc5248e4aadabac8d8b0a83d5163904a2caa712826d62e925ea7d3b64cbba4f032b1a57d02b931d6d339c86225f3e77125940f380cd23197075202c90fa5b52b87753f2513a2b68d26a75c79ad0b1cc87", 0x72}, {&(0x7f0000005180)="a05c79f61ca747f6f1f7195e12c964fe781cadac870528eb34a9180b9a6a2ec59230f2c03bf5800ac7af735caab6d9b9bb21d365d33a4116e029103169873269fc1b919235ec3d818fc39dbcc20c8b39ac11c0271f633a093d652950ccaf8a5ec5bda0e0b65a0cc0eb84a84423169c07dc4896f174a0413c015b06acccaf", 0x7e}], 0x5, 0x0, 0x0, 0x11000000}, 0x24008814) 1m7.57975259s ago: executing program 4 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000005040)="d09b6d42fd81685544f46c3f08", 0xd}, {&(0x7f0000005080)="4987", 0x2}, {&(0x7f00000050c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) 1m7.341772557s ago: executing program 4 (id=662): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0xb, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000700)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x700000000000000) 1m7.245618921s ago: executing program 4 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x1a) write$P9_RUNLINKAT(r0, &(0x7f0000000340)={0x7, 0x4d, 0x1}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000440)=""/216, &(0x7f0000000540)=0xd8) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40c4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000001c0)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c8001a00160001000301"], 0x1f) sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}], 0x1}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/trace_pipe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x200, 0x7) ptrace(0x1f, r4) read(r3, &(0x7f0000000680)=""/16384, 0x4000) 1m5.794849979s ago: executing program 4 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x12002b, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x4c27e, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000340)='./sys/kernel/reboot/mode\x00') clock_getres(0x5, &(0x7f0000000040)) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x78b}) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1'}, 0xb) 1m5.42807923s ago: executing program 4 (id=676): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000100)={'nr0\x00', {0x2, 0x4e20, @local}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c0012"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030000000090006"], 0x58}}, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) ptrace$ARCH_SET_GS(0x1e, 0xffffffffffffffff, &(0x7f0000000300), 0x1001) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a0029020000007fffffff2502"], 0x14}}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x60, r7, 0x1, 0x71bd28, 0x25dfdc02, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x7, 0x300}}}]}}]}, 0x60}}, 0x110) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0xb, @sdr={0x38305543}}) 1m5.155952123s ago: executing program 35 (id=676): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000100)={'nr0\x00', {0x2, 0x4e20, @local}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c0012"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030000000090006"], 0x58}}, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) ptrace$ARCH_SET_GS(0x1e, 0xffffffffffffffff, &(0x7f0000000300), 0x1001) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a0029020000007fffffff2502"], 0x14}}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x60, r7, 0x1, 0x71bd28, 0x25dfdc02, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x7, 0x300}}}]}}]}, 0x60}}, 0x110) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0xb, @sdr={0x38305543}}) 56.493852835s ago: executing program 7 (id=678): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0) close_range(r1, r2, 0x0) times(&(0x7f0000000080)) write(r0, &(0x7f0000000040), 0xffffff4a) 55.55160218s ago: executing program 7 (id=719): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002240)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000004340)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004380), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000043c0)='./file1\x00', 0x103042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000004400), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000004440)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000042000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 55.409280124s ago: executing program 7 (id=721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000005040)="d09b6d42fd81ba5544f46c3f0800", 0xe}, {&(0x7f0000005080)="4987", 0x2}, {&(0x7f00000050c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) 55.14974326s ago: executing program 7 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000005080)="4987", 0x2}, {&(0x7f00000050c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}, {&(0x7f0000005100)="7583076989fe973a150f58a8a084842016b110af59c0ff712f2b78efb3d126c234adc5248e4aadabac8d8b0a83d5163904a2caa712826d62e925ea7d3b64cbba4f032b1a57d02b931d6d339c86225f3e77125940f380cd23197075202c90fa5b52b87753f2513a2b68d26a75c79ad0b1cc87", 0x72}, {&(0x7f0000005180)="a05c79f61ca747f6f1f7195e12c964fe781cadac870528eb34a9180b9a6a2ec59230f2c03bf5800ac7af735caab6d9b9bb21d365d33a4116e029103169873269fc1b919235ec3d818fc39dbcc20c8b39ac11c0271f633a093d652950ccaf8a5ec5bda0e0b65a0cc0eb84a84423169c07dc4896f174a0413c015b06acccaf", 0x7e}], 0x4, 0x0, 0x0, 0x11000000}, 0x24008814) 54.791344877s ago: executing program 36 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000600)={&(0x7f0000000640)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000005080)="4987", 0x2}, {&(0x7f00000050c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}, {&(0x7f0000005100)="7583076989fe973a150f58a8a084842016b110af59c0ff712f2b78efb3d126c234adc5248e4aadabac8d8b0a83d5163904a2caa712826d62e925ea7d3b64cbba4f032b1a57d02b931d6d339c86225f3e77125940f380cd23197075202c90fa5b52b87753f2513a2b68d26a75c79ad0b1cc87", 0x72}, {&(0x7f0000005180)="a05c79f61ca747f6f1f7195e12c964fe781cadac870528eb34a9180b9a6a2ec59230f2c03bf5800ac7af735caab6d9b9bb21d365d33a4116e029103169873269fc1b919235ec3d818fc39dbcc20c8b39ac11c0271f633a093d652950ccaf8a5ec5bda0e0b65a0cc0eb84a84423169c07dc4896f174a0413c015b06acccaf", 0x7e}], 0x4, 0x0, 0x0, 0x11000000}, 0x24008814) 7.250729258s ago: executing program 3 (id=956): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) (async) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000540)=0x4) (async) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1fd, 0xfffffffffffffffe) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4848, 0xfffffffffffff006}) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) (async) mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) r5 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f30313233343536373839003b3c3d3e3f40"], 0x48, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000240)='(/$\f[^\x00', &(0x7f0000000280)) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x68}) (async) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, 0x0) r7 = memfd_create(&(0x7f00000003c0)='\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r7, 0x0) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000400), &(0x7f0000000440)=0x8) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r4}, 0x0, 0x0, 0x0) 5.766013015s ago: executing program 8 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0xaa2, 0x35, 0x200, 0x9, 0x94, 0x7b02, 0x4ce, 0x0, r5}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x200, 0x7, 0x7f, r5}, 0x10) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0xd0, 0x8801, 0x0, 0x0}, {0xd7, 0x2000, 0x0, 0x0}], 0x2}) 4.660862514s ago: executing program 5 (id=965): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002140)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xfffffffc}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002e000000080003", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350005"], 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 4.282477767s ago: executing program 5 (id=966): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000300)="1c109fc2ab", 0x5}], 0x2}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 4.118698646s ago: executing program 5 (id=967): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000100)=ANY=[], 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000340)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000002340)={0x0, 0x4d}, 0x8) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000002380)=0xfffffffb) (async) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000002380)=0xfffffffb) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) userfaultfd(0x1) (async) r3 = userfaultfd(0x1) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000240)={0x9b0000, 0x83, 0xfffffff8, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x990a72, 0x2, '\x00', @string=0x0}}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) 4.11840275s ago: executing program 3 (id=968): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002240)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000004340)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004380), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000043c0)='./file1\x00', 0x103042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000004400), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000004440)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d974050000000000000400000001001200", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 4.001901594s ago: executing program 3 (id=969): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0xd0, 0x8801, 0x700, 0x0}, {0xd7, 0x2000, 0x0, 0x0}], 0x2}) 3.841862619s ago: executing program 5 (id=970): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1000}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000020700", 0x1c) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x1, 0x1004, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) 3.736828708s ago: executing program 5 (id=971): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1, 0x0, 0xfffffffffffffe0b}, 0x20040000) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000003c0)=0x9, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c0000180045801400040007000000000000001f000000000000aa080001"], 0x34}}, 0x2004c000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x800) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYRES8=r5], 0x78) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3.020681957s ago: executing program 5 (id=973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000900)=ANY=[], 0x0) (rerun: 32) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (rerun: 64) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (rerun: 32) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000980)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "f2ff060d29a200", "7f6b36c5fad288618be08eb602283108", "008000", "15386cef1c184c08"}, 0x28) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000400)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff923d587505a66033816d9d554d83669efc751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d564", 0xb1}], 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async, rerun: 64) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000000600)=""/135, 0x87}], 0x2) (async, rerun: 64) socket(0x2, 0x80805, 0x0) 2.60479055s ago: executing program 8 (id=976): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1ef) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) r0 = syz_open_dev$vim2m(&(0x7f0000000a00), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000a40)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000a80)={0x400004, 0xfffffffc, 0x1, {0x1, @win={{0xf, 0x0, 0xa41e, 0x9}, 0x5, 0x7, &(0x7f0000000b80)={{0x7f, 0xffffffc9, 0x8000, 0x8}, &(0x7f0000000c40)={{0xffffffff, 0x8, 0x6}, &(0x7f0000000240)={{0x107, 0x61, 0x0, 0xb}, &(0x7f0000000200)={{0x1ff, 0x8cc, 0x8b}}}}}, 0x1000000b, &(0x7f0000000c80)="9e07f3d73de859475f2b191f620d0d584ccca16214a2a9d8647fcee5d30fb0ab69578e2a32b43cb27a86ee4c54d5649166982bbf17bd0c7ae90c33322d0083385c502da51921ce463ad86366972c4c75f28f4f09dfdea66bf00be0c558714e7e2c4f818d3dda5540861c5c"}}, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video(&(0x7f00000008c0), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000900)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000980)}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r3, 0x7, 0xfffffffc, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x541b, &(0x7f0000000880)={0x7b, 0x9, 0xa, 0x5, 0x7d, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000009c0)=""/17, 0x11) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x420043, 0x183) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x20, r8, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x4000000) pwritev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)="d2", 0x1}], 0x1, 0x80, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x41, 0x1, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x8, 0xeb, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000800)={&(0x7f0000000840)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x4}]}]}, 0x28}}, 0x0) mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='jffs2\x00', 0x800000, 0x0) 2.519408247s ago: executing program 3 (id=977): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002240)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000004340)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004380), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000043c0)='./file1\x00', 0x103042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000004400), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000004440)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d974050000000000000400000001002000", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 2.397521985s ago: executing program 8 (id=978): r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x19) read(r7, 0x0, 0x0) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x1000d8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x2, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x8000000}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x5, 0x0, 0xac}}, 0xf0}}, 0x40) 2.167310934s ago: executing program 3 (id=980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x154, 0x1a, 0x1, 0xfffffffc, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f}, {0x100, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd25, 0x70bd2b, 0x70bd2c, 0x4}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x20000844) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xffff, @local, 0x4a}, 0x1c) 2.167153802s ago: executing program 6 (id=981): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000004b00)={0x1f, 0x2, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) 2.125532532s ago: executing program 6 (id=982): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000840), 0x1c}], 0x4, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x28}, 0x24000044) listen(r3, 0x14918000) fanotify_init(0x1, 0x80000) rmdir(&(0x7f0000000140)='./file0\x00') getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2.04575476s ago: executing program 6 (id=983): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002cc0)=""/4096, &(0x7f0000002c80)=0x1000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast2, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x79, 0x0, 0xee01}, {0x0, 0xfffffffffffffffc, 0x0, 0x2b, 0xffff, 0xfffffffffffffffd, 0x2}, {0x8001, 0x0, 0x400000000}, 0x0, 0xfffffffd, 0x2, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1, 0x9d8, [0x0, 0x200000000400, 0x200000000d78, 0x200000000da8], 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"]}, 0xa4f) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000000580)='X', 0x1, 0xe0, &(0x7f00000005c0)={0xa, 0x4e23, 0x8000, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0x3}}, 0x2000002, 0x8000, 0xbd, 0x0, 0x54, 0x1, 0x80}, 0x9c) syz_io_uring_setup(0x5003, &(0x7f0000000380)={0x0, 0xcafe, 0x80, 0x2, 0xe}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000003cc0)={0x2020}, 0x2020) 2.042007009s ago: executing program 3 (id=984): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x17c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000640)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000011b000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000007c0)=""/124, 0x20}], 0x3f) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="31fdffffffffffffff74098b2e5e55", 0xf}, {&(0x7f0000000340)="687657749dee079ceafd2517436efe72b9ba8251d343e86d47f23642e68a3734d026549ac85f45a640c0baaa859ed2ee986a3c8e0d635fa825c4465a1f01ceda0709ebae1f10ad682100036acef476f34ef90900eca209bdd036d32a3fd2d0e7fc9d6fe5d5cfdff1111d917ac2607a0e7d63db18bddcf335a3c715ae13c2d9c24230b008118678a18b220a42477fe00b768051f0af3b17edaf6f9de8d27479fb6acbaa3d3a355db65666a83de428844d8202ad35aa77eba2cf6009fca017b86384b448579c8bdf7f481b26fd7aff831444d6d5960f90224ab4b7acfa808502fdbac3ddc5d067b259709a9fdc7e5da402bb6347947eeba1c9041576593d6c5e7f1fabdf75b45c727a59cb8fb2974cc08bd5b54e856ada5a4ebc2282276168894f46cdd34ed222f633aa73472946d1fc29d83fbe3121e591f0fd69ded6108fa75d5850250cad4a827db6909edabaa3cb86fa8ca07c38eae35354657b69846b22b1a2a3a883e846d00780ad90a247b781ccb021f6d017ff727fd234e34475797aa64c5e8e2f615f290484cd29aa7da49e59cb67de312a731f07c0f2148cc1acc7bec84005aeca756a74a8c1f9a37d12b27c0bb761ef09b4c9736568d47adca9d3db2504d0aeedb1774bcb762f5ed8c336b5f436f52deca10c08f4e2fa32634f5ce1f5584ddcadf3c39c24dafa7a66ef2e12bc1b18638ca0dc6250a8cb95c0877247194fcff7b515312bc79c66fe3431ebbe269a01", 0x213}], 0x2}}], 0x1, 0x2090) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000600)='cdg', 0x3) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0xd0, 0x0, 0x0, 0x0}, {0xd7, 0x2000, 0x0, 0x0}], 0x2}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000006c0)={{&(0x7f0000553000/0x3000)=nil, 0x3000}, 0x1}) 1.870672128s ago: executing program 6 (id=985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000300)=ANY=[], 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000740)={0x27, 0x0, 0x1, 0x5, 0x0, 0x5, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r3, 0x0, 0x3d, 0x0, &(0x7f00000007c0)=@ax25={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380)='proc\x00', 0x80, 0x0) syz_open_procfs(r5, &(0x7f0000000700)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r7 = mq_open(&(0x7f00000003c0)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NMd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJZ\x1cYGz\x8e\xdfE\xc9*\xfd\xfea}\xf3oa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb484R\x8f\xd4\x9a\xadB\xd2C\x11d\x0e\x8c\x1f\xfcm4\x88\x92RT=i\x1f)aN\x00\xcf\r`\xb5\xc3\x88\xb9G\xf0', 0x40, 0x124, 0x0) mq_notify(r7, &(0x7f00000006c0)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(r7, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0x10, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0x0, 0xa, 0x3, 0x2, 0x5, 0xf9, 0x4c, 0x6, 0x8, 0x5, 0x6}, {0xb000, 0xe000, 0xf, 0x4, 0x9, 0x7, 0x7f, 0x81, 0x1, 0xd, 0x6, 0x5}, {0xfec00000, 0x58000, 0xf, 0xfb, 0x8, 0xf7, 0x9, 0x8, 0x2f, 0x7e, 0xa3, 0x5}, {0xeeee0000, 0x2000, 0x10, 0x3, 0x4, 0x9, 0x0, 0x0, 0xe3, 0x9, 0x3, 0x8}, {0x3ff8, 0x5000, 0xf, 0x81, 0x9, 0x6, 0x6, 0x3, 0x40, 0xc, 0x3, 0x7}, {0x54000, 0xfec00000, 0x9, 0x8, 0x6, 0x81, 0xf7, 0x5, 0xfe, 0x2, 0x8, 0xf}, {0x100000, 0xb000, 0x0, 0xf, 0x7, 0x1, 0x7, 0x2, 0x3, 0xff, 0xd5, 0xe}, {0xb000, 0x41000, 0xb, 0x4, 0x2, 0x6, 0x3, 0x8, 0x0, 0xd, 0x4, 0x6}, {0x1000, 0x5}, {0x7000}, 0x20000010, 0x0, 0x60000, 0x0, 0x9, 0x1400, 0x1, [0x1, 0x2, 0x1, 0x80000001]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.794537958s ago: executing program 8 (id=986): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0xd0, 0x8801, 0x2000, 0x0}, {0xd7, 0x2000, 0x0, 0x0}], 0x2}) 483.53214ms ago: executing program 6 (id=987): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002140)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xfffffffc}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350005"], 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 354.86226ms ago: executing program 8 (id=988): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002240)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000004340)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004380), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000043c0)='./file1\x00', 0x103042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000004400), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000004440)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100001200", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 210.229298ms ago: executing program 8 (id=989): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = dup(r0) fadvise64(r0, 0x8000000000000db, 0x14f, 0x5) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000001140), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, &(0x7f0000001180)={0x30a32c0, 0x2, @qpsk={0x8, 0x1}}) write$UHID_INPUT(r1, &(0x7f0000000100)={0x8, {"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", 0x1000}}, 0xfffffe38) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 0s ago: executing program 6 (id=990): ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000003c0)={0x5, 0x7fff}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @random=0x3b, 0x5b04, @void, @val={0x1, 0x2, [{0x1}, {0x2, 0x1}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x30}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @random=0x3b, 0x5b04, @void, @val={0x1, 0x2, [{0x1}, {0x2, 0x1}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x30}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000500)='westwood', 0x8) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000500)='westwood', 0x8) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x24000045, &(0x7f0000000580)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) sendto$inet6(r5, &(0x7f00000005c0), 0xffffffffffffff64, 0x4015, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="e810b3a4c87167212085b05520628769a3df78d75430f3635942667244c552bd4df43e76e65548d455a241593b8bcab55e80b97054def55ae0c0ea85c423705f4b", 0x41) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000380)={'bridge_slave_1\x00', {0x2, 0x0, @local}}) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x38}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4850}, 0x20000001) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) kernel console output (not intermixed with test programs): urations [ 333.505387][ T1578] usb 7-1: can't read configurations, error -22 [ 333.505718][ T1578] usb usb7-port1: unable to enumerate USB device [ 333.586239][ T8690] x_tables: duplicate underflow at hook 2 [ 333.655419][ T8685] F2FS-fs: Conflicting test_dummy_encryption options [ 333.675336][ T5786] usbhid 4-1:0.0: can't add hid device: -71 [ 333.675443][ T5786] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 333.682344][ T5786] usb 4-1: USB disconnect, device number 22 [ 333.831508][ T6216] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.978385][ T6216] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.116123][ T6216] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.276937][ T6216] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.410706][ T5653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.413139][ T8701] FAULT_INJECTION: forcing a failure. [ 334.413139][ T8701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.413166][ T8701] CPU: 1 UID: 0 PID: 8701 Comm: syz.5.725 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 334.413187][ T8701] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 334.413192][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.413201][ T8701] Call Trace: [ 334.413207][ T8701] [ 334.413214][ T8701] dump_stack_lvl+0xe8/0x150 [ 334.413243][ T8701] should_fail_ex+0x3eb/0x540 [ 334.413266][ T8701] _copy_from_iter+0x3b0/0x1680 [ 334.413295][ T8701] ? __pfx__copy_from_iter+0x10/0x10 [ 334.413321][ T8701] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 334.413349][ T8701] skb_copy_datagram_from_iter+0xe6/0x720 [ 334.413377][ T8701] ? dev_get_by_index+0x22/0x2d0 [ 334.413392][ T8701] ? skb_put+0x112/0x210 [ 334.413414][ T8701] packet_sendmsg+0x37c7/0x51b0 [ 334.413444][ T8701] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 334.413469][ T8701] ? __lock_acquire+0x747/0x2de0 [ 334.413491][ T8701] ? __pfx_process_measurement+0x10/0x10 [ 334.413514][ T8701] ? lock_acquire+0x115/0x350 [ 334.413531][ T8701] ? __lock_acquire+0x747/0x2de0 [ 334.413556][ T8701] ? __pfx_packet_sendmsg+0x10/0x10 [ 334.413577][ T8701] ? aa_sk_perm+0x6ff/0x8f0 [ 334.413597][ T8701] ? __lock_acquire+0x747/0x2de0 [ 334.413619][ T8701] ? __pfx_lock_chain_count+0x10/0x10 [ 334.413642][ T8701] ? __pfx_aa_sk_perm+0x10/0x10 [ 334.413669][ T8701] ? aa_sock_msg_perm+0x144/0x210 [ 334.413698][ T8701] ? apparmor_socket_sendmsg+0x26d/0x360 [ 334.413721][ T8701] ? __pfx_packet_sendmsg+0x10/0x10 [ 334.413743][ T8701] sock_sendmsg_nosec+0x14e/0x190 [ 334.413764][ T8701] ____sys_sendmsg+0x54e/0x850 [ 334.413788][ T8701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.413813][ T8701] ? import_iovec+0x73/0xa0 [ 334.413835][ T8701] ___sys_sendmsg+0x2a5/0x360 [ 334.413853][ T8701] ? __lock_acquire+0x747/0x2de0 [ 334.413872][ T8701] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.413919][ T8701] ? __fget_files+0x3a2/0x420 [ 334.413952][ T8701] ? __fget_files+0x2a/0x420 [ 334.413980][ T8701] __x64_sys_sendmsg+0x1b1/0x290 [ 334.414003][ T8701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.414042][ T8701] do_syscall_64+0x166/0x520 [ 334.414062][ T8701] ? trace_irq_disable+0x3b/0x140 [ 334.414079][ T8701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.414094][ T8701] ? clear_bhb_loop+0x70/0xc0 [ 334.414115][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.414131][ T8701] RIP: 0033:0x7f2c97f9e559 [ 334.414148][ T8701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.414159][ T8701] RSP: 002b:00007f2c98e34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.414175][ T8701] RAX: ffffffffffffffda RBX: 00007f2c98225fa0 RCX: 00007f2c97f9e559 [ 334.414184][ T8701] RDX: 0000000024008814 RSI: 0000200000000600 RDI: 0000000000000004 [ 334.414194][ T8701] RBP: 00007f2c98e34090 R08: 0000000000000000 R09: 0000000000000000 [ 334.414203][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.414211][ T8701] R13: 00007f2c98226038 R14: 00007f2c98225fa0 R15: 00007ffef2a4fe48 [ 334.414237][ T8701] [ 334.422631][ T5653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.451656][ T5653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.480772][ T5653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.484918][ T5653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.745620][ T8705] loop0: detected capacity change from 0 to 4096 [ 334.886289][ T6216] bridge_slave_1: left allmulticast mode [ 334.886317][ T6216] bridge_slave_1: left promiscuous mode [ 334.886561][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.919790][ T6216] bridge_slave_0: left allmulticast mode [ 334.919818][ T6216] bridge_slave_0: left promiscuous mode [ 334.920067][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.247410][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.250895][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.256808][ T6216] bond0 (unregistering): Released all slaves [ 335.475234][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 335.628155][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 335.629835][ T10] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 335.631336][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.662399][ T10] usb 6-1: config 0 descriptor?? [ 335.721934][ T33] audit: type=1800 audit(1792419173.368:58): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.729" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 335.907200][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 335.949744][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 335.950871][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 335.950920][ T10] usb 6-1: media controller created [ 335.998240][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.126439][ T8698] rxe_eth0 speed is unknown, defaulting to 1000 [ 336.129132][ T10] az6027: usb out operation failed. (-71) [ 336.129502][ T10] az6027: usb out operation failed. (-71) [ 336.129513][ T10] stb0899_attach: Driver disabled by Kconfig [ 336.129522][ T10] az6027: no front-end attached [ 336.129522][ T10] [ 336.129873][ T10] az6027: usb out operation failed. (-71) [ 336.129885][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 336.188722][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 336.205167][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 336.205190][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 336.239485][ T10] usb 6-1: USB disconnect, device number 18 [ 336.259651][ T8740] x_tables: duplicate underflow at hook 2 [ 336.423311][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17 [ 336.438772][ T8743] FAULT_INJECTION: forcing a failure. [ 336.438772][ T8743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.438805][ T8743] CPU: 1 UID: 0 PID: 8743 Comm: syz.3.733 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 336.438836][ T8743] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 336.438844][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.438856][ T8743] Call Trace: [ 336.438863][ T8743] [ 336.438870][ T8743] dump_stack_lvl+0xe8/0x150 [ 336.438902][ T8743] should_fail_ex+0x3eb/0x540 [ 336.438933][ T8743] _copy_from_iter+0x4fa/0x1680 [ 336.438968][ T8743] ? __pfx__copy_from_iter+0x10/0x10 [ 336.438999][ T8743] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 336.439031][ T8743] skb_copy_datagram_from_iter+0xe6/0x720 [ 336.439060][ T8743] ? dev_get_by_index+0x22/0x2d0 [ 336.439080][ T8743] ? skb_put+0x112/0x210 [ 336.439106][ T8743] packet_sendmsg+0x37c7/0x51b0 [ 336.439140][ T8743] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 336.439167][ T8743] ? __lock_acquire+0x747/0x2de0 [ 336.439192][ T8743] ? __pfx_process_measurement+0x10/0x10 [ 336.439219][ T8743] ? lock_acquire+0x115/0x350 [ 336.439238][ T8743] ? __lock_acquire+0x747/0x2de0 [ 336.439264][ T8743] ? __pfx_packet_sendmsg+0x10/0x10 [ 336.439289][ T8743] ? aa_sk_perm+0x6ff/0x8f0 [ 336.439311][ T8743] ? __lock_acquire+0x747/0x2de0 [ 336.439333][ T8743] ? __pfx_lock_chain_count+0x10/0x10 [ 336.439359][ T8743] ? __pfx_aa_sk_perm+0x10/0x10 [ 336.439386][ T8743] ? aa_sock_msg_perm+0x144/0x210 [ 336.439416][ T8743] ? apparmor_socket_sendmsg+0x26d/0x360 [ 336.439449][ T8743] ? __pfx_packet_sendmsg+0x10/0x10 [ 336.439473][ T8743] sock_sendmsg_nosec+0x14e/0x190 [ 336.439496][ T8743] ____sys_sendmsg+0x54e/0x850 [ 336.439526][ T8743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.439559][ T8743] ? import_iovec+0x73/0xa0 [ 336.439587][ T8743] ___sys_sendmsg+0x2a5/0x360 [ 336.439610][ T8743] ? __lock_acquire+0x747/0x2de0 [ 336.439633][ T8743] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.439691][ T8743] ? __fget_files+0x3a2/0x420 [ 336.439718][ T8743] ? __fget_files+0x2a/0x420 [ 336.439751][ T8743] __x64_sys_sendmsg+0x1b1/0x290 [ 336.439779][ T8743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.439823][ T8743] do_syscall_64+0x166/0x520 [ 336.439847][ T8743] ? trace_irq_disable+0x3b/0x140 [ 336.439867][ T8743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.439886][ T8743] ? clear_bhb_loop+0x70/0xc0 [ 336.439908][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.439927][ T8743] RIP: 0033:0x7f4eb8b9e559 [ 336.439945][ T8743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.439960][ T8743] RSP: 002b:00007f4eb9b22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.439980][ T8743] RAX: ffffffffffffffda RBX: 00007f4eb8e25fa0 RCX: 00007f4eb8b9e559 [ 336.439994][ T8743] RDX: 0000000024008814 RSI: 0000200000000600 RDI: 0000000000000004 [ 336.440008][ T8743] RBP: 00007f4eb9b22090 R08: 0000000000000000 R09: 0000000000000000 [ 336.440020][ T8743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.440031][ T8743] R13: 00007f4eb8e26038 R14: 00007f4eb8e25fa0 R15: 00007ffdd061e0f8 [ 336.440061][ T8743] [ 336.583831][ T5647] Bluetooth: hci1: command tx timeout [ 336.637254][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 337.037377][ T6216] hsr_slave_0: left promiscuous mode [ 337.043719][ T6216] hsr_slave_1: left promiscuous mode [ 337.044777][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.044797][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.055704][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.055724][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.178694][ T6216] veth1_macvtap: left promiscuous mode [ 337.178734][ T6216] veth0_macvtap: left promiscuous mode [ 337.178836][ T6216] veth1_vlan: left promiscuous mode [ 337.178903][ T6216] veth0_vlan: left promiscuous mode [ 337.599135][ T8767] sctp: [Deprecated]: syz.6.737 (pid 8767) Use of int in max_burst socket option deprecated. [ 337.599135][ T8767] Use struct sctp_assoc_value instead [ 337.833316][ T33] audit: type=1800 audit(1792419175.488:59): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.738" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 338.011940][ T6216] team0 (unregistering): Port device team_slave_1 removed [ 338.045463][ T6216] team0 (unregistering): Port device team_slave_0 removed [ 338.100728][ T8784] x_tables: duplicate underflow at hook 2 [ 338.235058][ T8698] lo speed is unknown, defaulting to 1000 [ 338.236902][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 338.283531][ T1578] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 338.377722][ T8787] FAULT_INJECTION: forcing a failure. [ 338.377722][ T8787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.377753][ T8787] CPU: 0 UID: 0 PID: 8787 Comm: syz.5.744 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 338.377780][ T8787] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 338.377787][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.377798][ T8787] Call Trace: [ 338.377806][ T8787] [ 338.377814][ T8787] dump_stack_lvl+0xe8/0x150 [ 338.377846][ T8787] should_fail_ex+0x3eb/0x540 [ 338.377877][ T8787] _copy_to_user+0x31/0xb0 [ 338.377905][ T8787] simple_read_from_buffer+0xe1/0x170 [ 338.378047][ T8787] proc_fail_nth_read+0x1bb/0x230 [ 338.378072][ T8787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.378097][ T8787] ? rw_verify_area+0x24a/0x4c0 [ 338.378126][ T8787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.378145][ T8787] vfs_read+0x213/0xa80 [ 338.378177][ T8787] ? __pfx___mutex_lock+0x10/0x10 [ 338.378205][ T8787] ? __pfx_vfs_read+0x10/0x10 [ 338.378234][ T8787] ? __fget_files+0x2a/0x420 [ 338.378259][ T8787] ? __fget_files+0x3a2/0x420 [ 338.378291][ T8787] ? __fget_files+0x2a/0x420 [ 338.378332][ T8787] ? fdget+0x1ac/0x250 [ 338.378359][ T8787] ksys_read+0x150/0x270 [ 338.378388][ T8787] ? __pfx_ksys_read+0x10/0x10 [ 338.378426][ T8787] do_syscall_64+0x166/0x520 [ 338.378450][ T8787] ? trace_irq_disable+0x3b/0x140 [ 338.378469][ T8787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.378488][ T8787] ? clear_bhb_loop+0x70/0xc0 [ 338.378511][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.378530][ T8787] RIP: 0033:0x7f2c97f5ed8e [ 338.378549][ T8787] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 338.378564][ T8787] RSP: 002b:00007f2c98e33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.378583][ T8787] RAX: ffffffffffffffda RBX: 00007f2c98e346c0 RCX: 00007f2c97f5ed8e [ 338.378597][ T8787] RDX: 000000000000000f RSI: 00007f2c98e340a0 RDI: 0000000000000005 [ 338.378609][ T8787] RBP: 00007f2c98e34090 R08: 0000000000000000 R09: 0000000000000000 [ 338.378620][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.378631][ T8787] R13: 00007f2c98226038 R14: 00007f2c98225fa0 R15: 00007ffef2a4fe48 [ 338.378664][ T8787] [ 338.500465][ T1578] usb 7-1: Using ep0 maxpacket: 32 [ 338.524488][ T1578] usb 7-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 338.597417][ T1578] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.659046][ T1578] usb 7-1: config 0 descriptor?? [ 338.660031][ T5647] Bluetooth: hci1: command tx timeout [ 338.900646][ T1578] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 338.914640][ T1578] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.915596][ T1578] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 338.915661][ T1578] usb 7-1: media controller created [ 338.962017][ T1578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.053935][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 339.129494][ T1578] az6027: usb out operation failed. (-71) [ 339.129867][ T1578] az6027: usb out operation failed. (-71) [ 339.129885][ T1578] stb0899_attach: Driver disabled by Kconfig [ 339.129894][ T1578] az6027: no front-end attached [ 339.129894][ T1578] [ 339.130243][ T1578] az6027: usb out operation failed. (-71) [ 339.130255][ T1578] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 339.178612][ T1578] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 339.186212][ T1578] dvb-usb: schedule remote query interval to 400 msecs. [ 339.186240][ T1578] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 339.220822][ T10] usb 6-1: New USB device found: idVendor=5543, idProduct=0045, bcdDevice=0.00 [ 339.222145][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.222173][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.222193][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.222230][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.224329][ T1578] usb 7-1: USB disconnect, device number 19 [ 339.294810][ T10] usb 6-1: config 0 descriptor?? [ 339.414530][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.414640][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.414765][ T8698] bridge_slave_0: entered allmulticast mode [ 339.427680][ T8698] bridge_slave_0: entered promiscuous mode [ 339.435819][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.439126][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.439289][ T8698] bridge_slave_1: entered allmulticast mode [ 339.444176][ T8698] bridge_slave_1: entered promiscuous mode [ 339.460126][ T1578] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 339.548973][ T8698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.565962][ T8698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.619860][ T8698] team0: Port device team_slave_0 added [ 339.631203][ T8698] team0: Port device team_slave_1 added [ 339.675971][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.675989][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.676011][ T8698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.678247][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.678262][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.678284][ T8698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.859931][ T8698] hsr_slave_0: entered promiscuous mode [ 339.861117][ T8698] hsr_slave_1: entered promiscuous mode [ 339.861965][ T8698] debugfs: 'hsr0' already exists in 'hsr' [ 339.861983][ T8698] Cannot create hsr debugfs directory [ 339.888791][ T5273] 8021q: adding VLAN 0 to HW filter on device eth19 [ 339.962348][ T10] usb 6-1: string descriptor 0 read error: -71 [ 339.962902][ T10] uclogic 0003:5543:0045.0009: failed retrieving string descriptor #200: -71 [ 339.963089][ T10] uclogic 0003:5543:0045.0009: failed retrieving pen parameters: -71 [ 339.963109][ T10] uclogic 0003:5543:0045.0009: failed probing pen v2 parameters: -71 [ 339.963193][ T10] uclogic 0003:5543:0045.0009: failed probing parameters: -71 [ 339.963296][ T10] uclogic 0003:5543:0045.0009: probe with driver uclogic failed with error -71 [ 340.016592][ T10] usb 6-1: USB disconnect, device number 19 [ 340.032725][ T33] audit: type=1800 audit(1792419177.678:60): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.749" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 340.343600][ T8698] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 340.352681][ T8698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.370737][ T8698] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 340.389332][ T8698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.390284][ T8698] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 340.399845][ T8833] x_tables: duplicate underflow at hook 2 [ 340.426083][ T8698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.427188][ T8698] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 340.431434][ T8698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.514697][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 340.637435][ T8698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.663775][ T10] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 340.664931][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 340.664959][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 340.664980][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.665027][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.670270][ T8828] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.670403][ T8828] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.690748][ T8698] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.714720][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.714820][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.737307][ T5647] Bluetooth: hci1: command tx timeout [ 340.750495][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.750624][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.782358][ T10] pl2303 4-1:1.0: pl2303 converter detected [ 340.794522][ T10] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 340.990581][ T8828] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 340.990947][ T8828] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 340.991041][ T8828] FAULT_INJECTION: forcing a failure. [ 340.991041][ T8828] name failslab, interval 1, probability 5, space 0, times 9976 [ 340.991071][ T8828] CPU: 0 UID: 0 PID: 8828 Comm: syz.3.752 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 340.991099][ T8828] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 340.991108][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.991120][ T8828] Call Trace: [ 340.991127][ T8828] [ 340.991136][ T8828] dump_stack_lvl+0xe8/0x150 [ 340.991170][ T8828] should_fail_ex+0x3eb/0x540 [ 340.991203][ T8828] should_failslab+0xa8/0x100 [ 340.991228][ T8828] __kmalloc_cache_noprof+0x9e/0x600 [ 340.991255][ T8828] ? vfs_open_consume+0x4a/0x350 [ 340.991278][ T8828] ? do_file_open+0x23e/0x4a0 [ 340.991295][ T8828] ? dummy_urb_enqueue+0x7c/0x780 [ 340.991408][ T8828] ? dummy_urb_enqueue+0x7c/0x780 [ 340.991444][ T8828] dummy_urb_enqueue+0x7c/0x780 [ 340.991469][ T8828] ? usb_hcd_map_urb_for_dma+0x435/0xc50 [ 340.991583][ T8828] usb_hcd_submit_urb+0x328/0x1b60 [ 340.991622][ T8828] usb_start_wait_urb+0x13f/0x5b0 [ 340.991646][ T8828] ? trace_kmalloc+0x2a/0xf0 [ 340.991673][ T8828] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 340.991711][ T8828] usb_control_msg+0x234/0x3e0 [ 340.991736][ T8828] pl2303_set_termios+0x1388/0x2930 [ 340.991823][ T8828] pl2303_open+0x1c5/0x3f0 [ 340.991850][ T8828] serial_port_activate+0x151/0x250 [ 340.991934][ T8828] tty_port_open+0x1df/0x2d0 [ 340.992053][ T8828] tty_open+0x48a/0xd80 [ 340.992087][ T8828] ? __pfx_tty_open+0x10/0x10 [ 340.992110][ T8828] ? do_raw_spin_unlock+0xf5/0x200 [ 340.992139][ T8828] chrdev_open+0x4d9/0x600 [ 340.992166][ T8828] ? __pfx_chrdev_open+0x10/0x10 [ 340.992187][ T8828] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 340.992245][ T8828] ? devcgroup_check_permission+0x31/0x8f0 [ 340.992273][ T8828] ? __pfx_chrdev_open+0x10/0x10 [ 340.992293][ T8828] do_dentry_open+0x80e/0x1360 [ 340.992328][ T8828] vfs_open_consume+0x4a/0x350 [ 340.992348][ T8828] ? path_openat+0x16e1/0x20f0 [ 340.992370][ T8828] path_openat+0x16fc/0x20f0 [ 340.992404][ T8828] do_file_open+0x23e/0x4a0 [ 340.992430][ T8828] ? __pfx_do_file_open+0x10/0x10 [ 340.992472][ T8828] ? _raw_spin_unlock+0x28/0x50 [ 340.992495][ T8828] ? alloc_fd+0x6af/0x760 [ 340.992528][ T8828] do_sys_openat2+0x115/0x200 [ 340.992548][ T8828] ? __se_sys_futex+0x3a8/0x450 [ 340.992573][ T8828] ? __pfx_do_sys_openat2+0x10/0x10 [ 340.992602][ T8828] ? rcu_is_watching+0x16/0xb0 [ 340.992631][ T8828] __x64_sys_openat+0x138/0x170 [ 340.992659][ T8828] do_syscall_64+0x166/0x520 [ 340.992681][ T8828] ? trace_irq_disable+0x3b/0x140 [ 340.992699][ T8828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.992719][ T8828] ? clear_bhb_loop+0x70/0xc0 [ 340.992742][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.992761][ T8828] RIP: 0033:0x7f4eb8b9e559 [ 340.992779][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.992795][ T8828] RSP: 002b:00007f4eb9b22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 340.992816][ T8828] RAX: ffffffffffffffda RBX: 00007f4eb8e25fa0 RCX: 00007f4eb8b9e559 [ 340.992832][ T8828] RDX: 0000000000028d00 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 340.992844][ T8828] RBP: 00007f4eb8c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 340.992857][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.992869][ T8828] R13: 00007f4eb8e26038 R14: 00007f4eb8e25fa0 R15: 00007ffdd061e0f8 [ 340.992901][ T8828] [ 341.152929][ T8828] pl2303 ttyUSB0: pl2303_set_line_request - failed: -12 [ 341.158464][ T8828] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 341.159245][ T8828] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 341.444600][ T8827] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 341.469082][ T8827] pl2303 ttyUSB0: error sending break = -32 [ 341.480165][ T1578] usb 4-1: USB disconnect, device number 23 [ 341.515704][ T1578] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 341.531249][ T1578] pl2303 4-1:1.0: device disconnected [ 341.773732][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 341.924108][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 341.925488][ T9] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 341.926641][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.932771][ T9] usb 6-1: config 0 descriptor?? [ 341.938198][ T5273] 8021q: adding VLAN 0 to HW filter on device eth20 [ 342.184287][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 342.207630][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.208744][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 342.208795][ T9] usb 6-1: media controller created [ 342.252140][ T8698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.262074][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.264352][ T33] audit: type=1800 audit(1792419179.918:61): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.758" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 342.390489][ T9] az6027: usb out operation failed. (-71) [ 342.392551][ T9] az6027: usb out operation failed. (-71) [ 342.392569][ T9] stb0899_attach: Driver disabled by Kconfig [ 342.392578][ T9] az6027: no front-end attached [ 342.392578][ T9] [ 342.414756][ T9] az6027: usb out operation failed. (-71) [ 342.414778][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 342.437404][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 342.442537][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 342.442562][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 342.476082][ T9] usb 6-1: USB disconnect, device number 20 [ 342.559259][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 342.614663][ T8895] FAULT_INJECTION: forcing a failure. [ 342.614663][ T8895] name fail_futex, interval 1, probability 0, space 0, times 1 [ 342.614698][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: syz.3.759 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 342.614726][ T8895] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 342.614733][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.614745][ T8895] Call Trace: [ 342.614751][ T8895] [ 342.614760][ T8895] dump_stack_lvl+0xe8/0x150 [ 342.614792][ T8895] should_fail_ex+0x3eb/0x540 [ 342.614824][ T8895] get_futex_key+0x1ab/0x1410 [ 342.614848][ T8895] ? __pfx_futex_wake_mark+0x10/0x10 [ 342.614884][ T8895] ? __pfx_get_futex_key+0x10/0x10 [ 342.614913][ T8895] futex_wake+0x119/0x5f0 [ 342.614944][ T8895] ? __pfx_futex_wake+0x10/0x10 [ 342.614970][ T8895] ? __lock_acquire+0x747/0x2de0 [ 342.615003][ T8895] do_futex+0x458/0x4e0 [ 342.615032][ T8895] ? __pfx_do_futex+0x10/0x10 [ 342.615054][ T8895] ? lock_acquire+0x115/0x350 [ 342.615080][ T8895] __se_sys_futex+0x3a8/0x450 [ 342.615108][ T8895] ? __fget_files+0x2a/0x420 [ 342.615139][ T8895] ? __pfx___se_sys_futex+0x10/0x10 [ 342.615172][ T8895] ? __x64_sys_futex+0x21/0xf0 [ 342.615200][ T8895] do_syscall_64+0x166/0x520 [ 342.615224][ T8895] ? trace_irq_disable+0x3b/0x140 [ 342.615244][ T8895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.615264][ T8895] ? clear_bhb_loop+0x70/0xc0 [ 342.615288][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.615305][ T8895] RIP: 0033:0x7f4eb8b9e559 [ 342.615324][ T8895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.615339][ T8895] RSP: 002b:00007f4eb9b220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 342.615359][ T8895] RAX: ffffffffffffffda RBX: 00007f4eb8e25fa8 RCX: 00007f4eb8b9e559 [ 342.615374][ T8895] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4eb8e25fac [ 342.615387][ T8895] RBP: 00007f4eb8e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 342.615400][ T8895] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 342.615412][ T8895] R13: 00007f4eb8e26038 R14: 00007ffdd061e010 R15: 00007ffdd061e0f8 [ 342.615437][ T8895] [ 342.714844][ T8895] @ÿ: renamed from veth0_vlan (while UP) [ 342.819217][ T5647] Bluetooth: hci1: command tx timeout [ 343.066220][ T33] audit: type=1326 audit(1792419180.718:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.762" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd41f59e559 code=0x0 [ 343.097150][ T8698] veth0_vlan: entered promiscuous mode [ 343.121944][ T8698] veth1_vlan: entered promiscuous mode [ 343.128546][ T8908] x_tables: duplicate underflow at hook 2 [ 343.131575][ T8909] netlink: 'syz.6.762': attribute type 1 has an invalid length. [ 343.131594][ T8909] netlink: 'syz.6.762': attribute type 2 has an invalid length. [ 343.131607][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.6.762'. [ 343.217550][ T8698] veth0_macvtap: entered promiscuous mode [ 343.239942][ T8698] veth1_macvtap: entered promiscuous mode [ 343.266268][ T8698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.286975][ T8698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.327815][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.328704][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.328885][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.328925][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.534377][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.534399][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.648455][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.648479][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.178156][ T5785] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 344.326555][ T5785] usb 9-1: Using ep0 maxpacket: 8 [ 344.328916][ T5785] usb 9-1: New USB device found: idVendor=1235, idProduct=8211, bcdDevice=0.40 [ 344.343449][ T5785] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.343475][ T5785] usb 9-1: Product: syz [ 344.343489][ T5785] usb 9-1: Manufacturer: syz [ 344.343501][ T5785] usb 9-1: SerialNumber: syz [ 344.385746][ T33] audit: type=1800 audit(1792419182.028:63): pid=8942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.767" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 344.592891][ T5785] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 344.614687][ T5637] svc: failed to register nfsdv3 RPC service (errno 5). [ 344.614711][ T5637] failed to unregister udp with rpcbind [ 344.621361][ T5785] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 344.621459][ T5785] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 344.759316][ T8962] random: crng reseeded on system resumption [ 344.871260][ T5785] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 344.891594][ T8964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.929967][ T5785] usb 9-1: USB disconnect, device number 2 [ 345.005518][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.043625][ T1578] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 345.193208][ T1578] usb 4-1: Using ep0 maxpacket: 32 [ 345.194475][ T1578] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 345.197607][ T1578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.203216][ T1578] usb 4-1: config 0 descriptor?? [ 345.372893][ T8985] x_tables: duplicate underflow at hook 2 [ 345.424933][ T1578] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 345.431281][ T1578] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.432169][ T1578] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 345.432218][ T1578] usb 4-1: media controller created [ 345.478473][ T1578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.613718][ T7975] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 345.640757][ T1578] az6027: usb out operation failed. (-71) [ 345.642702][ T1578] az6027: usb out operation failed. (-71) [ 345.642719][ T1578] stb0899_attach: Driver disabled by Kconfig [ 345.642729][ T1578] az6027: no front-end attached [ 345.642729][ T1578] [ 345.645791][ T1578] az6027: usb out operation failed. (-71) [ 345.645809][ T1578] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 345.654084][ T1578] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 345.704054][ T1578] dvb-usb: schedule remote query interval to 400 msecs. [ 345.704077][ T1578] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 345.725283][ T1578] usb 4-1: USB disconnect, device number 24 [ 345.780607][ T7975] usb 9-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 345.787097][ T7975] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 345.787122][ T7975] usb 9-1: config 0 has no interface number 0 [ 345.797045][ T7975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.797071][ T7975] usb 9-1: Product: syz [ 345.797084][ T7975] usb 9-1: Manufacturer: syz [ 345.797097][ T7975] usb 9-1: SerialNumber: syz [ 345.804942][ T7975] usb 9-1: config 0 descriptor?? [ 346.003643][ T1578] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 346.060237][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.060754][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.200973][ T8997] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 346.352371][ T7975] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 346.352402][ T7975] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 346.352647][ T7975] asix 9-1:0.251: probe with driver asix failed with error -71 [ 346.395957][ T7975] usb 9-1: USB disconnect, device number 3 [ 346.434771][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 346.542510][ T1578] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 346.583249][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 346.584114][ T10] usb 7-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 346.590494][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.590521][ T10] usb 7-1: Product: syz [ 346.590535][ T10] usb 7-1: Manufacturer: syz [ 346.590548][ T10] usb 7-1: SerialNumber: syz [ 346.609726][ T10] usb 7-1: config 0 descriptor?? [ 346.705350][ T1578] usb 4-1: New USB device found: idVendor=05ac, idProduct=0231, bcdDevice=0.00 [ 346.710605][ T1578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 346.710657][ T1578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.717002][ T1578] usb 4-1: config 0 descriptor?? [ 346.720153][ T9009] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 346.750579][ T1578] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 346.827394][ T10] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 346.964132][ T9009] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 347.003190][ T4963] bcm5974 4-1:0.0: could not read from device [ 347.012030][ T4963] bcm5974 4-1:0.0: could not read from device [ 347.025013][ T1578] usb 4-1: USB disconnect, device number 25 [ 347.089846][ T33] audit: type=1326 audit(1792419184.738:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.8.780" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f800ad9e559 code=0x0 [ 347.092075][ T33] audit: type=1800 audit(1792419184.738:65): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.779" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 347.553563][ T5838] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 347.703298][ T5838] usb 6-1: Using ep0 maxpacket: 32 [ 347.704485][ T5838] usb 6-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 347.733399][ T5838] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 347.733451][ T5838] usb 6-1: config 0 has no interface number 0 [ 347.733489][ T5838] usb 6-1: config 0 interface 12 has no altsetting 0 [ 347.741176][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.741224][ T5838] usb 6-1: Product: syz [ 347.741237][ T5838] usb 6-1: Manufacturer: syz [ 347.741249][ T5838] usb 6-1: SerialNumber: syz [ 347.789772][ T5838] usb 6-1: config 0 descriptor?? [ 348.096863][ T58] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 348.244403][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 348.245515][ T58] usb 4-1: New USB device found: idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 348.249947][ T58] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 348.250853][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.592842][ T10] usb write operation failed. (-71) [ 348.614323][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 348.628273][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 348.628353][ T10] usb 7-1: media controller created [ 348.646842][ T10] usb read operation failed. (-71) [ 348.647812][ T10] usb write operation failed. (-71) [ 348.670235][ T10] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 348.688273][ T10] usb 7-1: USB disconnect, device number 20 [ 349.275157][ T9069] x_tables: duplicate underflow at hook 2 [ 349.423197][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 349.583548][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 349.584869][ T10] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 349.586848][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.672427][ T10] usb 9-1: config 0 descriptor?? [ 349.887032][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 349.892341][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.895283][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 349.895357][ T10] usb 9-1: media controller created [ 349.929860][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.057046][ T33] audit: type=1800 audit(1792419187.708:66): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.789" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 350.098715][ T10] az6027: usb out operation failed. (-71) [ 350.100692][ T10] az6027: usb out operation failed. (-71) [ 350.100703][ T10] stb0899_attach: Driver disabled by Kconfig [ 350.100710][ T10] az6027: no front-end attached [ 350.100710][ T10] [ 350.101962][ T10] az6027: usb out operation failed. (-71) [ 350.101979][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 350.107281][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input32 [ 350.138089][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 350.138113][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 350.161431][ T10] usb 9-1: USB disconnect, device number 4 [ 350.338472][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 350.412791][ T9084] syzkaller0: entered promiscuous mode [ 350.412817][ T9084] syzkaller0: entered allmulticast mode [ 350.513303][ T5838] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 350.513493][ T5838] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 350.513551][ T5838] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 350.513647][ T5838] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 350.526497][ T5838] usb 6-1: USB disconnect, device number 21 [ 350.776709][ T58] usb 4-1: string descriptor 0 read error: -71 [ 350.791109][ T58] hub 4-1:32.0: USB hub found [ 350.800403][ T58] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 351.014445][ T58] usb 4-1: USB disconnect, device number 26 [ 353.915398][ T33] audit: type=1800 audit(1792419191.568:67): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.799" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 354.273963][ T5794] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 354.423391][ T5794] usb 7-1: Using ep0 maxpacket: 32 [ 354.424191][ T5794] usb 7-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 354.426490][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.461079][ T5794] usb 7-1: config 0 descriptor?? [ 354.564114][ T9146] x_tables: duplicate underflow at hook 2 [ 354.679115][ T5794] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 354.704714][ T5794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 354.708275][ T5794] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 354.708328][ T5794] usb 7-1: media controller created [ 354.766554][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.857235][ T9152] netlink: 'syz.8.806': attribute type 1 has an invalid length. [ 354.890166][ T5794] az6027: usb out operation failed. (-71) [ 354.890595][ T5794] az6027: usb out operation failed. (-71) [ 354.890607][ T5794] stb0899_attach: Driver disabled by Kconfig [ 354.890616][ T5794] az6027: no front-end attached [ 354.890616][ T5794] [ 354.891041][ T5794] az6027: usb out operation failed. (-71) [ 354.891054][ T5794] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 354.933872][ T5794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input33 [ 354.941078][ T5794] dvb-usb: schedule remote query interval to 400 msecs. [ 354.941110][ T5794] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 354.974085][ T5794] usb 7-1: USB disconnect, device number 21 [ 355.047916][ T5794] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 355.681544][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 355.705547][ T33] audit: type=1800 audit(1792419193.358:68): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.810" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 355.755376][ T9183] F2FS-fs: wrong format, e.g. : [ 355.920623][ T9189] x_tables: duplicate underflow at hook 2 [ 356.056218][ T5794] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 356.083749][ T9193] raw_sendmsg: syz.5.817 forgot to set AF_INET. Fix it! [ 356.184846][ T5794] usb 4-1: device descriptor read/64, error -71 [ 356.423089][ T5794] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 356.441957][ T997] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 356.553129][ T5794] usb 4-1: device descriptor read/64, error -71 [ 356.593100][ T997] usb 9-1: Using ep0 maxpacket: 32 [ 356.596178][ T997] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 356.597675][ T997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.601294][ T997] usb 9-1: config 0 descriptor?? [ 356.664128][ T5794] usb usb4-port1: attempt power cycle [ 356.810356][ T997] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 356.821139][ T997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.833745][ T997] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 356.833798][ T997] usb 9-1: media controller created [ 356.860551][ T997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.965182][ T9212] netlink: 'syz.5.823': attribute type 10 has an invalid length. [ 356.989985][ T9212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 357.003722][ T5794] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 357.017616][ T997] az6027: usb out operation failed. (-71) [ 357.018001][ T997] az6027: usb out operation failed. (-71) [ 357.018014][ T997] stb0899_attach: Driver disabled by Kconfig [ 357.018023][ T997] az6027: no front-end attached [ 357.018023][ T997] [ 357.018385][ T997] az6027: usb out operation failed. (-71) [ 357.018398][ T997] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 357.020443][ T997] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input34 [ 357.050479][ T5794] usb 4-1: device descriptor read/8, error -71 [ 357.081459][ T33] audit: type=1800 audit(1792419194.728:69): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.824" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 357.102669][ T997] dvb-usb: schedule remote query interval to 400 msecs. [ 357.102693][ T997] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 357.125842][ T997] usb 9-1: USB disconnect, device number 5 [ 357.202921][ T997] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 357.283334][ T5794] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 357.303837][ T5794] usb 4-1: device descriptor read/8, error -71 [ 357.414002][ T5794] usb usb4-port1: unable to enumerate USB device [ 357.423193][ T7962] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 357.553151][ T7962] usb 6-1: device descriptor read/64, error -71 [ 357.633570][ T9223] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.633709][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.827'. [ 357.636458][ T311] IPVS: starting estimator thread 0... [ 357.636704][ T9222] IPVS: set_ctl: invalid protocol: 92 172.20.20.25:20001 [ 357.728718][ T9228] x_tables: duplicate underflow at hook 2 [ 357.743426][ T9225] IPVS: using max 55 ests per chain, 132000 per kthread [ 357.804223][ T7962] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 357.933259][ T7962] usb 6-1: device descriptor read/64, error -71 [ 358.043569][ T7962] usb usb6-port1: attempt power cycle [ 358.209209][ T9236] FAULT_INJECTION: forcing a failure. [ 358.209209][ T9236] name fail_futex, interval 1, probability 0, space 0, times 0 [ 358.209234][ T9236] CPU: 1 UID: 0 PID: 9236 Comm: syz.8.831 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 358.209250][ T9236] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 358.209254][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.209261][ T9236] Call Trace: [ 358.209266][ T9236] [ 358.209271][ T9236] dump_stack_lvl+0xe8/0x150 [ 358.209291][ T9236] should_fail_ex+0x3eb/0x540 [ 358.209310][ T9236] get_futex_key+0xed2/0x1410 [ 358.209330][ T9236] ? __pfx_get_futex_key+0x10/0x10 [ 358.209347][ T9236] futex_wake+0x119/0x5f0 [ 358.209374][ T9236] ? __pfx_futex_wake+0x10/0x10 [ 358.209395][ T9236] ? mm_exit_exec_release+0x20/0x290 [ 358.209414][ T9236] do_futex+0x458/0x4e0 [ 358.209431][ T9236] ? __pfx_do_futex+0x10/0x10 [ 358.209447][ T9236] ? __might_fault+0xaf/0x130 [ 358.209461][ T9236] mm_exit_exec_release+0x10d/0x290 [ 358.209474][ T9236] exit_mm+0x50/0x240 [ 358.209493][ T9236] do_exit+0x6a8/0x2360 [ 358.209511][ T9236] ? __pfx_do_exit+0x10/0x10 [ 358.209528][ T9236] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.209547][ T9236] do_group_exit+0x22d/0x2f0 [ 358.209561][ T9236] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.209577][ T9236] get_signal+0x1216/0x12c0 [ 358.209599][ T9236] arch_do_signal_or_restart+0xbb/0x860 [ 358.209626][ T9236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 358.209650][ T9236] exit_to_user_mode_loop+0x10e/0x770 [ 358.209662][ T9236] ? rcu_is_watching+0x16/0xb0 [ 358.209678][ T9236] do_syscall_64+0x328/0x520 [ 358.209692][ T9236] ? trace_irq_disable+0x3b/0x140 [ 358.209704][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.209714][ T9236] ? clear_bhb_loop+0x70/0xc0 [ 358.209728][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.209738][ T9236] RIP: 0033:0x7f800ad9e559 [ 358.209749][ T9236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.209758][ T9236] RSP: 002b:00007f800bbdf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 358.209770][ T9236] RAX: fffffffffffffe00 RBX: 00007f800b026098 RCX: 00007f800ad9e559 [ 358.209778][ T9236] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f800b026098 [ 358.209785][ T9236] RBP: 00007f800b026090 R08: 0000000000000000 R09: 0000000000000000 [ 358.209791][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.209797][ T9236] R13: 00007f800b026128 R14: 00007ffc7fb6f4b0 R15: 00007ffc7fb6f598 [ 358.209813][ T9236] [ 358.407108][ T7962] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 358.453382][ T7962] usb 6-1: device descriptor read/8, error -71 [ 358.623160][ T5794] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 358.703225][ T7962] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 358.724256][ T7962] usb 6-1: device descriptor read/8, error -71 [ 358.753271][ T5794] usb 9-1: device descriptor read/64, error -71 [ 358.761320][ T33] audit: type=1800 audit(1792419196.408:70): pid=9245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.834" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 358.833968][ T7962] usb usb6-port1: unable to enumerate USB device [ 358.993360][ T5794] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 359.080919][ T33] audit: type=1800 audit(1792419196.728:71): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.837" name="syzkaller1" dev="sda1" ino=2055 res=0 errno=-22 [ 359.105864][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 359.130041][ T5794] usb 9-1: device descriptor read/64, error -71 [ 359.235210][ T5794] usb usb9-port1: attempt power cycle [ 359.253107][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 359.253895][ T10] usb 7-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 359.255146][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.260258][ T10] usb 7-1: config 0 descriptor?? [ 359.393512][ T5838] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 359.474937][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 359.477874][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.482204][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 359.482256][ T10] usb 7-1: media controller created [ 359.507250][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.545935][ T5838] usb 4-1: New USB device found: idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 359.549865][ T5838] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 359.549918][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.549936][ T5838] usb 4-1: config 0 has no interface number 0 [ 359.549972][ T5838] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 359.549996][ T5838] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 359.550015][ T5838] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.550060][ T5838] usb 4-1: config 0 interface 52 has no altsetting 0 [ 359.559071][ T5838] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 359.559098][ T5838] usb 4-1: Product: syz [ 359.559111][ T5838] usb 4-1: Manufacturer: syz [ 359.559124][ T5838] usb 4-1: SerialNumber: syz [ 359.565413][ T5838] usb 4-1: config 0 descriptor?? [ 359.574628][ T5794] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 359.596276][ T5794] usb 9-1: device descriptor read/8, error -71 [ 359.679150][ T10] az6027: usb out operation failed. (-71) [ 359.681866][ T10] az6027: usb out operation failed. (-71) [ 359.681883][ T10] stb0899_attach: Driver disabled by Kconfig [ 359.681892][ T10] az6027: no front-end attached [ 359.681892][ T10] [ 359.683649][ T10] az6027: usb out operation failed. (-71) [ 359.683665][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 359.691483][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 359.699422][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 359.699446][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 359.719947][ T10] usb 7-1: USB disconnect, device number 22 [ 359.799706][ T5838] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 359.800054][ T5838] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 359.840324][ T5794] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 359.847491][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 359.856057][ T5794] usb 9-1: device descriptor read/8, error -71 [ 359.963740][ T5794] usb usb9-port1: unable to enumerate USB device [ 359.991742][ T5794] usb 4-1: USB disconnect, device number 31 [ 360.211147][ T9285] x_tables: duplicate underflow at hook 2 [ 360.543556][ T5730] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 360.734466][ T5730] usb 7-1: Using ep0 maxpacket: 32 [ 360.737475][ T5730] usb 7-1: New USB device found: idVendor=1e7d, idProduct=2d51, bcdDevice=0.00 [ 360.740892][ T5730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.740924][ T5730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.740959][ T5730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.791295][ T5730] usb 7-1: config 0 descriptor?? [ 360.956974][ T9309] block nbd0: not configured, cannot reconfigure [ 361.012076][ T33] audit: type=1400 audit(1792419198.658:72): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=9287 comm="syz.6.840" name="/" offset=59 [ 361.097297][ T33] audit: type=1800 audit(1792419198.748:73): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.844" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 361.333719][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.336033][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.336962][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.337377][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.340746][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.341148][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.342070][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.354678][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.355732][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.358380][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.452364][ T5730] koneplus 0003:1E7D:2D51.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 361.573313][ T27] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 361.640977][ T5730] koneplus 0003:1E7D:2D51.000A: couldn't init struct koneplus_device [ 361.641034][ T5730] koneplus 0003:1E7D:2D51.000A: couldn't install mouse [ 361.643102][ T9331] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 361.644060][ T9331] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 361.677958][ T5730] koneplus 0003:1E7D:2D51.000A: probe with driver koneplus failed with error -71 [ 361.685855][ T5730] usb 7-1: USB disconnect, device number 23 [ 361.753183][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 361.753918][ T27] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 361.755193][ T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.755220][ T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 361.755242][ T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 361.756527][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 361.756549][ T27] usb 6-1: SerialNumber: syz [ 361.843118][ T5794] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 361.969798][ T9339] x_tables: duplicate underflow at hook 2 [ 361.993720][ T5794] usb 9-1: Using ep0 maxpacket: 32 [ 361.996524][ T5794] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 361.997657][ T27] cdc_acm 6-1:1.0: skipping garbage [ 362.000241][ T5794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.037206][ T5794] usb 9-1: config 0 descriptor?? [ 362.061767][ T27] usb 6-1: USB disconnect, device number 26 [ 362.245070][ T5794] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 362.248500][ T5794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.249778][ T5794] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 362.249829][ T5794] usb 9-1: media controller created [ 362.295713][ T33] audit: type=1800 audit(1792419199.948:74): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.853" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 362.332729][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.452098][ T5794] az6027: usb out operation failed. (-71) [ 362.452518][ T5794] az6027: usb out operation failed. (-71) [ 362.452530][ T5794] stb0899_attach: Driver disabled by Kconfig [ 362.452538][ T5794] az6027: no front-end attached [ 362.452538][ T5794] [ 362.482417][ T5794] az6027: usb out operation failed. (-71) [ 362.482434][ T5794] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 362.501225][ T5794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input37 [ 362.523956][ T5794] dvb-usb: schedule remote query interval to 400 msecs. [ 362.523980][ T5794] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 362.529363][ T9345] tipc: Enabled bearer , priority 10 [ 362.531654][ T5794] usb 9-1: USB disconnect, device number 10 [ 362.677865][ T5794] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 362.734173][ T9347] affs: No valid root block on device nullb0 [ 362.993341][ T5830] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 363.134393][ T5730] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 363.143179][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 363.158550][ T5830] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 363.163170][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.163195][ T5830] usb 4-1: Product: syz [ 363.163209][ T5830] usb 4-1: Manufacturer: syz [ 363.163220][ T5830] usb 4-1: SerialNumber: syz [ 363.283976][ T5730] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 363.285339][ T5730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 363.285370][ T5730] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 363.290114][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.290141][ T5730] usb 6-1: Product: syz [ 363.290154][ T5730] usb 6-1: Manufacturer: syz [ 363.290168][ T5730] usb 6-1: SerialNumber: syz [ 363.304444][ T9357] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 363.443247][ T33] audit: type=1800 audit(1792419201.088:75): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.862" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 363.446892][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.452134][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.506432][ T27] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 363.556002][ T5830] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 363.558594][ T5830] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 363.622088][ T5830] usb 4-1: USB disconnect, device number 32 [ 363.683325][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 363.688526][ T27] usb 9-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 363.689985][ T27] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.690016][ T27] usb 9-1: config 0 interface 0 has no altsetting 0 [ 363.690075][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.701985][ T27] usb 9-1: config 0 descriptor?? [ 363.746948][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.143115][ T5830] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 364.161319][ T27] mcp2221 0003:04D8:00DD.000B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 364.202855][ T9377] x_tables: duplicate underflow at hook 2 [ 364.294032][ T5830] usb 7-1: Using ep0 maxpacket: 16 [ 364.296415][ T5830] usb 7-1: unable to get BOS descriptor or descriptor too short [ 364.296462][ T5830] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 364.321825][ T5830] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.321848][ T5830] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.321888][ T5830] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.357154][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.357179][ T5830] usb 7-1: Product: syz [ 364.357192][ T5830] usb 7-1: Manufacturer: syz [ 364.357206][ T5830] usb 7-1: SerialNumber: syz [ 364.384492][ C1] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 364.540385][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.552373][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.554907][ T32] usb 9-1: USB disconnect, device number 11 [ 364.601043][ T5830] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 364.601103][ T5830] cdc_ncm 7-1:1.0: bind() failure [ 364.628209][ T5830] usb 7-1: USB disconnect, device number 24 [ 364.640294][ T6216] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71 [ 364.640332][ T6216] greybus 1-svc: power mode change failed on AP to switch link: -71 [ 364.678971][ T311] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71 [ 364.679068][ T311] greybus 1-svc: failed to get rail count: -71 [ 364.680557][ C1] greybus greybus1: 0/0:0: error sending response 0x02: -71 [ 364.812560][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.821619][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.836175][ T27] usb 6-1: USB disconnect, device number 27 [ 364.836377][ C1] usb 6-1: failed to resubmit arpc in-urb: -19 [ 364.836422][ C1] usb 6-1: failed to resubmit arpc in-urb: -19 [ 364.836468][ C1] usb 6-1: failed to resubmit in-urb: -19 [ 364.836511][ C1] usb 6-1: failed to resubmit in-urb: -19 [ 364.836553][ C1] usb 6-1: failed to resubmit in-urb: -19 [ 364.836595][ C1] usb 6-1: failed to resubmit in-urb: -19 [ 364.860714][ T27] usb 6-1: failed to send ARPC request 4: -19 [ 364.860788][ T27] usb 6-1: failed to execute ARPC: -19 [ 364.860802][ T27] usb 6-1: failed to flush cport 0: -19 [ 364.860816][ T27] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 364.860955][ T27] usb 6-1: failed to send ARPC request 2: -19 [ 364.861020][ T27] usb 6-1: failed to execute ARPC: -19 [ 364.861032][ T27] usb 6-1: failed to quiesce cport 0: -19 (0) [ 364.861048][ T27] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 364.861189][ T27] usb 6-1: failed to send ARPC request 3: -19 [ 364.861256][ T27] usb 6-1: failed to execute ARPC: -19 [ 364.861269][ T27] usb 6-1: failed to clear cport 0: -19 [ 364.861283][ T27] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 365.298508][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.869'. [ 365.350990][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.351963][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.360858][ T9391] bridge0: entered allmulticast mode [ 365.473909][ T27] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 365.584855][ T32] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 365.617512][ T33] audit: type=1800 audit(1792419203.268:76): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.872" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 365.642720][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 365.649375][ T27] usb 7-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 365.662567][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.681224][ T27] usb 7-1: config 0 descriptor?? [ 365.773277][ T32] usb 9-1: Using ep0 maxpacket: 32 [ 365.775565][ T32] usb 9-1: unable to get BOS descriptor or descriptor too short [ 365.775596][ T32] usb 9-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 365.779022][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.779046][ T32] usb 9-1: Product: syz [ 365.779058][ T32] usb 9-1: Manufacturer: syz [ 365.779066][ T32] usb 9-1: SerialNumber: syz [ 365.886095][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 365.888420][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.889529][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 365.889588][ T27] usb 7-1: media controller created [ 365.930665][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.000802][ T32] usb 9-1: BAAD SPEAKERPHONE c_chmask mismatch [ 366.042723][ T32] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 366.061919][ T32] usb 9-1: USB disconnect, device number 12 [ 366.100273][ T27] az6027: usb out operation failed. (-71) [ 366.100672][ T27] az6027: usb out operation failed. (-71) [ 366.100685][ T27] stb0899_attach: Driver disabled by Kconfig [ 366.100693][ T27] az6027: no front-end attached [ 366.100693][ T27] [ 366.101080][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.102385][ T27] az6027: usb out operation failed. (-71) [ 366.102413][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 366.154080][ T1578] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 366.175711][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 366.177958][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 366.177977][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 366.180352][ T27] usb 7-1: USB disconnect, device number 25 [ 366.270996][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 366.320331][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 366.332867][ T1578] usb 6-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 366.344156][ T1578] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.344188][ T1578] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.344203][ T1578] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.344213][ T1578] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.344237][ T1578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.375312][ T9407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.875'. [ 366.648165][ T9411] x_tables: duplicate underflow at hook 2 [ 366.752278][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.766361][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.905486][ T1578] usbhid 6-1:1.0: can't add hid device: -71 [ 366.905588][ T1578] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 366.912471][ T1578] usb 6-1: USB disconnect, device number 28 [ 366.915221][ T9419] netlink: zone id is out of range [ 366.915235][ T9419] netlink: zone id is out of range [ 366.916407][ T9419] netlink: zone id is out of range [ 366.916485][ T9419] netlink: zone id is out of range [ 366.916492][ T9419] netlink: zone id is out of range [ 366.916499][ T9419] netlink: zone id is out of range [ 366.916507][ T9419] netlink: zone id is out of range [ 366.916514][ T9419] netlink: zone id is out of range [ 366.916521][ T9419] netlink: zone id is out of range [ 366.916528][ T9419] netlink: zone id is out of range [ 367.021612][ T9421] CIFS: Invalid mount helper version specified [ 367.505342][ T9435] netlink: 'syz.5.883': attribute type 11 has an invalid length. [ 367.538761][ T33] audit: type=1800 audit(1792419205.188:77): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.882" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 367.703265][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.884'. [ 367.953133][ T997] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 368.053266][ T5830] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 368.086486][ T997] usb 6-1: device descriptor read/64, error -71 [ 368.203168][ T5830] usb 9-1: Using ep0 maxpacket: 32 [ 368.204018][ T5830] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 368.205827][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.211842][ T5830] usb 9-1: config 0 descriptor?? [ 368.230094][ T9450] Bluetooth: (null): Invalid header checksum [ 368.323139][ T997] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 368.420299][ T5830] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 368.424502][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.427088][ T5830] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 368.427146][ T5830] usb 9-1: media controller created [ 368.448721][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.453551][ T997] usb 6-1: device descriptor read/64, error -71 [ 368.563888][ T997] usb usb6-port1: attempt power cycle [ 368.623553][ T5830] az6027: usb out operation failed. (-71) [ 368.623943][ T5830] az6027: usb out operation failed. (-71) [ 368.623955][ T5830] stb0899_attach: Driver disabled by Kconfig [ 368.623965][ T5830] az6027: no front-end attached [ 368.623965][ T5830] [ 368.624340][ T5830] az6027: usb out operation failed. (-71) [ 368.624350][ T5830] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 368.628013][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input39 [ 368.636915][ T5830] dvb-usb: schedule remote query interval to 400 msecs. [ 368.636935][ T5830] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 368.643910][ T5830] usb 9-1: USB disconnect, device number 13 [ 368.740712][ T5830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 368.903635][ T997] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 368.929086][ T997] usb 6-1: device descriptor read/8, error -71 [ 368.954207][ T33] audit: type=1326 audit(1792419206.608:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 368.954260][ T33] audit: type=1326 audit(1792419206.608:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 368.954440][ T33] audit: type=1326 audit(1792419206.608:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 368.954574][ T33] audit: type=1326 audit(1792419206.608:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 368.954615][ T33] audit: type=1326 audit(1792419206.608:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 368.956075][ T33] audit: type=1326 audit(1792419206.608:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 368.956127][ T33] audit: type=1326 audit(1792419206.608:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 368.956337][ T33] audit: type=1326 audit(1792419206.608:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 368.956471][ T33] audit: type=1326 audit(1792419206.608:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.3.887" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb8b9e559 code=0x7fc00000 [ 369.174005][ T997] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 369.197057][ T997] usb 6-1: device descriptor read/8, error -71 [ 369.303582][ T997] usb usb6-port1: unable to enumerate USB device [ 369.589597][ T9466] x_tables: duplicate underflow at hook 2 [ 369.605900][ T9465] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 369.747787][ T9471] overlayfs: missing 'workdir' [ 369.863149][ T997] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 370.027860][ T997] usb 4-1: New USB device found: idVendor=0463, idProduct=0807, bcdDevice=0.00 [ 370.029207][ T997] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.029238][ T997] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.029262][ T997] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.029294][ T997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.045017][ T997] usb 4-1: config 0 descriptor?? [ 370.173317][ T5830] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 370.324408][ T5830] usb 7-1: not running at top speed; connect to a high speed hub [ 370.324446][ T5830] usb 7-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 370.325467][ T5830] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 370.325495][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.328761][ T9485] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 370.331651][ T5830] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 370.344702][ T5830] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 370.456856][ T997] hid-generic 0003:0463:0807.000C: unknown main item tag 0x7 [ 370.456895][ T997] hid-generic 0003:0463:0807.000C: unknown main item tag 0x7 [ 370.466590][ T997] hid-generic 0003:0463:0807.000C: hidraw0: USB HID v11.06 Device [HID 0463:0807] on usb-dummy_hcd.3-1/input0 [ 370.495155][ T1578] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 370.541923][ T997] usb 7-1: USB disconnect, device number 26 [ 370.552767][ T997] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 370.557780][ T997] cyberjack 7-1:1.0: device disconnected [ 370.653368][ T1578] usb 9-1: Using ep0 maxpacket: 32 [ 370.654391][ T1578] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 370.655910][ T1578] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.659376][ T5830] usb 4-1: USB disconnect, device number 33 [ 370.697445][ T1578] usb 9-1: config 0 descriptor?? [ 370.914589][ T1578] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 370.916853][ T1578] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.917722][ T1578] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 370.917772][ T1578] usb 9-1: media controller created [ 370.953460][ T1578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.044334][ T27] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 371.096043][ T9493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.127703][ T1578] az6027: usb out operation failed. (-71) [ 371.129916][ T1578] az6027: usb out operation failed. (-71) [ 371.129933][ T1578] stb0899_attach: Driver disabled by Kconfig [ 371.129942][ T1578] az6027: no front-end attached [ 371.129942][ T1578] [ 371.131844][ T1578] az6027: usb out operation failed. (-71) [ 371.131862][ T1578] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 371.140419][ T1578] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input40 [ 371.144267][ T1578] dvb-usb: schedule remote query interval to 400 msecs. [ 371.144291][ T1578] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 371.199329][ T1578] usb 9-1: USB disconnect, device number 14 [ 371.209078][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 371.211918][ T27] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 371.218527][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.222796][ T27] usb 6-1: config 0 descriptor?? [ 371.316279][ T1578] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 371.430137][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 371.437056][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.440932][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 371.440981][ T27] usb 6-1: media controller created [ 371.468628][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.483397][ T32] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 371.494688][ T9502] x_tables: duplicate underflow at hook 2 [ 371.633516][ T9491] FAULT_INJECTION: forcing a failure. [ 371.633516][ T9491] name failslab, interval 1, probability 5, space 0, times 9975 [ 371.633574][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.5.897 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 371.633602][ T9491] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 371.633610][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.633626][ T9491] Call Trace: [ 371.633637][ T9491] [ 371.633646][ T9491] dump_stack_lvl+0xe8/0x150 [ 371.633677][ T9491] should_fail_ex+0x3eb/0x540 [ 371.633704][ T9491] should_failslab+0xa8/0x100 [ 371.633727][ T9491] __kmalloc_noprof+0xf9/0x710 [ 371.633757][ T9491] ? rcu_is_watching+0x16/0xb0 [ 371.633779][ T9491] ? tomoyo_realpath_from_path+0xef/0x640 [ 371.633806][ T9491] ? tomoyo_realpath_from_path+0xef/0x640 [ 371.633840][ T9491] tomoyo_realpath_from_path+0xef/0x640 [ 371.633877][ T9491] ? tomoyo_path_number_perm+0x219/0x5f0 [ 371.633901][ T9491] tomoyo_path_number_perm+0x246/0x5f0 [ 371.633933][ T9491] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 371.633954][ T9491] ? __lock_acquire+0x747/0x2de0 [ 371.634010][ T9491] ? __fget_files+0x2a/0x420 [ 371.634038][ T9491] ? __fget_files+0x2a/0x420 [ 371.634071][ T9491] ? __fget_files+0x2a/0x420 [ 371.634101][ T9491] security_file_ioctl+0xc3/0x2a0 [ 371.634127][ T9491] __se_sys_ioctl+0x47/0x170 [ 371.634149][ T9491] do_syscall_64+0x166/0x520 [ 371.634172][ T9491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.634191][ T9491] ? clear_bhb_loop+0x70/0xc0 [ 371.634215][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.634233][ T9491] RIP: 0033:0x7f2c97f9e559 [ 371.634252][ T9491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.634267][ T9491] RSP: 002b:00007f2c98e34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.634288][ T9491] RAX: ffffffffffffffda RBX: 00007f2c98225fa0 RCX: 00007f2c97f9e559 [ 371.634302][ T9491] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 371.634314][ T9491] RBP: 00007f2c98e34090 R08: 0000000000000000 R09: 0000000000000000 [ 371.634326][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.634343][ T9491] R13: 00007f2c98226038 R14: 00007f2c98225fa0 R15: 00007ffef2a4fe48 [ 371.634375][ T9491] [ 371.634738][ T9491] ERROR: Out of memory at tomoyo_realpath_from_path. [ 371.635684][ T27] az6027: usb out operation failed. (-71) [ 371.636083][ T27] az6027: usb out operation failed. (-71) [ 371.636095][ T27] stb0899_attach: Driver disabled by Kconfig [ 371.636104][ T27] az6027: no front-end attached [ 371.636104][ T27] [ 371.637283][ T27] az6027: usb out operation failed. (-71) [ 371.637298][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 371.645708][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 371.653139][ T32] usb 7-1: Using ep0 maxpacket: 32 [ 371.653933][ T32] usb 7-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 371.655190][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.674664][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 371.674685][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 371.688163][ T32] usb 7-1: config 0 descriptor?? [ 371.688673][ T27] usb 6-1: USB disconnect, device number 33 [ 372.000024][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 372.045272][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 372.049691][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.054028][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 372.054092][ T32] usb 7-1: media controller created [ 372.090046][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.973507][ T5830] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 373.013242][ T27] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 373.123181][ T5830] usb 9-1: Using ep0 maxpacket: 32 [ 373.124519][ T5830] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 373.126127][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.128545][ T5830] usb 9-1: config 0 descriptor?? [ 373.184814][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 373.185604][ T27] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 373.187115][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.191683][ T27] usb 6-1: config 0 descriptor?? [ 373.278587][ T9540] x_tables: duplicate underflow at hook 2 [ 373.352241][ T5830] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 373.368858][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.383979][ T5830] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 373.384037][ T5830] usb 9-1: media controller created [ 373.401756][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 373.416886][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.420051][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.457394][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 373.457476][ T27] usb 6-1: media controller created [ 373.496542][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.564097][ T5830] az6027: usb out operation failed. (-71) [ 373.564884][ T5830] az6027: usb out operation failed. (-71) [ 373.564898][ T5830] stb0899_attach: Driver disabled by Kconfig [ 373.564907][ T5830] az6027: no front-end attached [ 373.564907][ T5830] [ 373.566611][ T5830] az6027: usb out operation failed. (-71) [ 373.566627][ T5830] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 373.571099][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input42 [ 373.611703][ T9538] FAULT_INJECTION: forcing a failure. [ 373.611703][ T9538] name failslab, interval 1, probability 5, space 0, times 9974 [ 373.611736][ T9538] CPU: 1 UID: 0 PID: 9538 Comm: syz.5.913 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 373.611764][ T9538] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 373.611772][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.611783][ T9538] Call Trace: [ 373.611790][ T9538] [ 373.611797][ T9538] dump_stack_lvl+0xe8/0x150 [ 373.611836][ T9538] should_fail_ex+0x3eb/0x540 [ 373.611867][ T9538] should_failslab+0xa8/0x100 [ 373.611889][ T9538] __kmalloc_noprof+0xf9/0x710 [ 373.611914][ T9538] ? tomoyo_encode+0x2ad/0x570 [ 373.611940][ T9538] ? tomoyo_encode+0x2ad/0x570 [ 373.611971][ T9538] tomoyo_encode+0x2ad/0x570 [ 373.612003][ T9538] tomoyo_realpath_from_path+0x5fa/0x640 [ 373.612039][ T9538] ? tomoyo_path_number_perm+0x219/0x5f0 [ 373.612061][ T9538] tomoyo_path_number_perm+0x246/0x5f0 [ 373.612088][ T9538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 373.612109][ T9538] ? __lock_acquire+0x747/0x2de0 [ 373.612162][ T9538] ? __fget_files+0x2a/0x420 [ 373.612190][ T9538] ? __fget_files+0x2a/0x420 [ 373.612215][ T9538] ? __fget_files+0x2a/0x420 [ 373.612244][ T9538] security_file_ioctl+0xc3/0x2a0 [ 373.612267][ T9538] __se_sys_ioctl+0x47/0x170 [ 373.612289][ T9538] do_syscall_64+0x166/0x520 [ 373.612312][ T9538] ? trace_irq_disable+0x3b/0x140 [ 373.612331][ T9538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.612350][ T9538] ? clear_bhb_loop+0x70/0xc0 [ 373.612371][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.612388][ T9538] RIP: 0033:0x7f2c97f9e559 [ 373.612406][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.612421][ T9538] RSP: 002b:00007f2c98e34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.612440][ T9538] RAX: ffffffffffffffda RBX: 00007f2c98225fa0 RCX: 00007f2c97f9e559 [ 373.612454][ T9538] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 373.612465][ T9538] RBP: 00007f2c98e34090 R08: 0000000000000000 R09: 0000000000000000 [ 373.612476][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.612487][ T9538] R13: 00007f2c98226038 R14: 00007f2c98225fa0 R15: 00007ffef2a4fe48 [ 373.612517][ T9538] [ 373.613903][ T5830] dvb-usb: schedule remote query interval to 400 msecs. [ 373.613923][ T5830] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 373.617274][ T9538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 373.619368][ T27] az6027: usb out operation failed. (-71) [ 373.621009][ T27] az6027: usb out operation failed. (-71) [ 373.621025][ T27] stb0899_attach: Driver disabled by Kconfig [ 373.621034][ T27] az6027: no front-end attached [ 373.621034][ T27] [ 373.621481][ T27] az6027: usb out operation failed. (-71) [ 373.621493][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 373.638016][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 373.646490][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 373.646512][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 373.662864][ T27] usb 6-1: USB disconnect, device number 34 [ 373.835206][ T5830] usb 9-1: USB disconnect, device number 15 [ 373.987687][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 373.999528][ T5830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 374.175545][ T32] az6027: usb out operation failed. (-110) [ 374.176727][ T32] az6027: usb out operation failed. (-32) [ 374.176744][ T32] stb0899_attach: Driver disabled by Kconfig [ 374.176754][ T32] az6027: no front-end attached [ 374.176754][ T32] [ 374.177186][ T32] az6027: usb out operation failed. (-32) [ 374.177199][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 374.225417][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input44 [ 374.256332][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 374.256355][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 374.359398][ T5830] usb 7-1: USB disconnect, device number 27 [ 374.472103][ T5830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 374.584304][ T33] kauditd_printk_skb: 2090 callbacks suppressed [ 374.584415][ T33] audit: type=1800 audit(1792419212.238:2177): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.917" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 374.673235][ T32] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 374.825526][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 374.826214][ T32] usb 6-1: not running at top speed; connect to a high speed hub [ 374.826248][ T32] usb 6-1: New USB device found: idVendor=0763, idProduct=1031, bcdDevice=74.40 [ 374.828572][ T32] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 374.828607][ T32] usb 6-1: can't read configurations, error -61 [ 374.954689][ T32] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 375.107037][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 375.108840][ T32] usb 6-1: not running at top speed; connect to a high speed hub [ 375.108875][ T32] usb 6-1: New USB device found: idVendor=0763, idProduct=1031, bcdDevice=74.40 [ 375.112288][ T32] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 375.112325][ T32] usb 6-1: can't read configurations, error -61 [ 375.120983][ T32] usb usb6-port1: attempt power cycle [ 375.193168][ T5839] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 375.233112][ T5830] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 375.343158][ T27] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 375.343208][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 375.344019][ T5839] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 375.345406][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.347374][ T5839] usb 4-1: config 0 descriptor?? [ 375.383861][ T5830] usb 7-1: device descriptor read/64, error -71 [ 375.463137][ T32] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 375.485831][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 375.486341][ T32] usb 6-1: not running at top speed; connect to a high speed hub [ 375.486373][ T32] usb 6-1: New USB device found: idVendor=0763, idProduct=1031, bcdDevice=74.40 [ 375.487832][ T32] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 375.487861][ T32] usb 6-1: can't read configurations, error -61 [ 375.500935][ T27] usb 9-1: Using ep0 maxpacket: 32 [ 375.501684][ T27] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 375.503309][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.506649][ T27] usb 9-1: config 0 descriptor?? [ 375.575560][ T5839] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 375.578123][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.579026][ T5839] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 375.579074][ T5839] usb 4-1: media controller created [ 375.592873][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.624362][ T5830] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 375.634130][ T32] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 375.668043][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 375.668808][ T32] usb 6-1: not running at top speed; connect to a high speed hub [ 375.668840][ T32] usb 6-1: New USB device found: idVendor=0763, idProduct=1031, bcdDevice=74.40 [ 375.670642][ T32] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 375.670677][ T32] usb 6-1: can't read configurations, error -61 [ 375.671213][ T32] usb usb6-port1: unable to enumerate USB device [ 375.718888][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 375.722863][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.724397][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 375.724444][ T27] usb 9-1: media controller created [ 375.744890][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.753780][ T5830] usb 7-1: device descriptor read/64, error -71 [ 375.787715][ T5839] az6027: usb out operation failed. (-71) [ 375.788169][ T5839] az6027: usb out operation failed. (-71) [ 375.788180][ T5839] stb0899_attach: Driver disabled by Kconfig [ 375.788188][ T5839] az6027: no front-end attached [ 375.788188][ T5839] [ 375.788605][ T5839] az6027: usb out operation failed. (-71) [ 375.788617][ T5839] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 375.791935][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 375.845241][ T5839] dvb-usb: schedule remote query interval to 400 msecs. [ 375.845264][ T5839] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 375.863996][ T5830] usb usb7-port1: attempt power cycle [ 375.864909][ T5839] usb 4-1: USB disconnect, device number 34 [ 375.910453][ T5839] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 375.928733][ T27] az6027: usb out operation failed. (-71) [ 375.931776][ T27] az6027: usb out operation failed. (-71) [ 375.931788][ T27] stb0899_attach: Driver disabled by Kconfig [ 375.931794][ T27] az6027: no front-end attached [ 375.931794][ T27] [ 375.932094][ T27] az6027: usb out operation failed. (-71) [ 375.932102][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 375.936882][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input46 [ 375.948278][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 375.948300][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 375.965139][ T27] usb 9-1: USB disconnect, device number 16 [ 376.035917][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 376.273298][ T5830] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 376.293868][ T5830] usb 7-1: device descriptor read/8, error -71 [ 376.341846][ T9578] x_tables: duplicate underflow at hook 2 [ 376.533759][ T5830] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 376.556306][ T5830] usb 7-1: device descriptor read/8, error -71 [ 376.666514][ T5830] usb usb7-port1: unable to enumerate USB device [ 376.723429][ T32] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 376.874516][ T32] usb 9-1: New USB device found: idVendor=9710, idProduct=7720, bcdDevice=0.00 [ 376.875670][ T32] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 376.875701][ T32] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 376.875722][ T32] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 376.875744][ T32] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.875758][ T32] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.875781][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.878593][ T9580] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 376.878728][ T9580] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 376.878864][ T9580] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 376.881456][ T32] mos7720 9-1:1.0: Moschip 2 port adapter converter detected [ 376.933357][ T27] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 377.083141][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 377.084506][ T27] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 377.086040][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.090770][ T27] usb 4-1: config 0 descriptor?? [ 377.301554][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 377.306440][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 377.311888][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 377.311941][ T27] usb 4-1: media controller created [ 377.340276][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.435101][ T32] usb 9-1: mos7720: usb_control_msg() failed: -71 [ 377.457627][ T32] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 377.511658][ T32] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 377.543564][ T32] usb 9-1: USB disconnect, device number 17 [ 377.543622][ C1] usb 9-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 377.556955][ T32] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 377.562029][ T32] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 377.564225][ T32] mos7720 9-1:1.0: device disconnected [ 377.606005][ T33] audit: type=1800 audit(1792419215.258:2178): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.930" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 377.711610][ T27] az6027: usb out operation failed. (-71) [ 377.711632][ T27] stb0899_attach: Driver disabled by Kconfig [ 377.711642][ T27] az6027: no front-end attached [ 377.711642][ T27] [ 377.712029][ T27] az6027: usb out operation failed. (-71) [ 377.712042][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 377.716033][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 377.718398][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 377.718432][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 377.720952][ T27] usb 4-1: USB disconnect, device number 35 [ 377.805199][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.809332][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.842504][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 378.025868][ T32] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 378.179908][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 378.179942][ T32] usb 6-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 378.181197][ T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.181221][ T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.181265][ T32] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.221539][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 378.221556][ T32] usb 6-1: Product: syz [ 378.221564][ T32] usb 6-1: Manufacturer: syz [ 378.263126][ T5830] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 378.265282][ T32] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 378.267078][ T32] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 378.383200][ T27] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 378.413283][ T5830] usb 7-1: Using ep0 maxpacket: 8 [ 378.414100][ T5830] usb 7-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 378.418363][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.418381][ T5830] usb 7-1: Product: syz [ 378.418389][ T5830] usb 7-1: Manufacturer: syz [ 378.418397][ T5830] usb 7-1: SerialNumber: syz [ 378.463320][ T997] usb 6-1: USB disconnect, device number 39 [ 378.533151][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 378.533723][ T27] usb 9-1: New USB device found: idVendor=06d8, idProduct=00dd, bcdDevice=0.00 [ 378.534835][ T27] usb 9-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 378.534881][ T27] usb 9-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.534905][ T27] usb 9-1: config 0 interface 0 has no altsetting 0 [ 378.534936][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.537099][ T27] usb 9-1: config 0 descriptor?? [ 378.541724][ T27] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 378.609748][ T32] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 378.663303][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.663716][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.664726][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.665182][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.666165][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.666553][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.667453][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.669089][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.670056][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.670668][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.700035][ T5830] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 378.701081][ T5830] usb 7-1: unit 3 not found! [ 378.780043][ T5830] usb 7-1: USB disconnect, device number 32 [ 378.819382][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.819436][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.835051][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.873084][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 378.873929][ T32] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 378.875450][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.878085][ T32] usb 4-1: config 0 descriptor?? [ 379.084342][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 379.087167][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 379.088376][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 379.088424][ T32] usb 4-1: media controller created [ 379.132596][ T9608] x_tables: duplicate underflow at hook 2 [ 379.144427][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.277658][ T9613] fuse: Bad value for 'group_id' [ 379.277673][ T9613] fuse: Bad value for 'group_id' [ 379.295826][ T32] az6027: usb out operation failed. (-71) [ 379.296381][ T32] az6027: usb out operation failed. (-71) [ 379.296395][ T32] stb0899_attach: Driver disabled by Kconfig [ 379.296404][ T32] az6027: no front-end attached [ 379.296404][ T32] [ 379.296930][ T32] az6027: usb out operation failed. (-71) [ 379.296943][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 379.300145][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input49 [ 379.302614][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 379.302636][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 379.371839][ T32] usb 4-1: USB disconnect, device number 36 [ 379.450228][ T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 379.562005][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.573291][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.575425][ T33] audit: type=1800 audit(1792419217.228:2179): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.939" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 379.852596][ T9623] netlink: 'syz.6.941': attribute type 10 has an invalid length. [ 379.901313][ T33] audit: type=1800 audit(1792419217.548:2180): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.943" name="file2" dev="sda1" ino=2056 res=0 errno=-22 [ 380.213164][ T32] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 380.363264][ T997] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 380.363307][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 380.364176][ T32] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 380.365410][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.368315][ T32] usb 6-1: config 0 descriptor?? [ 380.513095][ T997] usb 4-1: Using ep0 maxpacket: 8 [ 380.519809][ T997] usb 4-1: New USB device found: idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 380.521280][ T997] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 380.521306][ T997] usb 4-1: config 127 has an invalid descriptor of length 47, skipping remainder of the config [ 380.521323][ T997] usb 4-1: config 127 has no interface number 1 [ 380.521360][ T997] usb 4-1: config 127 interface 171 has no altsetting 0 [ 380.558070][ T997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.558097][ T997] usb 4-1: Product: syz [ 380.558109][ T997] usb 4-1: Manufacturer: syz [ 380.558123][ T997] usb 4-1: SerialNumber: syz [ 380.578883][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 380.588040][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.591473][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 380.591523][ T32] usb 6-1: media controller created [ 380.624466][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.770925][ T33] audit: type=1800 audit(1792419218.418:2181): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.948" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 380.782071][ T9634] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 380.787161][ T32] az6027: usb out operation failed. (-71) [ 380.787547][ T32] az6027: usb out operation failed. (-71) [ 380.787559][ T32] stb0899_attach: Driver disabled by Kconfig [ 380.787569][ T32] az6027: no front-end attached [ 380.787569][ T32] [ 380.787933][ T32] az6027: usb out operation failed. (-71) [ 380.787945][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 380.799252][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input50 [ 380.806356][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 380.806376][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 380.831348][ T32] usb 6-1: USB disconnect, device number 40 [ 380.877166][ T997] xr_serial 4-1:127.171: xr_serial converter detected [ 380.879027][ T997] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 380.879080][ T997] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 380.923641][ T997] usb 4-1: USB disconnect, device number 37 [ 380.927777][ T997] xr_serial 4-1:127.171: device disconnected [ 381.038015][ T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 381.084769][ T5830] usb 9-1: USB disconnect, device number 18 [ 381.143381][ T9648] x_tables: duplicate underflow at hook 2 [ 381.386343][ T9655] futex_wake_op: syz.5.953 tries to shift op by -1; fix this program [ 381.505876][ T32] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 381.664571][ T32] usb 7-1: Using ep0 maxpacket: 32 [ 381.665469][ T32] usb 7-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 381.668628][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.676127][ T32] usb 7-1: config 0 descriptor?? [ 381.887177][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 381.895931][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.900298][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 381.900351][ T32] usb 7-1: media controller created [ 381.953103][ T5839] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 381.966040][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.088693][ T32] az6027: usb out operation failed. (-71) [ 382.089307][ T32] az6027: usb out operation failed. (-71) [ 382.089322][ T32] stb0899_attach: Driver disabled by Kconfig [ 382.089333][ T32] az6027: no front-end attached [ 382.089333][ T32] [ 382.089910][ T32] az6027: usb out operation failed. (-71) [ 382.089923][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 382.102280][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input51 [ 382.111520][ T5839] usb 4-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 382.127365][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 382.127389][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 382.142294][ T32] usb 7-1: USB disconnect, device number 33 [ 382.153964][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.203523][ T27] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 382.281025][ T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 382.353915][ T27] usb 9-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 382.355023][ T27] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 382.355048][ T27] usb 9-1: config 0 has no interface number 0 [ 382.355075][ T27] usb 9-1: config 0 interface 255 has no altsetting 0 [ 382.359997][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.360024][ T27] usb 9-1: Product: syz [ 382.360037][ T27] usb 9-1: Manufacturer: syz [ 382.360052][ T27] usb 9-1: SerialNumber: syz [ 382.376894][ T27] usb 9-1: config 0 descriptor?? [ 382.413197][ T5839] usb 4-1: NFC: Reader power on cmd error 0 [ 382.413221][ T5839] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 382.413360][ T5839] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -22 [ 382.527437][ T33] audit: type=1800 audit(1792419220.178:2182): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.958" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 382.591583][ T32] usb 9-1: USB disconnect, device number 19 [ 382.750461][ T9680] net_ratelimit: 12 callbacks suppressed [ 382.750483][ T9680] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 383.063357][ T32] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 383.193378][ T32] usb 7-1: device descriptor read/64, error -71 [ 383.433960][ T32] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 383.452934][ T9690] FAULT_INJECTION: forcing a failure. [ 383.452934][ T9690] name failslab, interval 1, probability 5, space 0, times 9973 [ 383.453743][ T9690] CPU: 0 UID: 0 PID: 9690 Comm: syz.5.963 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 383.453824][ T9690] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 383.453833][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.453845][ T9690] Call Trace: [ 383.453854][ T9690] [ 383.453863][ T9690] dump_stack_lvl+0xe8/0x150 [ 383.453897][ T9690] should_fail_ex+0x3eb/0x540 [ 383.453927][ T9690] should_failslab+0xa8/0x100 [ 383.453948][ T9690] ? security_file_alloc+0x34/0x310 [ 383.453986][ T9690] kmem_cache_alloc_noprof+0x9c/0x600 [ 383.454011][ T9690] ? rcu_is_watching+0x16/0xb0 [ 383.454036][ T9690] ? security_file_alloc+0x34/0x310 [ 383.454063][ T9690] security_file_alloc+0x34/0x310 [ 383.454087][ T9690] init_file+0x90/0x2b0 [ 383.454114][ T9690] alloc_empty_file+0x74/0x1d0 [ 383.454140][ T9690] alloc_file_pseudo+0x110/0x1e0 [ 383.454167][ T9690] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 383.454191][ T9690] ? _raw_spin_unlock+0x28/0x50 [ 383.454222][ T9690] sock_alloc_file+0xb8/0x2e0 [ 383.454239][ T9690] ? __sys_socket+0x12b/0x1b0 [ 383.454262][ T9690] __sys_socket+0x13f/0x1b0 [ 383.454287][ T9690] __x64_sys_socket+0x7a/0x90 [ 383.454310][ T9690] do_syscall_64+0x166/0x520 [ 383.454344][ T9690] ? trace_irq_disable+0x3b/0x140 [ 383.454365][ T9690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.454385][ T9690] ? clear_bhb_loop+0x70/0xc0 [ 383.454407][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.454425][ T9690] RIP: 0033:0x7f2c97f9e559 [ 383.454445][ T9690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.454461][ T9690] RSP: 002b:00007f2c98e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 383.454481][ T9690] RAX: ffffffffffffffda RBX: 00007f2c98226090 RCX: 00007f2c97f9e559 [ 383.454495][ T9690] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 383.454508][ T9690] RBP: 00007f2c98035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 383.454521][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.454532][ T9690] R13: 00007f2c98226128 R14: 00007f2c98226090 R15: 00007ffef2a4fe48 [ 383.454560][ T9690] [ 383.563143][ T32] usb 7-1: device descriptor read/64, error -71 [ 383.674528][ T32] usb usb7-port1: attempt power cycle [ 384.013298][ T32] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 384.035388][ T32] usb 7-1: device descriptor read/8, error -71 [ 384.274561][ T32] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 384.295065][ T32] usb 7-1: device descriptor read/8, error -71 [ 384.315526][ T9695] x_tables: duplicate underflow at hook 2 [ 384.404981][ T32] usb usb7-port1: unable to enumerate USB device [ 384.716542][ T9698] netlink: 'syz.5.966': attribute type 10 has an invalid length. [ 384.723796][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.728271][ T9698] bond0: (slave team0): Enslaving as an active interface with an up link [ 384.783733][ T27] usb 4-1: USB disconnect, device number 38 [ 384.902341][ T33] audit: type=1800 audit(1792419222.548:2183): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.968" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 385.187340][ T9711] netlink: 3 bytes leftover after parsing attributes in process `syz.5.971'. [ 385.191667][ T9711] netlink: 14 bytes leftover after parsing attributes in process `syz.5.971'. [ 385.224709][ T9711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.227663][ T9711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.230117][ T9711] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 385.232508][ T9711] bond0 (unregistering): (slave team0): Releasing backup interface [ 385.255717][ T9711] bond0 (unregistering): Released all slaves [ 385.260190][ T5830] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 385.413166][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 385.415509][ T5830] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 385.416546][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.418298][ T5830] usb 4-1: config 0 descriptor?? [ 385.622700][ T5830] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 385.631923][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 385.632842][ T5830] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 385.632888][ T5830] usb 4-1: media controller created [ 385.663098][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.828365][ T5830] az6027: usb out operation failed. (-71) [ 385.828832][ T5830] az6027: usb out operation failed. (-71) [ 385.828845][ T5830] stb0899_attach: Driver disabled by Kconfig [ 385.828854][ T5830] az6027: no front-end attached [ 385.828854][ T5830] [ 385.829229][ T5830] az6027: usb out operation failed. (-71) [ 385.829242][ T5830] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 385.840146][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 385.885779][ T5830] dvb-usb: schedule remote query interval to 400 msecs. [ 385.885804][ T5830] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 385.890403][ T5830] usb 4-1: USB disconnect, device number 39 [ 385.908590][ T9713] block2mtd: error: cannot open device /dev/p†J·rÉ [ 385.960712][ T5830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 386.082730][ T9721] x_tables: duplicate underflow at hook 2 [ 386.263130][ T5839] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 386.414821][ T5839] usb 6-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 386.417395][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.417446][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.421804][ T5839] usb 6-1: config 0 descriptor?? [ 386.465104][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 386.639766][ T33] audit: type=1800 audit(1792419224.288:2184): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.977" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 386.664653][ T5839] pwc: send_video_command error -71 [ 386.664740][ T5839] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 386.664837][ T5839] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 386.702508][ T5839] usb 6-1: USB disconnect, device number 41 [ 387.233111][ T27] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 387.253124][ T5839] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 387.333373][ T32] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 387.383156][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 387.383976][ T27] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 387.385251][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.386941][ T27] usb 4-1: config 0 descriptor?? [ 387.414294][ T1578] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 387.485550][ T32] usb 7-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 387.486441][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.488691][ T32] usb 7-1: config 0 descriptor?? [ 387.534975][ T5839] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 387.563113][ T1578] usb 9-1: Using ep0 maxpacket: 32 [ 387.563781][ T1578] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 387.564707][ T1578] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.566908][ T1578] usb 9-1: config 0 descriptor?? [ 387.602272][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 387.612627][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.613973][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 387.614051][ T27] usb 4-1: media controller created [ 387.629045][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.773779][ T1578] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 387.778918][ T1578] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.780026][ T1578] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 387.780079][ T1578] usb 9-1: media controller created [ 387.796226][ T1578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.892730][ T32] hackrf 7-1:0.0: Board ID: 00 [ 387.892746][ T32] hackrf 7-1:0.0: Firmware version: [ 387.906089][ T32] hackrf 7-1:0.0: Registered as swradio24 [ 387.906107][ T32] videodev: could not get a free minor [ 387.906130][ T32] hackrf 7-1:0.0: Failed to register as video device (-23) [ 387.911480][ T32] hackrf 7-1:0.0: probe with driver hackrf failed with error -23 [ 387.913129][ T5839] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 387.982034][ T1578] az6027: usb out operation failed. (-71) [ 387.982502][ T1578] az6027: usb out operation failed. (-71) [ 387.982516][ T1578] stb0899_attach: Driver disabled by Kconfig [ 387.982525][ T1578] az6027: no front-end attached [ 387.982525][ T1578] [ 387.986766][ T1578] az6027: usb out operation failed. (-71) [ 387.986786][ T1578] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 388.010345][ T1578] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input53 [ 388.021116][ T1578] dvb-usb: schedule remote query interval to 400 msecs. [ 388.021142][ T1578] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 388.052735][ T1578] usb 9-1: USB disconnect, device number 20 [ 388.155569][ T1578] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 388.411897][ T1578] usb 7-1: USB disconnect, device number 38 [ 388.494747][ T9759] x_tables: duplicate underflow at hook 2 [ 388.666038][ T33] audit: type=1800 audit(1792419226.318:2185): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.988" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 388.797171][ T9766] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 389.016269][ T9765] [ 389.018641][ T9765] ============================================ [ 389.024883][ T9765] WARNING: possible recursive locking detected [ 389.031166][ T9765] syzkaller #0 Tainted: G L Y [ 389.037239][ T9765] -------------------------------------------- [ 389.043448][ T9765] syz.8.989/9765 is trying to acquire lock: [ 389.049339][ T9765] ffff8880285d35e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_buffered_write+0xd7/0x160 [ 389.060200][ T9765] [ 389.060200][ T9765] but task is already holding lock: [ 389.067560][ T9765] ffff8880285d35e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 389.078089][ T9765] [ 389.078089][ T9765] other info that might help us debug this: [ 389.086134][ T9765] Possible unsafe locking scenario: [ 389.086134][ T9765] [ 389.093567][ T9765] CPU0 [ 389.096840][ T9765] ---- [ 389.100110][ T9765] lock(&sb->s_type->i_mutex_key#10); [ 389.105642][ T9765] lock(&sb->s_type->i_mutex_key#10); [ 389.111092][ T9765] [ 389.111092][ T9765] *** DEADLOCK *** [ 389.111092][ T9765] [ 389.119269][ T9765] May be due to missing lock nesting notation [ 389.119269][ T9765] [ 389.127591][ T9765] locks held by syz.8.989/9765: 1, last CPU#0: [ 389.133788][ T9765] #0: ffff8880285d35e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 389.144682][ T9765] [ 389.144682][ T9765] stack backtrace: [ 389.150573][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: syz.8.989 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 389.161411][ T9765] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 389.167256][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.177300][ T9765] Call Trace: [ 389.180570][ T9765] [ 389.183492][ T9765] dump_stack_lvl+0xe8/0x150 [ 389.188085][ T9765] print_deadlock_bug+0x27a/0x290 [ 389.193105][ T9765] __lock_acquire+0x25db/0x2de0 [ 389.197947][ T9765] ? __lock_acquire+0x747/0x2de0 [ 389.202884][ T9765] lock_acquire+0x115/0x350 [ 389.207374][ T9765] ? blkdev_buffered_write+0xd7/0x160 [ 389.212742][ T9765] down_read+0x45/0x320 [ 389.216894][ T9765] ? blkdev_buffered_write+0xd7/0x160 [ 389.222258][ T9765] blkdev_buffered_write+0xd7/0x160 [ 389.227441][ T9765] blkdev_write_iter+0x6d5/0x810 [ 389.232379][ T9765] vfs_write+0x612/0xba0 [ 389.236621][ T9765] ? __pfx_vfs_write+0x10/0x10 [ 389.241384][ T9765] ? __fget_files+0x3a2/0x420 [ 389.246059][ T9765] ? __fget_files+0x2a/0x420 [ 389.250646][ T9765] ? fdget+0x1ac/0x250 [ 389.254713][ T9765] ksys_write+0x150/0x270 [ 389.259044][ T9765] ? __pfx_ksys_write+0x10/0x10 [ 389.263894][ T9765] do_syscall_64+0x166/0x520 [ 389.268480][ T9765] ? trace_irq_disable+0x3b/0x140 [ 389.273676][ T9765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.279731][ T9765] ? clear_bhb_loop+0x70/0xc0 [ 389.284397][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.290278][ T9765] RIP: 0033:0x7f800ad9e559 [ 389.294679][ T9765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.314288][ T9765] RSP: 002b:00007f800bc00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 389.322693][ T9765] RAX: ffffffffffffffda RBX: 00007f800b025fa0 RCX: 00007f800ad9e559 [ 389.330653][ T9765] RDX: 00000000fffffe38 RSI: 0000200000000100 RDI: 0000000000000004 [ 389.338615][ T9765] RBP: 00007f800ae35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 389.346574][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.354536][ T9765] R13: 00007f800b026038 R14: 00007f800b025fa0 R15: 00007ffc7fb6f598 [ 389.362505][ T9765] [ 389.695283][ T27] az6027: usb out operation failed. (-110) [ 389.696475][ T27] az6027: usb out operation failed. (-32) [ 389.696491][ T27] stb0899_attach: Driver disabled by Kconfig [ 389.696500][ T27] az6027: no front-end attached [ 389.696500][ T27] [ 389.696874][ T27] az6027: usb out operation failed. (-32) [ 389.696887][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 389.698176][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 389.699377][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 389.699394][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 389.986777][ T27] usb 4-1: USB disconnect, device number 40 [ 390.002874][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.