last executing test programs: 16m8.823624369s ago: executing program 32 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x18000000, 0x2, {{0x3b, 0x4, 0x1, 0x5, 0xec, 0x66, 0x0, 0xd, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x8c, 0x3, [{0x7, 0x12, "764f3f08f3bf20028519b24c92dd4542"}, {0x0, 0xf, "bedc4d0822fe054ec9949f8752"}, {0x0, 0x12, "711123c4abbdda68206fb92bc9b3ca78"}, {0x6, 0x10, "7972d5b1486e02b4934054a80e01"}, {0x6, 0x2}, {0x2, 0x11, "35466e63bf2898e46c9cda89e9486a"}, {0x4, 0x10, "02232c3145684c48e61797c2837c"}, {0x6, 0x8, "ab45cf03a11e"}, {0x0, 0x8, "80d51fb562ef"}, {0x5, 0x10, "33bbaa91b33293671213d41fa442"}]}, @end, @timestamp={0x44, 0xc, 0x50, 0x0, 0x8, [0x4, 0x7fff]}, @timestamp={0x44, 0x28, 0x37, 0x0, 0x3, [0x4, 0x5, 0x3a, 0xffff8000, 0xc7, 0x6, 0xffffffff, 0x1, 0x5]}, @ssrr={0x89, 0x17, 0x7e, [@rand_addr=0x64010100, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0xfffffffffffffe7c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfffffffd}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040001) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x800ffff, @mcast2}}}, 0x32) writev(r4, &(0x7f0000001500)=[{&(0x7f0000000380)='T', 0x1}], 0x1) socket$netlink(0x10, 0x3, 0x15) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15m56.633067027s ago: executing program 33 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8040) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40c1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}], [], 0x6b}}) 15m16.581696373s ago: executing program 34 (id=406): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0x1, 0xfe00000, 0x1, 0x7, 0xd, 0x100, "6745f475939b00", 0x4, 0x1, 0x1, 0x4, 0x5, 0x0, 0x6}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001c80), 0x41, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) statfs(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)=""/56) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000000c0)={0x7ff, 0x8, '\x00', 0x0, &(0x7f0000000040)=[0x0]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x7, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0x1, 0xfe00000, 0x1, 0x7, 0xd, 0x100, "6745f475939b00", 0x4, 0x1, 0x1, 0x4, 0x5, 0x0, 0x6}) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001c80), 0x41, 0x0) (async) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) (async) statfs(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)=""/56) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000000c0)={0x7ff, 0x8, '\x00', 0x0, &(0x7f0000000040)=[0x0]}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) 14m27.021634126s ago: executing program 35 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet(0x2, 0x803, 0x1) setsockopt$inet_opts(r1, 0x0, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4010) 13m54.581524729s ago: executing program 36 (id=867): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x169a82, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="47f201", 0x3}, {&(0x7f0000000440)="3f0fc9f589", 0x5}], 0x2}], 0x1, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa021, 0x2}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r6, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x14014) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r6, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c890}, 0x20044041) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="080008000600060008001400000045"], 0xfce) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x88, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}]}, 0x88}}, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000002c0)={0x0, @src_change}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xc, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x63, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ff80000000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f00000019c0)=[{{&(0x7f0000000640)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000680)="c0", 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000f00)="c99c", 0x2}], 0x1}}], 0x2, 0x2404c000) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 13m11.72574286s ago: executing program 37 (id=1008): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0xa27, 0x3, 0x9, 0x0, 0x0}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x4, 0x7, 0x2}) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa408080000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x8, 0x400006d}) (async) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffa}]}, 0x24}}, 0x18) (async) syz_usb_connect$uac3(0x4, 0xf7, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0xd, 0x20, 0x3, {0x8, 0xb, 0x1, 0x0, 0x1, 0x3, 0x30, 0xe2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x54, 0x1}, [@cluster_info_segment={0x6, 0x20, 0x0, 0x9d, 0x3}, @feature_unit={0x15, 0x24, 0x7, 0x4, 0x2, [0x1, 0x9, 0x1, 0x6]}, @output_terminal={0x13, 0x24, 0x3, 0x3, 0x402, 0x3, 0x6, 0x8, 0x9, 0x7, 0x200}, @processing_unit={0x9, 0x24, 0x9, 0x1, 0x3, [0x3]}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x300, 0x2, 0x4, 0xb, 0x1, 0x7f, 0x8, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x6, 0x9, 0x2, 0x7e}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0xfa, 0x7, 0x0, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x4, 0x86}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7024, 0x1, 0xd8, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x240, 0x80, 0xa, 0x3, {0xa, 0x25, 0x25, 0x9, 0x2, 0xfe01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8b, 0x88, 0x81, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x6, 0x28, {0xa, 0x25, 0x25, 0xffffffff, 0x8, 0x3}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x4, 0x1, 0x8, 0x20, 0x5d}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x6e, 0x52, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2a, 0x2, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xe, 0x6}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0a}}, {0x74, &(0x7f0000000280)=@string={0x74, 0x3, "5eddd2bf0a2e71cca5ce1c342719d1794ad9cc9f5cdbab424fe2f8cc2300fc5604e7b79d683f6de5e7d611b558b613ec418695df8f839ef539de757b3a663a43c1b4bb716c920c67a7855786df787b4dcc298641fd2a1a2a7c53a2bae45906928235bbb75d6f31820af71d93a461ee1df825"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3009}}, {0x2b, &(0x7f0000000340)=@string={0x2b, 0x3, "5381ebeda8a2baba4d418f76930206710487280f4b325d5672797f32615d6150f9106e5864bcdb35d2"}}, {0xa7, &(0x7f0000000380)=@string={0xa7, 0x3, "e2873090b0a1570c80aba2681c44075a015f1d8098e0aca8c3185fd91a2d981ba267e4a26e656238c19568b9892f39e22b503091f7525324e0f25f7bde9b2ac611041385c29081e5033abd98d8b335de800e9c9821dc017afdd950ad175c9b5ec94c6124af2ffdb4295ab5513eaf1e41381b9e1449ebc850ee485ba8805ee57ae33a734986478c3ec8ff2d6bc19488af937235d2d3aa0bdbb2c108e1db8bab52819bbd6900"}}]}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x40, 0x7, 0x2, "a38f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x5, 0x2, "5eb7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) 12m16.857960821s ago: executing program 38 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (fail_nth: 1) 10m35.360173631s ago: executing program 39 (id=1571): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="09000000e70014000000d97bfbf788a88530470ef9cf12392158e4cc3baa88a8", 0x20, 0x40080c5, &(0x7f0000000100)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @remote}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x20, r4, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='0', 0x1) 10m31.138896523s ago: executing program 40 (id=1588): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x4, &(0x7f0000002500)=0x0) io_submit(r4, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r3, 0x0, 0x0, 0x1}]) write(r2, &(0x7f0000000200)='2', 0x1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x2}) ftruncate(r0, 0x8008976) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000240007015bf01548252ae1520226d38246fbdbdf25077c00000c000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mmap(&(0x7f00003db000/0x7000)=nil, 0x7000, 0x2000002, 0x40010, r0, 0x10671000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10) syz_usb_connect$uac2(0x0, 0x9d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x8e4, 0x163, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x0, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x8, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x1ff, 0x7, 0x2, 0x0, 0xec, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x3, 0x3, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x24, 0xff, 0xe, {0x8, 0x25, 0x1, 0x81, 0xc, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x81, 0x10, 0xff, {0x8, 0x25, 0x1, 0x82, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9m8.005911484s ago: executing program 41 (id=1834): open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r3, 0x0, r4) setxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000340)=@ng={0x4, 0xc, "12e6e017574936"}, 0x9, 0x3) ioctl$TCFLSH(r5, 0x400455c8, 0x2) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {0xff}, @quote={{0x7, 0x18}, 0x7}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x8200}, {}, {}, @result={0x4000000, 0xfffffffe}}, {0x10, 0x0, 0x7f, 0x0, @tick=0x4000, {}, {0x0, 0x80}, @control={0x0, 0x7fff}}, {0x0, 0x0, 0xfd, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x5, 0xa}}], 0x70) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x2561, 0x9, 0x0, 0x6}}], 0x18}], 0x1, 0xc4) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000040)=0xffffffbf) r8 = socket$netlink(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r8, &(0x7f0000000100)="6c0000002c0001060200000000000000000000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c0055801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) mount$binder(0x0, &(0x7f0000000780)='./file1\x00', &(0x7f0000000140), 0x14002, &(0x7f0000000000)={[{@stats}, {}, {@stats}, {@max={'max', 0x3d, 0x3}}, {}]}) 8m16.456646917s ago: executing program 42 (id=2004): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c00170004000100"]}, 0x68}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x8090) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd88, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) (async) close(r2) (async) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r2, 0x8, r3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x54000017) (async) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r5) (async) recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) (async, rerun: 64) rmdir(&(0x7f0000000100)='./control\x00') (rerun: 64) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6m13.617770936s ago: executing program 43 (id=2465): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xbf, 0xc0006, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x6}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 5m6.087447212s ago: executing program 44 (id=2838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba9", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r1 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002d80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000f3b4066a331b7d4a61c90d9edf522b47c5880efe4d9cc0a4e84e4696c5f1befc9a4bb2c7acda91866595e612731a71efd9cb9746595f760f1c5eadeb76fbed2ca5e554f9b37f32"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m34.902981631s ago: executing program 8 (id=2966): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x802, 0x1) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00042c00666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) lstat(&(0x7f0000000100)='./security\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./security/apparmor/.replace\x00', r2, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) (async) socket$inet(0x2, 0x802, 0x1) (async) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000100)) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00042c00666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) (async) lstat(&(0x7f0000000100)='./security\x00', &(0x7f0000000140)) (async) chown(&(0x7f00000000c0)='./security/apparmor/.replace\x00', r2, 0xee00) (async) 4m34.646856741s ago: executing program 8 (id=2968): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) symlink(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=""/13, 0xd) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x2}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x10}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4m34.57931663s ago: executing program 8 (id=2969): ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x3) syz_usb_connect(0x2, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000214b9cfd85104408182040102030109023b0002008030080904457f000202fff0052406985d84bf00090000000f010100000009000700040904009e011203e201090501102000020373dd895cd057763e0491742b3e1b0af67e99b862532921448e45aa9437f01850befe2a38033a9947f604f16a5322a479b14d4b8271167a07c93ebce25d8275346b657ee1a8ec17ec9cff738919e919cba96a382a3e278d9a08e0f0754bfb6cb002001dd20928bf4af1fe6619c141df1c18599c58989c161eb62be5f71e8ee005686875fb586c62f05c5cddfed20fdc1b8847aa8332e7318edc4da52f29d643f111c09061330bd6417992f4db01242f3bfdd402f3002d5e15e66c68759ffb1d26aab9bfb0e4774e4ddc26ab6ed3b9b3d61bda2c51220f1439e792fb8d5877f4760af12fee5ac5333a4a2bd3f6f13e517dba64f2542e0bb3163f4e6992f2fb7b061afe673bfcd40cf1912757a2c05685988620bbc9b60fdd10794d5aee92378e275195d20516fce513c2e42fcda06563b899036854255873840bb53178e0903c061098365eadc6e6f01a83bf7d9d2ce2aa29111c600ca49f0d4c7bc1939889d5d16be8d3834cb2b828e6fab8f9cbb6a78e9e"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x15555699}) 4m31.392267386s ago: executing program 8 (id=2976): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)="794e44c3741d89807e8e7c709a9c141f4af54e6227af07b84ce062b57b8e38461087b5ffe33a5dd3ce512643e8464de343cda369156e53ce61f93f416199808900d3836aa6200b775ad6e26a7683b8a484fd05f425135e839d7390049483c4007200584e9e5e6e031ece4287fc9e15d15c43f7912d247cbb4e61b843d8c41f11943c088f849d", 0x86) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x9, 0x81, 0x3, 0xf5ae}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='!*oo:mod:n', 0xa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)="794e44c3741d89807e8e7c709a9c141f4af54e6227af07b84ce062b57b8e38461087b5ffe33a5dd3ce512643e8464de343cda369156e53ce61f93f416199808900d3836aa6200b775ad6e26a7683b8a484fd05f425135e839d7390049483c4007200584e9e5e6e031ece4287fc9e15d15c43f7912d247cbb4e61b843d8c41f11943c088f849d", 0x86) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x9, 0x81, 0x3, 0xf5ae}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000140)='!*oo:mod:n', 0xa) (async) 4m30.358035612s ago: executing program 8 (id=2981): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="000000000000000019cf4aa1b52907d157aaff4799008d95b2144a000041a64f9024", 0xe1) 4m29.430937889s ago: executing program 8 (id=2988): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$TIOCSCTTY(r2, 0xc01070ce, 0x6) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x800001c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000040)={0x6}, 0x1) sendto$inet6(r5, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x9}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r3, 0x7ffffffe}}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0xd, 0x6e, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f00000001c0)={0x5, 0xfe, &(0x7f00000000c0)="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"}) ioctl$EVIOCRMFF(r6, 0x41015500, 0x0) 4m28.884319147s ago: executing program 45 (id=2988): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$TIOCSCTTY(r2, 0xc01070ce, 0x6) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x800001c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000040)={0x6}, 0x1) sendto$inet6(r5, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x9}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r3, 0x7ffffffe}}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0xd, 0x6e, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f00000001c0)={0x5, 0xfe, &(0x7f00000000c0)="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"}) ioctl$EVIOCRMFF(r6, 0x41015500, 0x0) 4m14.068696429s ago: executing program 6 (id=3036): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200700}) r3 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040d9044aa000000000000109022d0001000080010904010002030002000921fd7f0001220c0009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000040)=0x2) getsockopt(r3, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x0, &(0x7f0000000240)}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) 4m13.350259573s ago: executing program 6 (id=3037): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x2e}, 0x2) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000100000000008000240000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) unshare(0x44040200) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 4m10.158768624s ago: executing program 6 (id=3044): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200048d5}, 0x2400c894) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='bus/pci/drivers/gve/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)="303030303a30303a30302e300ae9", 0xe) write$char_usb(r2, &(0x7f0000000140)="2becf8f8f09d896a1c107a997d458afd390ac847b0e3567aa5dcce6ba9190c574d6f123a87951222e575f71056815c", 0x2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x440680) dup3(r3, r1, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) 4m8.896012181s ago: executing program 6 (id=3047): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) (async) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x20) (async) write(r1, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000009a42ffffff7f0000000057a02c6bb4a8afdd55b057d1b81536fbdd13d4c4fc4e6e", 0x33) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) writev(r4, &(0x7f0000000a80)=[{&(0x7f0000000080)='X', 0x1}, {&(0x7f0000000a00)="d5b8", 0x2}], 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl(r0, 0x40186f40, &(0x7f0000000300)) 4m8.209375365s ago: executing program 6 (id=3049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'pimreg\x00', @multicast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000004}, 0x18) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000045ad00280068000060069078ac1e0001ffffffff11f3305280f127e6e11a9314b296"], 0xfdef) r3 = syz_usb_connect$hid(0x2, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000640)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="0005a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m6.644667385s ago: executing program 6 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x6, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) (async) read(r0, &(0x7f0000000900), 0x100) (async) read(r0, 0x0, 0x0) (async) read(r0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt(r2, 0xff, 0x6, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) (async) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) (async) write(r1, 0x0, 0x0) (async) 4m5.934357678s ago: executing program 46 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x6, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) (async) read(r0, &(0x7f0000000900), 0x100) (async) read(r0, 0x0, 0x0) (async) read(r0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt(r2, 0xff, 0x6, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) (async) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) (async) write(r1, 0x0, 0x0) (async) 3m0.762751724s ago: executing program 7 (id=3236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000004c0)={0x4}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000201000008000300", @ANYRES32=r2, @ANYBLOB="08003f0000020000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="40030000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="24033300d0000000080211000001080211000000080211000000000004000000", @ANYBLOB='\x00'/794], 0x340}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect$cdc_ecm(0x3, 0x8b, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x1, 0x1, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0xee, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x800, 0x495, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xff, 0xf}, @dmm={0x7, 0x24, 0x14, 0x5, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc}, @mdlm={0x15, 0x24, 0x12, 0xfffe}, @dmm={0x7, 0x24, 0x14, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xe, 0xb2, 0x8}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x0, 0x10, 0x10, 0x8, 0x6}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "f93c4be44a14ecf2db0a7e51156a459b"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x2}]}, 0x4, [{0xd3, &(0x7f00000001c0)=@string={0xd3, 0x3, "d1858b9a28fd0388be81e1e2db86de9f302d913ddffa74fe14e47c1323734eddca62ea4f166cc3ee4aff4faa77233ceb247709382e08ce57ddfdb05e4e26ff51d4e89a95f1839a2adaa56ccc4adf05a6f65a76804b1f33cfd0246c1a88b1cf714c9951d9060892e0c12f6eb2d19ead23507722b610c5a82e1596d69ac5eafe8970c4ae7cc65025bad506b3fd23dfbae844477b12144e70d1120376979d365dbd90a42d499fb5f4db1130efda646ea1093589d1a0caf4b380c3c48d6524d25bd468fee5d337ea9df049e86e508c2e451db6"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xe3, &(0x7f0000000300)=@string={0xe3, 0x3, "9a2c5ac6de8e7948711cafc2a69c4fb81a6c5adb875e3830e8b3492a74ed9c47ea05b69398279b364ffcd9f54b53cc2c77e4189b37f2b42a810ff7f8506a28f28f492feb0341198679bcff7fda3ff10e86754a4bfd9168d0c4935d4f851a8436a3833ec2d89a130fca0bfbf3d65871e0c766f174a6ace624b2bc18a6fa3fb7a82c8786b8224312bb131eac6dd1cd09763e30bdc650030a1227eddaa332d21d5c44b53cb738e6daa77051e02fbe4b27802871c84217bb8f5e7f6575e12c16b9e618b7a88b77a58f3ff431485d88214d598b058a02b3972e13562f29780180394f50"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) 2m57.67853363s ago: executing program 7 (id=3249): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x2880, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './config/nullb/nullb1/zoned\x00'}) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x281402, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000040)=0x89, 0x4) recvfrom$unix(r6, 0x0, 0x0, 0x12101, 0x0, 0x0) close(r5) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='1\n', 0x2) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000480)={0x6, 0x3, 0x4, 0x104046, 0x2, {}, {0x2, 0x1, 0xe, 0x7, 0x4, 0x6, "20d0a98e"}, 0x2, 0x4, {}, 0x5, 0x0, r5}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000440), 0x401, 0x0) write(r8, &(0x7f0000000400)='1\n', 0x2) 2m57.506895312s ago: executing program 7 (id=3250): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept(r0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, 0x0) 2m57.374730766s ago: executing program 7 (id=3251): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="000000000000000019cf4aa1b52907d157aaff4799008d95b2144a000041a64f9024", 0xe1) 2m57.24798129s ago: executing program 7 (id=3252): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x6, 0xd, 0x7}) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@local, 0x4e4f}, {@local, 0x5485}, 0x400, "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"}, 0x418, 0x40}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000008c0)={0x0, 0x418, 0x2}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x3, 0x3}) 2m57.149294511s ago: executing program 7 (id=3253): pipe2$9p(&(0x7f00000006c0)={0x0, 0x0}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x3}, 0x10) getsockname$inet(r2, 0x0, &(0x7f0000000040)) r3 = syz_clone3(&(0x7f0000000740)={0x18000000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480), {0x5}, &(0x7f00000004c0)=""/254, 0xfe, &(0x7f00000005c0)=""/190, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000800)={{0xa, 0x4, 0xfffffffb, 0x6, 'syz1\x00', 0x8000}, 0x0, 0x200, 0x5, r3, 0x7, 0x4e73, 'syz0\x00', &(0x7f00000007c0)=['\x00', '\x00', 'X/[\x00', '9P2000.L', 's{(\\])#^*\\$\'@\x00', '&$\x00', '\'\x00'], 0x21}) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0xb1) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x2b, 0x1, 0x1) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r9}) ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000000380)={0x8, r9}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x3, 0xffa4}, 0x20) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_ROPEN(r4, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x41, 0x0, 0x6}, 0xa9}}, 0x18) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x48000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r11 = syz_usb_connect(0x0, 0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r11, 0x81, 0x1, &(0x7f0000000700)='\x00') pread64(r12, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffff7) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x3dfb, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x8000000000000000, 0x1000, 0x1000, 0x8, 0x100000000000, 0x0, 0xffffffffffffffff}}, 0xa0) 2m41.861544873s ago: executing program 47 (id=3253): pipe2$9p(&(0x7f00000006c0)={0x0, 0x0}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x3}, 0x10) getsockname$inet(r2, 0x0, &(0x7f0000000040)) r3 = syz_clone3(&(0x7f0000000740)={0x18000000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480), {0x5}, &(0x7f00000004c0)=""/254, 0xfe, &(0x7f00000005c0)=""/190, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000800)={{0xa, 0x4, 0xfffffffb, 0x6, 'syz1\x00', 0x8000}, 0x0, 0x200, 0x5, r3, 0x7, 0x4e73, 'syz0\x00', &(0x7f00000007c0)=['\x00', '\x00', 'X/[\x00', '9P2000.L', 's{(\\])#^*\\$\'@\x00', '&$\x00', '\'\x00'], 0x21}) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0xb1) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x2b, 0x1, 0x1) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r9}) ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000000380)={0x8, r9}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x3, 0xffa4}, 0x20) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_ROPEN(r4, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x41, 0x0, 0x6}, 0xa9}}, 0x18) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x48000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r11 = syz_usb_connect(0x0, 0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r11, 0x81, 0x1, &(0x7f0000000700)='\x00') pread64(r12, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffff7) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x3dfb, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x8000000000000000, 0x1000, 0x1000, 0x8, 0x100000000000, 0x0, 0xffffffffffffffff}}, 0xa0) 2m18.81070756s ago: executing program 0 (id=3366): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) close(r1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000200)="000000000000000019cf4aa1b52907d157aaff4799008d95b2144a000041a64f9024", 0xe1) 2m18.428195494s ago: executing program 0 (id=3368): setns(0xc9, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0xc, 0x9a000000, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0xfff, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x3, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0x12, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80040000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x1, 0x40], [0x10000008, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6cb, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x800312, 0xd, 0xffff, 0x2, 0x4, 0x0, 0x7fff, 0x5a7c, 0x7ffe, 0x400, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0x9, 0x47, 0x60f6, 0x6, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6bc, 0xbc45, 0x48c93690, 0xffffffff, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x108, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x8, 0xd, 0x0, 0x5a9c, 0x8, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x7, 0x0, 0xffe, 0xa2, 0x7, 0x1, 0x2, 0x7, 0x8cc, 0x2000ac, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x8, 0xfff, 0x0, 0x7, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x6, 0xfffffffe, 0x80000003, 0x1006, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xfa4, 0x9602, 0x7, 0x7ff, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b9d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) (async, rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01100000400000000000080018000073797a5f74756e0091094a1000000000000000000c000280040005000400010000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000002c0)) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) keyctl$set_reqkey_keyring(0xe, 0x1) (async) keyctl$set_reqkey_keyring(0xe, 0x1) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x3, &(0x7f00000000c0)={0x10, "8105d6c721100f00005500a320df00"}}) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) keyctl$set_reqkey_keyring(0xe, 0x1) listen(r2, 0x5) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000790000000000000000000500000a20000000180a0500000000000000000702e2ea0e75aa9f34dad75614ca540000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x200080b0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) accept4$inet(r2, 0x0, 0x0, 0x0) 2m15.4502172s ago: executing program 0 (id=3373): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x1ac, 0x1f, 0x200, 0x3, 0x25dfdbfd, "", [@nested={0x19c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @generic="1ee79c29bb3753593ef3de0498c4b9f3f7821981b3ed8a1a865bb22d7d24290e0ed59ba7f948dffc95c08274c633599371d954e26372b2324c3560b152316a89138e63db88e733c21206e935ac9262d525cbada4119b5a4c5c12a3b4df461142ce27e83330bf292b249f799a34edcfa974dad27699538b3bb79625dfa595361ef751464cef8247c05fb78f0478c5070cbca263fd9b65ef2f99eb3a9a0ab7b35554951d225875f463785ce5e3cbe023", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x1ac}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) 2m14.666938394s ago: executing program 0 (id=3375): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='naa.6001405c935d7912', 0x14) read$dsp(r0, &(0x7f0000000180)=""/130, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000400)='naa.6001405c935d7912', 0x14) (async) read$dsp(r0, &(0x7f0000000180)=""/130, 0x82) (async) 2m13.927820388s ago: executing program 0 (id=3379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="3f19be07632d8cbd"], 0x8) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty, 0xfffffffd}, 0x1c) (async, rerun: 64) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, 0x0, 0x190) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x3a}, @l2cap_cid_signaling={{0x36}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x9}}, @l2cap_conn_rsp={{0x3, 0xfc, 0x8}, {0x4, 0x4, 0x23a, 0x400}}, @l2cap_conn_rsp={{0x3, 0xb, 0x8}, {0x3, 0x2, 0xacc, 0xfff6}}, @l2cap_create_chan_rsp={{0xd, 0x6c, 0x8}, {0x1, 0xfffc, 0x10, 0x80}}, @l2cap_info_req={{0xa, 0x2, 0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xc, 0x2}, {0x9}}]}}, 0x3f) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422be7dafc3e178da260b27a5bf9d3b4193062664a225274a", 0xac}], 0x1) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0xa) (rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e6"], 0x64) 2m13.361151956s ago: executing program 0 (id=3383): socket$inet6_tcp(0xa, 0x1, 0x0) shmget$private(0x0, 0x13000, 0x78000b10, &(0x7f0000feb000/0x13000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/resume_offset', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001f300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038600000000c0a010100000000000000000700000008000440000000000900010073797a300000000038000380340000800800034000000002100002800c00028008000180fffffffe0c0004400000000000000d9d0c000540001a"], 0xf4}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000000)={0x3, {{0xa, 0x4e20, 0x4, @mcast1}}}, 0x88) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)={0x14, r5, 0xaacabee6bca058bf, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x24008050) clock_settime(0xfffff000, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4082, 0xff2}], 0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x100}}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random='\b\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000034000480050003000100000005000300010000000500030080ff00000500030002000000050003000100050000000300020000000800020002"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x44014) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m12.758017551s ago: executing program 48 (id=3383): socket$inet6_tcp(0xa, 0x1, 0x0) shmget$private(0x0, 0x13000, 0x78000b10, &(0x7f0000feb000/0x13000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/resume_offset', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001f300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038600000000c0a010100000000000000000700000008000440000000000900010073797a300000000038000380340000800800034000000002100002800c00028008000180fffffffe0c0004400000000000000d9d0c000540001a"], 0xf4}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000000)={0x3, {{0xa, 0x4e20, 0x4, @mcast1}}}, 0x88) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)={0x14, r5, 0xaacabee6bca058bf, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x24008050) clock_settime(0xfffff000, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4082, 0xff2}], 0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x100}}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random='\b\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000034000480050003000100000005000300010000000500030080ff00000500030002000000050003000100050000000300020000000800020002"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x44014) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m50.232409286s ago: executing program 3 (id=3433): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/183, 0xb7}], 0x5) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x100, 0xfffffffffffffffe, 0x9}) r2 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003180000001803"]}, 0x0) 1m48.274880826s ago: executing program 3 (id=3439): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x8000000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0xd, 0x0, 0x7, 0xfffeffff, 0xf11, 0x2, 0x3fffff}]}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000000)=0x9, 0x4) 1m46.828077028s ago: executing program 3 (id=3444): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f00000000c0)="04", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000440)="ff", 0x1}], 0x1}}], 0x2, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000002540)={r5, 0x1000}, 0x8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000000)=0x80, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05a300000000000000000d008f9191e7a6b4a3bb", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20088c4) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05a300000000000000000d008f9191e7a6b4a3bb", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20088c4) 1m43.492919393s ago: executing program 3 (id=3459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000", 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x101, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) (async) sendto$inet6(r2, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x92, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/uprobe_events\x00', 0x0, 0xa0) write(r3, &(0x7f0000000240)='1', 0x1) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) r5 = getpid() tgkill(r5, r5, 0xb) (async) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x2, 0x5001) ptrace$cont(0x7, r4, 0x0, 0x0) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000080)={@host, 0x6}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f0000000180)={@host, 0x5}) (async) wait4(r4, 0x0, 0x0, 0x0) 1m42.888927398s ago: executing program 3 (id=3462): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) 1m40.886895456s ago: executing program 3 (id=3467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r2, 0x4238000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x4}}) sync() sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4bc40927}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7e9b55e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5df02aeb}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b57a7be}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) 1m25.815734321s ago: executing program 49 (id=3467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r2, 0x4238000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x4}}) sync() sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4bc40927}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7e9b55e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5df02aeb}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b57a7be}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) 52.717962121s ago: executing program 4 (id=3578): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) open_tree(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x100}], 0x0, 0x1000000, 0x0}) 52.04621737s ago: executing program 4 (id=3581): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="000000000000000019cf4aa1b52907d157aaff4799008d95b2144a000041a64f", 0x20) 51.535058575s ago: executing program 4 (id=3583): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) syz_usb_ep_write(r1, 0x3, 0x8, &(0x7f0000000100)='\a\x00\x00\x00}F\x00\x00') syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f00000013c0)={[{}]}) 48.369754576s ago: executing program 4 (id=3596): r0 = socket$kcm(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='on', 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff00073e000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x7) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404ca9ab75e4d68c0aab0109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x0, @remote, 0x2}, 0x80, 0x0}, 0xe07e872420dbefca) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000010000005566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000024000f012ebd704c9f6a3eb55900fb010025020900000c0001800800020001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000066c0)={0x0, 0x0, &(0x7f0000006680)={0x0}}, 0x20000000) 45.096400805s ago: executing program 4 (id=3611): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000140)={0x1, 0x7, 0x3, 0x0, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414bb0000000000000000030006000000000002"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206050002000000000000000000000005000400000000000900020073797a31000000000c00078005001500a1000000050005000200000005000100060000000e0003697000"/84], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x8200, 0x1, 0x8}, &(0x7f0000000100)=0x10) r4 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x10, 0x0) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f0000000080)={0x100080, 0x1000f9, 0x40000, {r5}}, 0x20) cachestat(r4, &(0x7f0000000180)={0x100000000, 0xffffdfffffff12aa}, &(0x7f00000001c0), 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r6, 0x400, 0x1) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x400000) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r9 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r9, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r9, &(0x7f0000000880)=""/202, 0xca, 0x2, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f00000002c0)=@mmap={0x555, 0x2, 0x4, 0x0, 0x9, {0x0, 0xea60}, {0x4, 0x8, 0x4, 0xa2, 0x80, 0x6, "63ab6ded"}, 0xffff}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x57) sendmmsg$inet(r7, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="bdd9d14588e6b7", 0x7}], 0x1}}], 0x1, 0x6ef8eb0211163289) socket$inet_mptcp(0x2, 0x1, 0x106) 43.643164029s ago: executing program 1 (id=3615): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff06, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 43.112024341s ago: executing program 4 (id=3618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="6494da98e8e463cdf35bb6e03f2f", 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffbffff}]}) 42.210787255s ago: executing program 50 (id=3618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="6494da98e8e463cdf35bb6e03f2f", 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffbffff}]}) 42.151488914s ago: executing program 1 (id=3622): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x0, 0x3, 0xf1, {0xf1, 0x4, "a65a8866384a07f264a9a70b56bb388a952e1522b0ef4ec7dbf574445a1c0b1af321ef9d49a12c96bbef3352727556135e43292c59824c5a144b4b102334ffd459342305588a21824cbcbb3be2a689d4457cc5f35a0691e7d3df63637c87799955d8974f10bc7ebdf71ef822d8c4586be2f4d0c3acf56396ae5e9a4835bd2f0969c3dd109c75da5cce71e354af44ab85889c720da79c513108d72b2c29e1df712b6b88ac98c24f38ec865b6f2a6cb8afe8d160ecf7aa944e22d82df90026e2dafbcd6f752379dbbf777d1f1b04234a1cc1513d12da0c6b4d9118095de796e32cd922a47a90707edb47c6566010ca5a"}}, &(0x7f0000000200)={0x0, 0x3, 0x73, @string={0x73, 0x3, "751f1119584c585a00fc11e6ee5d6750c0b0f33b5c4d1599d77f1292176ac86502999394e2190c9f6ef0b987ea1a1a4a48701106dd061b6d3f0684e6985825d9d515aec2179bae321099146e1800868e52d4a06fe68fae8669c8bdb015fe731e136252001962c1fdbd1a6a77a006388de0"}}, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "a093b8b7"}, @global=@item_4={0x3, 0x1, 0x9, "bdd1d0e1"}, @main=@item_4={0x3, 0x0, 0xa, "28ac8f4d"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x133, 0x0, 0x1, {0x22, 0x1a2}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000340)={0x40, 0xa, 0x87, "2bc34bc45cb04e7c3324c85a00b829793ca13a0e99d44a668e9037efcd40f413cd8ea112b5f72dbd121601902c911d9e32c4b8869ab1d5a9f24047816aab20a6eec7ed98cd50c42957e7b1804fb3b15955ec23ece83199c38202d274bd1446f09f1de963623137f6c4ad1b8822a4a3be9a16a022a47331f8f4076f5dcbff63634029acd78cd695"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4d}, &(0x7f00000005c0)={0x20, 0x1, 0x66, "e87042df8129fa24cc3985a430390863b6d2de630b9e64ac691a55b6aac16e18b8f5a4ffa5b629e87c2fe12aca4d39e8ade604be7c8f300258925d8a65a3ff39442dd02f140b0bcef961e1cec030224ce18f215c70e32052780eda84ee8f8c86973a717a1176"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0xb}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x6, 0x3, ' \x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, &(0x7f0000000880)={0x40, 0x24, 0xbb, {0xbb, 0x10, "c34e66f93604d22369047b6e84691011c25aad16b42e8facda610ab7a38901d61b2226f29516a95286893dd0b9d61f9881546930378512454c97b73b0a09c7bd8329b44eb8e2b566c297c423d9ae5711c9d066a4e4f6e1d174230c6f368c3b56db9e5389a42107ded0992ab2d49deca6a551a898aab56c9d22d97b12018b5a2530cafa56303de97abbd5c075e1f246d3dfe3c865f5cdd3046745fcaf37d0b661dd08717d8f1ac00072598e35bf31e6bb78ef32cd9d17a26906"}}, &(0x7f0000000980)={0x0, 0x3, 0xef, @string={0xef, 0x3, "13d50fd2589be9309b995da399d1c75e6eb78c149e40365be40133b5ca0ff4e7af8c4aa001b112814a03fd15aa5babbc08bf6c1c1fa9940ae27538034e40f100951574c9b9f1a7c223715171521289595b913e1051a2b851fec010c13cad42d50d02c25f8f42c7ddcfe5a1c455a582d13eceaa7643771918416d9e4ae5ed1e360a4361dc54225ab1c1b4805b308b85719757f473f6f543ccaf4408d44cbc5097c16d135afdf8c18328a589fabdbe45e07e7b9d5c08feaa4a0fcecc68667a76fef4d35826a05c4a040a59c00fc1adacc50e5cf7a5880e9c20dc07631f37f1add8b7f4ee68066d09b467e9a589ea"}}, &(0x7f0000000ac0)={0x0, 0x22, 0x8, {[@main=@item_012={0x1, 0x0, 0xc, 'Z'}, @main=@item_4={0x3, 0x0, 0xa, "a65bb0c4"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x89, 0x1, {0x22, 0x77b}}}}, &(0x7f0000000e80)={0x2c, &(0x7f0000000bc0)={0x0, 0x12, 0xa6, "0157c9aa33802df7d526f8f5f06c5221de26233be4cdcb61d8a59400ce5aa19ae906b2cef26bb35220d2ba7ca773cd31ae139b7151381f9cc19bd1629399fdd109543efaca4028951c1fb0627023f86abaa1d8eb7ded68cc39bd65d4162c82a238d054edab4b1eff78be6a205ba55b6c2cfa16ef19498343d12561a883c7c171b126512f020793b2614746b69a9dc44f9e14549d96580938205196977627c156d8e15c4957f1"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000d00)={0x20, 0x1, 0xf0, "284210a004ea81c5550cea64ea85dc0cb1f920fc1b86a05c23c47892e8d12b83d7fcba02b7ab6cbeb24ec55cc84de7354e11c2d0b16587acb8d64575078ce794260d0b3049d446b636c4e9cf1fda27d567fc4151701632d1b6bdd41b17ca1c8c0e62b7070db36edf9f20bef5c88d41fcd51fd7feb86a10a1b33d8419a14c2b9505841a7f407109bb120e6809f79da506022e90a84b5eac349bafe38a9f42f8e0eb8440d9276fce8c42a1fec4844d23813ba8bd3a527b49e0e5744afbf3c63f1c9d3089d219fc5e6cf7fe247df9d600db863186a632646be35603388ff536d1c75c38353285156110e13c69b756c13ce0"}, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x40, 0xa, 0x3, "fbc898"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x3, "46b0d1"}, 0x0}) 38.945309423s ago: executing program 1 (id=3626): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2505001900ff00000028001a000a01010200000000000000000076d0f8b62ac1e2d5ed0e43e58c3f6d65e808c7eb5ab6"], 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000840)={0x20, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="5010010000004d"], 0x0, 0x0}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d7", 0x20}, {&(0x7f0000000480)="4673c875ca4d9cb6f1d39f1148c805c9a48bbef3d9c3e7cf2fc135afc0cd638c00fc6bfad79db2f8ffac4541024722d3f9bc6cd3f362387a70", 0x39}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000002400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0x92, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x1ff, 0x1, 0x1, {0x22, 0x68e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x81, 0x5}}}}}]}}]}}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 36.694310303s ago: executing program 1 (id=3628): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff08, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x32314247, 0x0, 0x0, 0x20000ff, 0x8, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000000a8883, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x5000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000900)={'vxcan0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000940)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x14) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@remote, @in6=@private0, 0x4e23, 0x0, 0x4e21, 0xff, 0x2, 0x20, 0xa0, 0x5c, r6, 0xee00}, {0x3, 0x5, 0x6, 0x2, 0x800, 0x81, 0x3, 0x9}, {0x8000000000000001, 0x80000001, 0x4dc59d3e, 0xfffffffffffffff9}, 0x6, 0x6e6bb8, 0x0, 0x0, 0x3, 0x3}, {{@in6=@mcast2, 0x4d4, 0x32}, 0x2, @in=@local, 0x0, 0x2, 0x1, 0x5, 0xfffffffc, 0x12a}}, 0xe8) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ifreq(r9, 0x8923, &(0x7f0000000200)={'macsec0\x00', @ifru_names='macsec0\x00'}) syz_usb_disconnect(r8) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8f, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x10, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5409, 0xb, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x80, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x6, 0x9, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x3, 0x9}}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "c705144d6ced622a120a6e7c850f3865"}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r10, &(0x7f0000000800)='- 1 0 0 1', 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101082) write$qrtrtun(r11, &(0x7f0000000240)="a1228d04129a7d8e5ef1280aa10e134f21cee23e1aa0bc5926587a9b19b3ed9cc97efda7657ab4db0eee5d5f09dfcd1476b29f2a712d70740d5b59dc481c8edbc655dac16de196c8d28f0425cd9ea7210d9e8a9e48eecf8995630f074d8d9d3d50", 0x61) 32.766520494s ago: executing program 1 (id=3637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000018105e04da07130000000001090224000100000000090400000903000000911b98832f321ae0e43baba0fe"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022220000009bda5a5d14900b0000004983"], 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0xb, {"a2e3ad21ed9b52f91b5d340987f70e06d038e7ff7fc6e5539b3247298b089b3208356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a12e6e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5601007921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f1465f4078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392213dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe4738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc68d7bbef724779ca1f731b332fff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)) r4 = syz_clone(0x8001811, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) syz_clone(0x802400, &(0x7f0000000280)="2523a0f3661e47c82afda6c3484652034de47ae87820af71e0c5bff8927666208bc061046be63e237ecc613341a959326d61fe9147d4a8518601586fc51729bdb6139e6b6329a750b7de0a63843430e7ff6ba035ecceb6fc6ad9fd246db276cf398ef2a4cade6a622b100c872f7a", 0x6e, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000880)="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") r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000000)='3', 0x4e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) r10 = gettid() r11 = syz_open_procfs(r10, &(0x7f0000000040)='timerslack_ns\x00') ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f00000001c0)) 28.962202722s ago: executing program 1 (id=3647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f00000001c0)="baf80c66b85245d881bafc0cecba6100b80000efb88c000f00d00fc76e3ab81f010f00d0f3e000baf80c66b877b9f08566efbafc0cecbad104b0fbeef00fc1becf845033a2734f", 0x47}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = syz_open_pts(r3, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r4, 0x400455c8, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2f) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.651181752s ago: executing program 5 (id=3662): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x2000fb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 21.294375763s ago: executing program 5 (id=3663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x70) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x2) recvmsg$unix(r3, &(0x7f0000000340)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/81, 0x51}, {&(0x7f0000000140)=""/73, 0x49}], 0x2, &(0x7f0000000380)}, 0x2000) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40015, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 21.263338557s ago: executing program 5 (id=3664): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 17.957992965s ago: executing program 5 (id=3672): r0 = socket(0x18, 0x2, 0x2) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x84) fchdir(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}}}, [0x5, 0xdbf, 0xe, 0xd, 0x4, 0x5, 0x236, 0x6db, 0x9f7, 0x2, 0xffffffffffffffff, 0x9, 0x3, 0x6, 0x5]}, &(0x7f0000000140)=0x100) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setpriority(0x2, 0x0, 0xb842) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={r3, 0x6}, 0x8) (async) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f00000001c0)={0x2, 0x3, 0x1, 0x2, 0x0, 0x6}) (async) connect$unix(r0, &(0x7f0000002740)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) pipe2(&(0x7f0000000000), 0x800) 13.68207818s ago: executing program 51 (id=3647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f00000001c0)="baf80c66b85245d881bafc0cecba6100b80000efb88c000f00d00fc76e3ab81f010f00d0f3e000baf80c66b877b9f08566efbafc0cecbad104b0fbeef00fc1becf845033a2734f", 0x47}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = syz_open_pts(r3, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r4, 0x400455c8, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2f) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.610823481s ago: executing program 9 (id=3679): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x6a7b, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xfffffffd, 0x0, 0x0, 0x2, 0xf, 0x1, 0xffcd}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="800037bb06000000", 0x8, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x2000, 0xfffff000}]}) ppoll(&(0x7f00000001c0)=[{r2, 0x2002}, {r1, 0x2}, {r1}, {r3, 0x510a}, {r4, 0x8}, {r2, 0x8}, {r0, 0x4448}, {r2, 0x10}, {r1, 0x4}], 0x9, &(0x7f0000000240), &(0x7f0000000280)={[0xf000000]}, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848200000005e140602001200000e000a00000000000a8000001294", 0x2e}], 0x1}, 0x0) 6.059798503s ago: executing program 5 (id=3681): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f6d00") write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 sync 2 7:0 0 7:1 0 1 handle_errors\x00', 0x58) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001000000000000000000000000000000000000000000000000000000746573745f6d00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f6d00") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/dm-0\x00', 0x2, 0x0) read(r1, &(0x7f0000000300)=""/512, 0x200) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)="9c", 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @my=0x0, 0x0, 0x3, 0x61, 0x3, 0x0, 0x0, 0xfffffffe}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x9c}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listns(&(0x7f0000000080)={0x20, 0x0, 0x6, 0x40000000, 0x0, 0x3}, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000100)=0xa004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {0x7, 0x2, 0x5, 0x5}, 0x4d, [0x9, 0x0, 0x5, 0x5, 0xcb, 0xfdf3, 0x80, 0x2, 0x9, 0x4, 0x6, 0x100, 0xfff, 0x5cd, 0x6, 0x5, 0x8000, 0x10, 0x3, 0x7, 0x7, 0x8, 0xe9b, 0x200, 0xf, 0x1, 0x1ff, 0x0, 0xd0, 0x2, 0x9, 0x3ceb, 0x0, 0x292, 0x40, 0x1, 0x4, 0x4, 0x4, 0x0, 0x0, 0x6, 0x4, 0x40, 0x100, 0x6, 0x2, 0x8, 0x5, 0x7, 0x8, 0x7ff, 0x1, 0x5, 0x72e, 0xc61, 0x98, 0x8, 0xb31, 0x6a, 0xb7, 0x7ff, 0xfff, 0x80000001], [0x10000, 0x4, 0xa9f7, 0x7, 0x700, 0x1, 0x2e18f397, 0x8, 0x10a0, 0xfff, 0x1, 0x8, 0x5c3, 0xffffff80, 0xc, 0x5, 0x9, 0xbb1153d, 0x0, 0x8d, 0x5, 0xfffffeff, 0x9, 0x4, 0xfffffff8, 0x0, 0x2, 0xc, 0xef, 0xebf9, 0x7, 0xd4, 0xce, 0x400, 0x2, 0x8, 0x8, 0x7, 0x1, 0x2, 0x9, 0x401, 0x2, 0x3, 0x8001, 0xc98, 0x7, 0x2, 0x8, 0x2, 0x7, 0x8, 0x6, 0x8001, 0x7, 0x6, 0x1, 0xddf, 0xa, 0x3, 0xfffffff4, 0x5, 0x4, 0x6], [0x2a5, 0x5, 0x2, 0x1, 0x6d, 0xf, 0x3, 0x68a, 0xfffffff7, 0x2, 0x2, 0xb, 0x9, 0x8001, 0x2, 0x4, 0x9, 0x3, 0x6, 0x4, 0x2, 0x8, 0x6, 0xffff, 0xbdd8, 0x0, 0x1, 0x9, 0x1, 0x695, 0x3, 0xfffffffc, 0x101, 0xd, 0x0, 0x4, 0x4, 0x3, 0x400, 0x3302, 0x0, 0x656f, 0x0, 0x101, 0x101, 0x7, 0x9, 0x280000, 0x0, 0x5, 0x1, 0x5, 0x401, 0x4, 0xfffffff6, 0x2, 0x1000, 0xdb, 0x1, 0x13, 0xfffffff9, 0x7, 0x0, 0x21], [0xfff, 0x3, 0x3, 0x8, 0xfff, 0x40, 0x10001, 0x5, 0x6, 0x348, 0x400, 0x5, 0x5, 0x400000, 0xffffffff, 0x1000, 0x6, 0x7fff, 0xbf99, 0x9, 0x6, 0x6, 0x5ebb, 0xdc, 0x8, 0x9a12, 0xfffff000, 0x7fffffff, 0x0, 0x4, 0x7f, 0x800, 0xe, 0x4, 0x8, 0xd1, 0x8, 0x1, 0x5, 0x0, 0x80000001, 0x1, 0x3, 0x8, 0x80000001, 0x6, 0x6, 0x3, 0x4, 0x9, 0x400000, 0x1, 0x0, 0x12c89b16, 0x4, 0x8000, 0x36, 0x1, 0x3, 0x6, 0x7b67, 0x400, 0x4]}, 0x45c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400c1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @any, 0x9, 0x7, 0x5d, 0x400, 0x9, 0x0, 0x89}) 5.806530169s ago: executing program 9 (id=3682): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000002080)=0xffffffffffffffa2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) (async) fchdir(r2) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r3 = syz_open_procfs(r1, &(0x7f0000000040)='ns\x00') ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000001c0)={0x7f, 0x6}) capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000180)={0x916, 0x100, 0x2, 0x80000000, 0x1, 0xba}) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 5.368789341s ago: executing program 9 (id=3683): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000000c0)=@IORING_OP_GETXATTR={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a40)='\\', 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, &(0x7f0000032780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000180)='0fc5:1227:ia', 0xc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000080)={r7, 0x1}, 0x8) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r8, @ANYRES32=r8, @ANYRES32=r8, @ANYRES64], 0x7c}}, 0x443b3af723ac40ba) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000100000000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 4.501803973s ago: executing program 2 (id=3684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f00000001c0)="baf80c66b85245d881bafc0cecba6100b80000efb88c000f00d00fc76e3ab81f010f00d0f3e000baf80c66b877b9f08566efbafc0cecbad104b0fbeef00fc1becf845033a2734f", 0x47}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = syz_open_pts(r3, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r4, 0x400455c8, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2f) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xff) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.262114386s ago: executing program 9 (id=3685): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='&\x00', 0x4200, &(0x7f0000000040)={@align=0x5a22, {0x8000, 0xff, 0x5, 0x40}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) writev(r3, &(0x7f0000001540)=[{&(0x7f0000000e80)="58ddb007", 0x4}], 0x1) recvfrom(r3, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000001c0)=0x9) 4.073569634s ago: executing program 2 (id=3686): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xeffd, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x86, 0x5, 0x88}}}}}]}}]}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x20, 0x10, 0xfc, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0xd, {{0x8, 0x24, 0x6, 0x0, 0x0, "c27042"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xbc9e, 0xfc01, 0x8}, [@acm={0x4, 0x24, 0x2, 0x9}, @dmm={0x7, 0x24, 0x14, 0x6, 0x9}, @obex={0x5, 0x24, 0x15, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x81, 0x3}, @mbim={0xc, 0x24, 0x1b, 0xa81, 0x4, 0x4, 0x9, 0xa0c, 0x40}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x1af, 0xb, 0x1, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0x2, 0xe2}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0x3b, 0x6, 0x110, 0xe2, 0x6, 0x7f, 0x20, 0x74}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x5, [@ss_container_id={0x0, 0x10, 0x4, 0x63, "8448c65c83bb15385f35f357016b291a"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0xa}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x1, 0x4, 0x32}]}, 0x1, [{0xbd, &(0x7f0000000280)=@string={0xbd, 0x3, "b9e40b41da4f5d59b47cb13e6918799d33984cd1f87a765b2c55665483be18f10d61290dea35ab30aab2019e052c36fde1eb0ae49d4c2b2e07a35a04898ddee97165e7d6e8fb636a5029518f6e36f099119ddc6011f9d6ccca342adb330a444e6122776c86d2751d6fcf17d9f2eb01ff1f1e221cfa66f6c7daea94e9546cce495b0f187b9567956d6f0a71a697d2264b272c9d832b7a8cdc85b6be6aea1ae66c2149e718ebd162c2b6c6356ed25a04595c3154de039aac07d130ed"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x31, 0x8, {0x8, 0xd, "e75bcf47a88a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.550783996s ago: executing program 9 (id=3687): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000002480)=ANY=[@ANYBLOB="12010003fc2f6240c40911003806010203010902240001720610060904f0e802b51c800309050102ff03ff10030905ca02"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x6, 0x3a, 0x1000, 0x3a, 0x770, 0x1000000, 0xbabd}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) (async) r3 = fcntl$dupfd(r2, 0x406, r2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="1201100395e341203c41c2814bc90102030109021b00020e06d003090408d8008effff080904000500ff"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) (async) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000005c0)={0x14, &(0x7f0000002580)=ANY=[@ANYBLOB='@#\f'], 0x0}, 0x0) 2.677368022s ago: executing program 2 (id=3688): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r3 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)=@phonet={0x23, 0x6e, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x44) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r4, 0x7}, &(0x7f0000000080)=0x8) 1.731828997s ago: executing program 2 (id=3689): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04080402"], 0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2a, 0x0, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x26}, "5d10ddcfe0522a329d5b7169942002868c9dd402700ecbc24c832d87ba6d70a35b783fc16514"}, 0x2a) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8700c00304bc58bea13c9162bffeec96a9b74ff3a6ad513dafb0a89197fe4ac85cd7db0196737a3351f88ae64c06262aa75e5a47dd24fb9dbbb6f5eaf6fbedcce1e8093fe2ed4ed27074a364ad4621f09121e2150d8eeec41f9b2a4503bb0b6e236baa6a853b1419b42afce4e8a4fe5025f8d72e6a87572f5919a236c48e3cd19"], 0x11) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x802, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRESDEC=r2]) 928.829381ms ago: executing program 2 (id=3690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0xc, 0x1}, 0x30, 0x2) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x14985, 0x3, 0x3}, 0x18, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r7 = syz_open_procfs(0x0, 0x0) writev(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$kcm(0x10, 0x400000002, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xc) landlock_restrict_self(r4, 0x1) connect$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, &(0x7f0000000240)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000080)="400f23280f019c990e000000b91a0200000f32c344240000600000c744240200800000c7442406000000000f011c246566262e440f23b126673e660f382943b0c4c3914984fb499e00007fc744240000000000c744240278581667c7442406000000000f011c2467440fc7580066b804008ee8", 0x73}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="bcaaac7cad0dfbc2e143745d7ddb58e2ec43b70105cf1f7e3666f5b2ceb2474bcaf329ce96d5daa0cb30f81128873b6a1fccd132e88b1b9b62117c932768e3bd85fa4f87aafce0a082", 0x49, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r10, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x5b) keyctl$revoke(0x3, r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) 318.275137ms ago: executing program 9 (id=3691): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000002c0)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}, {0x6b, 0x1200, 0x0, 0x0}], 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4, '\x00', {0x75, 0x5, 0x200, 0xfffffff8, 0xea95, 0x10, 0x1, 0x3, {0xffffffff80000001, 0x10}, {0x2, 0x9}, {0x4, 0x101}, 0x6, 0x2, 0x6, 0x9a, 0x0, 0x80, 0x2, 0x9, 0x96f, 0x40, '\x00', 0x10001, 0x6, 0x6, 0xc}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff}) write(r2, &(0x7f0000000700)="c2f5f6b175173e72936b09ee5ca38aa7ff2ed76052a5faee84af0084329e219abfd3ebb92e129bfdea51db7d8a8ba7d1ae5404c1c52615b77b21183ddc52b3f70ee3f497ea61fc29446e2788963a789bd5e96136f0d390b7e598d52a0396bebde93f4cf3e6019a63adef0a9a317fb260e9f5dcb8e89cd628b79d8f17cce0957e9971616a5371a7fda2c40822c3ce81588b138d57b69eaed023bec0f2aecd2ddda839828630b873da553bec359fc683486b8debaf808e89df2445babe738c4c36ba26f44ad38c72f6c5e2636aaa31a3cb717903dc8480d01ede9b585300", 0xdd) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022e8240000000000001cea347e70f43f3130f254258ff7bf3df11d5b8b6d0c550ce380eb3214d5b82243e837d0ba48cbceb23962c80000d1a71de21aada5839a066b889eea039ce2d8ca19cac82120ed9dec1eaa81df93bbaf63e1f7a4714120e969412cb42cfc1f10158228f64b7658860477955c8c583df5"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r5, 0x801c4803, &(0x7f0000000040)=""/190) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) 317.83353ms ago: executing program 2 (id=3692): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}]}]}, 0xa4}}, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x80011133, 0xfff, 0x0, 0x7ffe, 0x10010000}, 0x2a, 0x1000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff09, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32], 0x0) 0s ago: executing program 5 (id=3693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f00000001c0)="baf80c66b85245d881bafc0cecba6100b80000efb88c000f00d00fc76e3ab81f010f00d0f3e000baf80c66b877b9f08566efbafc0cecbad104b0fbeef00fc1becf845033a2734f", 0x47}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = syz_open_pts(r3, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r4, 0x400455c8, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2f) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xff) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 825567][T22635] ? clear_bhb_loop+0x70/0xc0 [ 1049.825588][T22635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.825605][T22635] RIP: 0033:0x7f0abe79e159 [ 1049.825622][T22635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.825638][T22635] RSP: 002b:00007f0abf5810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1049.825658][T22635] RAX: ffffffffffffffda RBX: 00007f0abea25fa8 RCX: 00007f0abe79e159 [ 1049.825673][T22635] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0abea25fac [ 1049.825685][T22635] RBP: 00007f0abea25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1049.825698][T22635] R10: 0000000000000242 R11: 0000000000000246 R12: 0000000000000000 [ 1049.825710][T22635] R13: 00007f0abea26038 R14: 00007ffcdf613f20 R15: 00007ffcdf614008 [ 1049.825738][T22635] [ 1049.922755][T22595] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1050.080325][ T33] audit: type=1800 audit(5371731169.640:6859): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1050.090812][ T27] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1050.091314][T22595] usb 2-1: Using ep0 maxpacket: 8 [ 1050.092829][T22595] usb 2-1: New USB device found: idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1050.096695][T22595] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 1050.096717][T22595] usb 2-1: config 162 has an invalid interface number: 3 but max is 2 [ 1050.096734][T22595] usb 2-1: config 162 has no interface number 0 [ 1050.096748][T22595] usb 2-1: config 162 has no interface number 1 [ 1050.096820][T22595] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1050.096852][T22595] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1050.096873][T22595] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1050.096894][T22595] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1050.096916][T22595] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1050.096937][T22595] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1050.096960][T22595] usb 2-1: config 162 interface 84 has no altsetting 0 [ 1050.096977][T22595] usb 2-1: config 162 interface 2 has no altsetting 0 [ 1050.105029][T22595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.105047][T22595] usb 2-1: Product: syz [ 1050.105060][T22595] usb 2-1: Manufacturer: syz [ 1050.105072][T22595] usb 2-1: SerialNumber: syz [ 1050.133953][ T33] audit: type=1800 audit(5371731169.700:6860): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332642 res=0 errno=0 [ 1050.147610][ T33] audit: type=1800 audit(5371731169.710:6861): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=332674 res=0 errno=0 [ 1050.151542][ T33] audit: type=1800 audit(5371731169.710:6862): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=332649 res=0 errno=0 [ 1050.156476][ T33] audit: type=1800 audit(5371731169.710:6863): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=332650 res=0 errno=0 [ 1050.242390][ T27] usb 10-1: New USB device found: idVendor=12ba, idProduct=0100, bcdDevice=0.00 [ 1050.251435][ T27] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.251458][ T27] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.251480][ T27] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1050.251551][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.277438][ T27] usb 10-1: config 0 descriptor?? [ 1050.363015][T22595] btusb 2-1:162.84: failed to enumerate endpoints [ 1050.564576][ T4927] Bluetooth: hci8: Opcode 0x0c03 failed: -71 [ 1050.616359][T22595] usb 2-1: USB disconnect, device number 48 [ 1050.748400][ T27] input: HID 12ba:0100 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:12BA:0100.003C/input/input76 [ 1050.833144][T21816] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1050.897150][ T27] sony 0003:12BA:0100.003C: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.9-1/input0 [ 1050.985103][T21816] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 1050.998929][T21816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.998947][T21816] usb 3-1: Product: syz [ 1050.998960][T21816] usb 3-1: Manufacturer: syz [ 1050.998973][T21816] usb 3-1: SerialNumber: syz [ 1051.302847][T22633] nfs: Unknown parameter 'debug' [ 1051.499329][T22636] usb 10-1: USB disconnect, device number 108 [ 1051.681903][T21816] rtl8150 3-1:1.0: couldn't reset the device [ 1051.682202][T21816] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1051.720486][T21816] usb 3-1: USB disconnect, device number 93 [ 1051.906021][T21571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.139694][T21571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.416915][T22657] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1052.429197][T22654] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1052.429236][T22654] overlayfs: failed to set xattr on upper [ 1052.429244][T22654] overlayfs: ...falling back to redirect_dir=nofollow. [ 1052.429251][T22654] overlayfs: ...falling back to index=off. [ 1052.429259][T22654] overlayfs: ...falling back to uuid=null. [ 1052.785421][T22595] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1052.818853][T21571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.931458][T22595] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1052.932562][T22595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.935496][T22595] usb 3-1: config 0 descriptor?? [ 1053.130683][ C0] net_ratelimit: 357 callbacks suppressed [ 1053.165345][T22595] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1053.286033][T21571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.477709][T22595] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1053.477728][T22595] [drm] Initialized udl on minor 1 [ 1053.622322][ T8981] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1053.778729][ T8981] usb 2-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 1053.780085][ T8981] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1053.780108][ T8981] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1053.780130][ T8981] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1053.780186][ T8981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.840549][T22665] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1053.918122][T17849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1053.945580][T17849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1053.966577][T17849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1053.970120][T17849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1053.983098][T17849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1054.176911][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.176979][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.315871][T21571] bridge_slave_1: left allmulticast mode [ 1054.315889][T21571] bridge_slave_1: left promiscuous mode [ 1054.316117][T21571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.356473][T21571] bridge_slave_0: left allmulticast mode [ 1054.356491][T21571] bridge_slave_0: left promiscuous mode [ 1054.357886][T21571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.381672][ T33] kauditd_printk_skb: 89 callbacks suppressed [ 1054.381688][ T33] audit: type=1800 audit(5371731173.950:6953): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=333731 res=0 errno=0 [ 1054.501882][ T33] audit: type=1800 audit(5371731174.070:6954): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1054.692064][ T8981] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1054.704671][ T8981] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input77 [ 1054.722884][ T33] audit: type=1800 audit(5371731174.290:6955): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=333815 res=0 errno=0 [ 1054.825007][ T33] audit: type=1800 audit(5371731174.390:6956): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=333831 res=0 errno=0 [ 1054.857202][ T33] audit: type=1800 audit(5371731174.420:6957): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=333834 res=0 errno=0 [ 1054.936185][ T33] audit: type=1800 audit(5371731174.500:6958): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=333833 res=0 errno=0 [ 1054.939379][ T33] audit: type=1800 audit(5371731174.500:6959): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=333832 res=0 errno=0 [ 1054.982816][ T33] audit: type=1800 audit(5371731174.540:6960): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=333823 res=0 errno=0 [ 1054.982863][ T33] audit: type=1800 audit(5371731174.540:6961): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=333826 res=0 errno=0 [ 1055.044729][ T33] audit: type=1800 audit(5371731174.610:6962): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=333496 res=0 errno=0 [ 1055.080784][ T5617] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1055.230934][ T5617] usb 10-1: Using ep0 maxpacket: 16 [ 1055.241055][ T5617] usb 10-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1055.250531][ T5617] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1055.250852][ T5617] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1055.262282][ T5617] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.262300][ T5617] usb 10-1: Product: syz [ 1055.262313][ T5617] usb 10-1: Manufacturer: syz [ 1055.262326][ T5617] usb 10-1: SerialNumber: syz [ 1055.294751][ T5617] usb 10-1: config 0 descriptor?? [ 1055.488781][ T5617] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1055.488795][ T5617] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1056.024073][ T5617] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1056.027805][ T5617] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1056.121223][T17849] Bluetooth: hci6: command tx timeout [ 1056.466628][T22636] usb 2-1: USB disconnect, device number 49 [ 1056.472098][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1056.747982][ T5617] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1056.748768][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1056.750156][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1056.750841][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1056.751582][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1056.752182][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1056.831004][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1056.910358][T21571] hsr_slave_0: left promiscuous mode [ 1056.912867][T21571] hsr_slave_1: left promiscuous mode [ 1056.919364][T21571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.930423][T21571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.934026][T21571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.934041][T21571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.981497][T21571] veth1_macvtap: left promiscuous mode [ 1056.981534][T21571] veth0_macvtap: left promiscuous mode [ 1057.034732][T22636] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1057.210681][T22636] usb 2-1: Using ep0 maxpacket: 32 [ 1057.235920][T22636] usb 2-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1057.239355][T22636] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1057.239380][T22636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1057.239401][T22636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1057.239446][T22636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1057.239467][T22636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1057.312841][T22636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.312860][T22636] usb 2-1: Product: syz [ 1057.312874][T22636] usb 2-1: Manufacturer: syz [ 1057.312887][T22636] usb 2-1: SerialNumber: syz [ 1057.316677][T22636] usb 2-1: config 0 descriptor?? [ 1057.630056][T21571] team0 (unregistering): Port device team_slave_1 removed [ 1057.665503][T21571] team0 (unregistering): Port device team_slave_0 removed [ 1057.725609][T22636] input input78: Device does not respond to id packet M [ 1057.929654][T22707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.955390][T22707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.956502][T22707] loop8: detected capacity change from 0 to 7 [ 1057.958855][T22707] Dev loop8: unable to read RDB block 7 [ 1057.958891][T22707] loop8: unable to read partition table [ 1057.959124][T22707] loop8: partition table beyond EOD, truncated [ 1057.959141][T22707] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1058.010852][T22636] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1058.010890][T22636] input input78: Device does not respond to id packet P [ 1058.011404][T22636] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1058.011444][T22636] input input78: Device does not respond to id packet B [ 1058.012077][T22636] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1058.012199][T22636] input input78: Device does not respond to id packet N [ 1058.013690][T22636] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1058.014302][T22636] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1058.014909][T22636] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1058.015643][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1058.015660][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1058.015673][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1058.015685][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1058.015698][ T5617] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1058.016692][T22636] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1058.125066][T22636] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input78 [ 1058.170639][ C0] net_ratelimit: 513 callbacks suppressed [ 1058.171018][T17849] Bluetooth: hci6: command tx timeout [ 1058.195458][T22636] usb 2-1: USB disconnect, device number 50 [ 1058.278677][ T5729] usb 10-1: USB disconnect, device number 109 [ 1058.480068][T22709] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3627'. [ 1058.491508][T22595] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1058.491971][T22595] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1058.558248][T22636] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1058.568804][T22636] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1058.569004][T22636] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1058.578775][ T5729] usb 3-1: USB disconnect, device number 94 [ 1058.876140][T22717] FAULT_INJECTION: forcing a failure. [ 1058.876140][T22717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.876165][T22717] CPU: 1 UID: 0 PID: 22717 Comm: syz.2.3629 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1058.876190][T22717] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1058.876197][T22717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1058.876208][T22717] Call Trace: [ 1058.876216][T22717] [ 1058.876225][T22717] dump_stack_lvl+0xe8/0x150 [ 1058.876252][T22717] should_fail_ex+0x3eb/0x540 [ 1058.876284][T22717] _copy_from_iter+0x1d3/0x1660 [ 1058.876324][T22717] ? __pfx__copy_from_iter+0x10/0x10 [ 1058.876359][T22717] ? __kasan_kmalloc+0x93/0xb0 [ 1058.876383][T22717] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1058.876403][T22717] ? __kmalloc_cache_noprof+0x148/0x600 [ 1058.876420][T22717] ? configfs_write_iter+0xef/0x430 [ 1058.876442][T22717] ? configfs_write_iter+0xef/0x430 [ 1058.876471][T22717] configfs_write_iter+0x12c/0x430 [ 1058.876498][T22717] vfs_write+0x612/0xba0 [ 1058.876528][T22717] ? __pfx_vfs_write+0x10/0x10 [ 1058.876552][T22717] ? __fget_files+0x3a2/0x420 [ 1058.876570][T22717] ? __fget_files+0x2a/0x420 [ 1058.876593][T22717] ? fdget+0x1ac/0x250 [ 1058.876616][T22717] ksys_write+0x150/0x270 [ 1058.876639][T22717] ? __pfx_ksys_write+0x10/0x10 [ 1058.876671][T22717] do_syscall_64+0x166/0x520 [ 1058.876688][T22717] ? trace_irq_disable+0x3b/0x140 [ 1058.876708][T22717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.876727][T22717] ? clear_bhb_loop+0x70/0xc0 [ 1058.876750][T22717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.876767][T22717] RIP: 0033:0x7f0abe79e159 [ 1058.876784][T22717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.876800][T22717] RSP: 002b:00007f0abf581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1058.876820][T22717] RAX: ffffffffffffffda RBX: 00007f0abea25fa0 RCX: 00007f0abe79e159 [ 1058.876834][T22717] RDX: 00000000000000e1 RSI: 0000200000000200 RDI: 0000000000000003 [ 1058.876845][T22717] RBP: 00007f0abf581090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.876856][T22717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.876868][T22717] R13: 00007f0abea26038 R14: 00007f0abea25fa0 R15: 00007ffcdf614008 [ 1058.876900][T22717] [ 1059.157082][ T5617] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1059.321979][ T5617] usb 2-1: Using ep0 maxpacket: 16 [ 1059.326453][ T5617] usb 2-1: New USB device found: idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1059.328578][ T5617] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 1059.328599][ T5617] usb 2-1: config 127 has no interface number 0 [ 1059.328625][ T5617] usb 2-1: config 127 interface 124 has no altsetting 0 [ 1059.347634][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.347651][ T5617] usb 2-1: Product: syz [ 1059.347664][ T5617] usb 2-1: Manufacturer: syz [ 1059.347678][ T5617] usb 2-1: SerialNumber: syz [ 1059.402656][ T33] kauditd_printk_skb: 31 callbacks suppressed [ 1059.402671][ T33] audit: type=1800 audit(5371731178.930:6994): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334951 res=0 errno=0 [ 1059.402732][ T33] audit: type=1800 audit(5371731178.950:6995): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=334983 res=0 errno=0 [ 1059.402767][ T33] audit: type=1800 audit(5371731178.950:6996): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=334958 res=0 errno=0 [ 1059.403743][ T33] audit: type=1800 audit(5371731178.970:6997): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=334959 res=0 errno=0 [ 1059.450850][ T5729] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1059.590386][T22732] sda1: Can't mount, would change RO state [ 1059.603027][ T5729] usb 10-1: New USB device found: idVendor=0781, idProduct=0005, bcdDevice=0.05 [ 1059.609108][ T5729] usb 10-1: config 2 has an invalid interface number: 43 but max is 0 [ 1059.609128][ T5729] usb 10-1: config 2 has no interface number 0 [ 1059.609165][ T5729] usb 10-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1059.650664][ T5729] usb 10-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1059.650688][ T5729] usb 10-1: config 2 interface 43 has no altsetting 0 [ 1059.676186][ T5729] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.676196][ T5729] usb 10-1: Product: syz [ 1059.676204][ T5729] usb 10-1: Manufacturer: syz [ 1059.676211][ T5729] usb 10-1: SerialNumber: syz [ 1059.700103][T22719] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1059.707924][T22719] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1059.715708][ T33] audit: type=1800 audit(5371731179.280:6998): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335241 res=0 errno=0 [ 1059.741455][ T33] audit: type=1800 audit(5371731179.290:6999): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=335273 res=0 errno=0 [ 1059.762700][ T33] audit: type=1800 audit(5371731179.310:7000): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=335248 res=0 errno=0 [ 1059.762740][ T33] audit: type=1800 audit(5371731179.330:7001): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=335249 res=0 errno=0 [ 1059.922639][T22719] misc userio: The device must be registered before sending interrupts [ 1059.989946][ T5729] ums-usbat 10-1:2.43: USB Mass Storage device detected [ 1060.039086][ T33] audit: type=1800 audit(5371731179.600:7002): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335641 res=0 errno=0 [ 1060.075277][ T5729] ums-usbat 10-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 1060.260650][T17849] Bluetooth: hci6: command tx timeout [ 1060.301991][ T5617] usb 2-1: reset high-speed USB device number 51 using dummy_hcd [ 1060.306690][ T5729] ums-usbat 10-1:2.43: probe with driver ums-usbat failed with error -5 [ 1060.333268][ T33] audit: type=1800 audit(5371731179.900:7003): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=335270 res=0 errno=0 [ 1060.372051][ T5729] usb 10-1: USB disconnect, device number 110 [ 1060.470011][ T5617] usb 2-1: device firmware changed [ 1060.507494][ T5617] usb 2-1: USB disconnect, device number 51 [ 1060.549270][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1060.740692][ T5617] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1060.772569][T22595] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1060.890906][ T5617] usb 2-1: Using ep0 maxpacket: 16 [ 1060.892831][ T5617] usb 2-1: New USB device found: idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1060.893952][ T5617] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 1060.893977][ T5617] usb 2-1: config 127 has no interface number 0 [ 1060.894004][ T5617] usb 2-1: config 127 interface 124 has no altsetting 0 [ 1060.897010][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.897028][ T5617] usb 2-1: Product: syz [ 1060.897041][ T5617] usb 2-1: Manufacturer: syz [ 1060.897054][ T5617] usb 2-1: SerialNumber: syz [ 1060.973585][T22595] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1060.973627][T22595] usb 3-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 1060.978299][T22595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.978316][T22595] usb 3-1: Product: syz [ 1060.978328][T22595] usb 3-1: Manufacturer: syz [ 1060.978339][T22595] usb 3-1: SerialNumber: syz [ 1061.282761][T22595] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1061.283833][T22595] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1061.368699][T22753] Bluetooth: (null): Invalid header checksum [ 1061.375800][T22595] usb 3-1: USB disconnect, device number 95 [ 1061.513973][T12487] udevd[12487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.754970][T22668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.755300][T22668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.755507][T22668] bridge_slave_0: entered allmulticast mode [ 1061.764052][T22668] bridge_slave_0: entered promiscuous mode [ 1061.773105][T22668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.774519][T22668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.774693][T22668] bridge_slave_1: entered allmulticast mode [ 1061.789094][T22668] bridge_slave_1: entered promiscuous mode [ 1062.004457][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1062.016719][T22668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.025807][T22668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.155828][T22776] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3636'. [ 1062.209439][T22668] team0: Port device team_slave_0 added [ 1062.309082][T22668] team0: Port device team_slave_1 added [ 1062.329311][ T5617] usb 2-1: USB disconnect, device number 52 [ 1062.330764][T17849] Bluetooth: hci6: command tx timeout [ 1062.412936][T14149] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1062.561718][T14149] usb 3-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 1062.562930][T14149] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1062.562949][T14149] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1062.564137][T14149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1062.564155][T14149] usb 3-1: SerialNumber: syz [ 1062.639531][T22668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.639542][T22668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.639563][T22668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.655938][T22668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.655947][T22668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.655969][T22668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.883747][ T5617] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1062.903468][ T5617] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1063.132566][T22668] hsr_slave_0: entered promiscuous mode [ 1063.134233][T22668] hsr_slave_1: entered promiscuous mode [ 1063.135047][T22668] debugfs: 'hsr0' already exists in 'hsr' [ 1063.135063][T22668] Cannot create hsr debugfs directory [ 1063.221889][ T5729] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1063.379589][T22793] netlink: 'syz.9.3638': attribute type 2 has an invalid length. [ 1063.379603][T22793] netlink: 'syz.9.3638': attribute type 7 has an invalid length. [ 1063.390692][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 1063.393136][ T5729] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.13 [ 1063.394784][ T5729] usb 2-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 1063.394823][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1063.394898][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.406164][ T5729] usb 2-1: config 0 descriptor?? [ 1063.450860][ C0] net_ratelimit: 433 callbacks suppressed [ 1063.468575][ T5729] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1063.498328][T22793] : entered promiscuous mode [ 1063.598816][T22797] netlink: 'syz.9.3638': attribute type 2 has an invalid length. [ 1063.598832][T22797] netlink: 'syz.9.3638': attribute type 7 has an invalid length. [ 1064.016118][T14149] usb 3-1: 0:2 : does not exist [ 1064.016192][T14149] usb 3-1: unit 5: unexpected type 0x09 [ 1064.160705][T22810] netlink: 'syz.9.3640': attribute type 4 has an invalid length. [ 1064.220416][T22811] netlink: 'syz.9.3640': attribute type 4 has an invalid length. [ 1064.230466][T14149] usb 3-1: USB disconnect, device number 96 [ 1064.378382][T12485] udevd[12485]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.424473][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1064.664774][ T33] kauditd_printk_skb: 47 callbacks suppressed [ 1064.664789][ T33] audit: type=1800 audit(5371731184.230:7051): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1064.803927][T22819] misc userio: Can't change port extra on an already running userio instance [ 1064.808754][T22815] FAULT_INJECTION: forcing a failure. [ 1064.808754][T22815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.808783][T22815] CPU: 0 UID: 0 PID: 22815 Comm: syz.1.3637 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1064.808810][T22815] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1064.808818][T22815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1064.808830][T22815] Call Trace: [ 1064.808837][T22815] [ 1064.808846][T22815] dump_stack_lvl+0xe8/0x150 [ 1064.808875][T22815] should_fail_ex+0x3eb/0x540 [ 1064.808907][T22815] _copy_from_user+0x2d/0xb0 [ 1064.808930][T22815] msr_io+0xab/0x8b0 [ 1064.808954][T22815] ? lock_acquire+0x115/0x350 [ 1064.808975][T22815] ? __pfx_do_set_msr+0x10/0x10 [ 1064.808997][T22815] ? __pfx_msr_io+0x10/0x10 [ 1064.809021][T22815] ? __srcu_check_read_flavor+0x13d/0x2e0 [ 1064.809046][T22815] ? kvm_set_msrs+0x68/0x100 [ 1064.809063][T22815] kvm_set_msrs+0x9c/0x100 [ 1064.809085][T22815] kvm_arch_vcpu_ioctl+0x712/0x23b0 [ 1064.809108][T22815] ? lock_acquire+0x115/0x350 [ 1064.809127][T22815] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1064.809150][T22815] ? lock_acquire+0x115/0x350 [ 1064.809178][T22815] ? is_bpf_text_address+0x26/0x2b0 [ 1064.809210][T22815] ? is_bpf_text_address+0x292/0x2b0 [ 1064.809234][T22815] ? is_bpf_text_address+0x26/0x2b0 [ 1064.809262][T22815] ? kernel_text_address+0xa5/0xe0 [ 1064.809285][T22815] ? __kernel_text_address+0xd/0x30 [ 1064.809304][T22815] ? unwind_get_return_address+0x4d/0x90 [ 1064.809324][T22815] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1064.809344][T22815] ? arch_stack_walk+0xfb/0x150 [ 1064.809375][T22815] ? stack_trace_save+0xa9/0x100 [ 1064.809394][T22815] ? __pfx_stack_trace_save+0x10/0x10 [ 1064.809412][T22815] ? kasan_save_track+0x4f/0x80 [ 1064.809445][T22815] ? stack_depot_save_flags+0x33/0x7f0 [ 1064.809468][T22815] ? __lock_acquire+0x747/0x2de0 [ 1064.809491][T22815] ? kfree+0x1c5/0x650 [ 1064.809525][T22815] ? __se_sys_ioctl+0x47/0x170 [ 1064.809548][T22815] ? do_syscall_64+0x166/0x520 [ 1064.809564][T22815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.809602][T22815] ? __mutex_trylock_common+0x15f/0x270 [ 1064.809630][T22815] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1064.809655][T22815] ? rcu_is_watching+0x16/0xb0 [ 1064.809679][T22815] ? trace_contention_end+0x3d/0x140 [ 1064.809705][T22815] ? __mutex_lock+0x305/0x15a0 [ 1064.809727][T22815] ? kasan_quarantine_put+0xbb/0x1f0 [ 1064.809751][T22815] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 1064.809777][T22815] ? __pfx___mutex_lock+0x10/0x10 [ 1064.809794][T22815] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1064.809819][T22815] ? do_vfs_ioctl+0x116f/0x1530 [ 1064.809843][T22815] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1064.809869][T22815] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 1064.809901][T22815] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1064.809925][T22815] ? call_rcu+0x20e/0x300 [ 1064.809966][T22815] ? __fget_files+0x2a/0x420 [ 1064.809987][T22815] ? __fget_files+0x2a/0x420 [ 1064.810005][T22815] ? __fget_files+0x2a/0x420 [ 1064.810028][T22815] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1064.810052][T22815] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1064.810079][T22815] __se_sys_ioctl+0xfc/0x170 [ 1064.810104][T22815] do_syscall_64+0x166/0x520 [ 1064.810122][T22815] ? trace_irq_disable+0x3b/0x140 [ 1064.810144][T22815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.810163][T22815] ? clear_bhb_loop+0x70/0xc0 [ 1064.810185][T22815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.810203][T22815] RIP: 0033:0x7fe5cbf9ddeb [ 1064.810221][T22815] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1064.810237][T22815] RSP: 002b:00007fe5cced53e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1064.810258][T22815] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fe5cbf9ddeb [ 1064.810272][T22815] RDX: 00007fe5cced5440 RSI: 000000004008ae89 RDI: 0000000000000009 [ 1064.810286][T22815] RBP: 0000200000001000 R08: 0000000000000000 R09: 0000000000000000 [ 1064.810298][T22815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001800 [ 1064.810311][T22815] R13: 00007fe5cced5bd0 R14: 000000000000006b R15: 00000000000000c0 [ 1064.810342][T22815] [ 1064.828665][ T33] audit: type=1800 audit(5371731184.390:7052): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=340723 res=0 errno=0 [ 1065.354675][ T33] audit: type=1800 audit(5371731184.920:7053): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1065.497433][ T33] audit: type=1800 audit(5371731185.060:7054): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1065.519888][ T33] audit: type=1800 audit(5371731185.080:7055): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1065.589074][ T33] audit: type=1800 audit(5371731185.150:7056): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3643" name="device_path" dev="configfs" ino=116102 res=0 errno=0 [ 1065.598297][ T33] audit: type=1800 audit(5371731185.160:7057): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3643" name="buffered_io" dev="configfs" ino=115365 res=0 errno=0 [ 1065.746064][T22832] dvmrp0: entered allmulticast mode [ 1065.754957][T22835] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3643'. [ 1065.777034][T22837] FAULT_INJECTION: forcing a failure. [ 1065.777034][T22837] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.777064][T22837] CPU: 0 UID: 0 PID: 22837 Comm: syz.2.3643 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1065.777092][T22837] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1065.777101][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1065.777112][T22837] Call Trace: [ 1065.777121][T22837] [ 1065.777130][T22837] dump_stack_lvl+0xe8/0x150 [ 1065.777159][T22837] should_fail_ex+0x3eb/0x540 [ 1065.777200][T22837] should_failslab+0xa8/0x100 [ 1065.777225][T22837] ? do_getname+0x2e/0x250 [ 1065.777252][T22837] kmem_cache_alloc_noprof+0x9c/0x600 [ 1065.777280][T22837] ? do_futex+0x3e7/0x4e0 [ 1065.777307][T22837] ? do_getname+0x2e/0x250 [ 1065.777347][T22837] do_getname+0x2e/0x250 [ 1065.777372][T22837] ? getname_flags+0x11/0x20 [ 1065.777399][T22837] do_sys_openat2+0xce/0x200 [ 1065.777427][T22837] ? __se_sys_futex+0x3a8/0x450 [ 1065.777454][T22837] ? __pfx_do_sys_openat2+0x10/0x10 [ 1065.777486][T22837] ? rcu_is_watching+0x16/0xb0 [ 1065.777515][T22837] __x64_sys_openat+0x138/0x170 [ 1065.777546][T22837] do_syscall_64+0x166/0x520 [ 1065.777563][T22837] ? trace_irq_disable+0x3b/0x140 [ 1065.777584][T22837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.777604][T22837] ? clear_bhb_loop+0x70/0xc0 [ 1065.777627][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.777646][T22837] RIP: 0033:0x7f0abe79e159 [ 1065.777664][T22837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.777679][T22837] RSP: 002b:00007f0abc9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1065.777700][T22837] RAX: ffffffffffffffda RBX: 00007f0abea26180 RCX: 00007f0abe79e159 [ 1065.777714][T22837] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1065.777727][T22837] RBP: 00007f0abe83506b R08: 0000000000000000 R09: 0000000000000000 [ 1065.777738][T22837] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000000 [ 1065.777750][T22837] R13: 00007f0abea26218 R14: 00007f0abea26180 R15: 00007ffcdf614008 [ 1065.777778][T22837] [ 1065.809259][ T33] audit: type=1800 audit(5371731185.370:7058): pid=22837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3643" name="device_path" dev="configfs" ino=115376 res=0 errno=0 [ 1065.869293][T22829] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3643'. [ 1066.158546][ T33] audit: type=1800 audit(5371731185.720:7059): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1066.421399][ T33] audit: type=1800 audit(5371731185.980:7060): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1066.461742][T14149] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1066.643575][T14149] usb 3-1: New USB device found: idVendor=abcd, idProduct=cdee, bcdDevice=5.b9 [ 1066.647116][T14149] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.647136][T14149] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1066.647190][T14149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.691721][T14149] usb 3-1: config 0 descriptor?? [ 1066.749480][T14149] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1066.884487][T22636] usb 2-1: USB disconnect, device number 53 [ 1067.094911][T14149] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 1067.110187][T14149] usb 3-1: USB disconnect, device number 97 [ 1067.413897][T22668] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1067.434525][T22668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.438753][T22668] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1067.466146][T22668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.467228][T22668] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1067.495428][T22668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.496320][T22668] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1067.525575][T22668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.859332][T22875] overlayfs: failed to resolve './file2': -2 [ 1068.106190][T22668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.223906][T22668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.269456][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.269551][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.318579][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.318703][T10534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.477684][T22881] net_ratelimit: 447 callbacks suppressed [ 1068.491521][T22881] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3651'. [ 1068.959247][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3653'. [ 1068.986087][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3653'. [ 1069.433396][T22636] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1069.581568][T22636] usb 10-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 1069.582730][T22636] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1069.582750][T22636] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1069.587574][T22636] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.587606][T22636] usb 10-1: Product: syz [ 1069.587617][T22636] usb 10-1: Manufacturer: syz [ 1069.587630][T22636] usb 10-1: SerialNumber: syz [ 1070.069665][T22914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.087651][T22668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.114445][T22914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.713340][ T33] kauditd_printk_skb: 20 callbacks suppressed [ 1070.713356][ T33] audit: type=1800 audit(5371731190.280:7081): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1070.755863][T10525] greybus 1-svc: unexpected request 0x7d received (state 0) [ 1070.773173][ T33] audit: type=1800 audit(5371731190.340:7082): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=341384 res=0 errno=0 [ 1070.774053][ T33] audit: type=1800 audit(5371731190.340:7083): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=341385 res=0 errno=0 [ 1070.774773][ T33] audit: type=1800 audit(5371731190.340:7084): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=341364 res=0 errno=0 [ 1070.777225][ T33] audit: type=1800 audit(5371731190.340:7085): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=341386 res=0 errno=0 [ 1070.832374][ T33] audit: type=1800 audit(5371731190.400:7086): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=341407 res=0 errno=0 [ 1070.833485][ T33] audit: type=1800 audit(5371731190.400:7087): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=341431 res=0 errno=0 [ 1070.943552][T22668] veth0_vlan: entered promiscuous mode [ 1070.960882][T14149] usb 10-1: USB disconnect, device number 111 [ 1070.960933][ C1] usb 10-1: failed to resubmit in-urb: -19 [ 1070.961048][ C1] usb 10-1: failed to resubmit in-urb: -19 [ 1070.961158][ C1] usb 10-1: failed to resubmit in-urb: -19 [ 1070.961266][ C1] usb 10-1: failed to resubmit in-urb: -19 [ 1070.961398][ C1] usb 10-1: failed to resubmit arpc in-urb: -19 [ 1070.961505][ C1] usb 10-1: failed to resubmit arpc in-urb: -19 [ 1071.032263][T14149] usb 10-1: failed to send ARPC request 4: -19 [ 1071.032335][T14149] usb 10-1: failed to execute ARPC: -19 [ 1071.032350][T14149] usb 10-1: failed to flush cport 0: -19 [ 1071.032365][T14149] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 1071.032613][T14149] usb 10-1: failed to send ARPC request 2: -19 [ 1071.032679][T14149] usb 10-1: failed to execute ARPC: -19 [ 1071.032692][T14149] usb 10-1: failed to quiesce cport 0: -19 (0) [ 1071.032708][T14149] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 1071.032971][T14149] usb 10-1: failed to send ARPC request 3: -19 [ 1071.033031][T14149] usb 10-1: failed to execute ARPC: -19 [ 1071.033043][T14149] usb 10-1: failed to clear cport 0: -19 [ 1071.033057][T14149] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 1071.041865][T22668] veth1_vlan: entered promiscuous mode [ 1071.181830][ T33] audit: type=1800 audit(5371731190.750:7088): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1071.259546][T22668] veth0_macvtap: entered promiscuous mode [ 1071.309675][T22668] veth1_macvtap: entered promiscuous mode [ 1071.334604][T22668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.361159][T22668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.405328][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.437350][ T33] audit: type=1800 audit(5371731191.000:7089): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=341516 res=0 errno=0 [ 1071.466834][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.471716][ T8090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.487376][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.498487][T22595] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1071.661174][T22595] usb 3-1: Using ep0 maxpacket: 16 [ 1071.668516][T22595] usb 3-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 1071.684294][T22595] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.684318][T22595] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.684339][T22595] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1071.684387][T22595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.745569][T22595] usb 3-1: config 0 descriptor?? [ 1071.776176][ T33] audit: type=1800 audit(5371731191.340:7090): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1071.819669][T10525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.819685][T10525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.908771][T10525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.908784][T10525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.303625][T22978] netlink: 'syz.2.3658': attribute type 13 has an invalid length. [ 1072.359019][T22595] nzxt-smart2 0003:1E71:2009.003E: unknown main item tag 0x1 [ 1072.359051][T22595] nzxt-smart2 0003:1E71:2009.003E: item fetching failed at offset 3/5 [ 1072.377117][T22595] nzxt-smart2 0003:1E71:2009.003E: probe with driver nzxt-smart2 failed with error -22 [ 1072.444750][T22975] syzkaller1: entered promiscuous mode [ 1072.444804][T22975] syzkaller1: entered allmulticast mode [ 1072.453390][ T8981] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1072.655070][ T8981] usb 6-1: Using ep0 maxpacket: 8 [ 1072.669138][ T8981] usb 6-1: New USB device found: idVendor=046d, idProduct=c50c, bcdDevice=0.00 [ 1072.687516][ T8981] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.687541][ T8981] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1072.687563][ T8981] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1072.687613][ T8981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.722280][ T8981] usb 6-1: config 0 descriptor?? [ 1072.863598][ T5617] usb 3-1: USB disconnect, device number 98 [ 1073.010862][T22595] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1073.137863][ T8981] usbhid 6-1:0.0: can't add hid device: -71 [ 1073.137989][ T8981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1073.157267][ T8981] usb 6-1: USB disconnect, device number 97 [ 1073.171435][T22595] usb 10-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1073.172596][T22595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.172618][T22595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.172637][T22595] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1073.172690][T22595] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.176333][T22595] usb 10-1: config 0 descriptor?? [ 1073.671785][T22595] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1073.676621][T23006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1073.690695][ C0] net_ratelimit: 629 callbacks suppressed [ 1073.762008][ T13] Bluetooth: hci8: Frame reassembly failed (-84) [ 1073.770792][T23009] Bluetooth: hci8: Frame reassembly failed (-84) [ 1073.866787][ T8981] usb 10-1: USB disconnect, device number 112 [ 1074.146248][T23016] [U]  [ 1074.209191][T23019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.209835][T23019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.232394][T23019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.234586][T23019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.440928][T22636] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1074.571973][T22636] usb 6-1: device descriptor read/64, error -71 [ 1074.811375][T22636] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1074.951759][T22636] usb 6-1: device descriptor read/64, error -71 [ 1075.062656][T22636] usb usb6-port1: attempt power cycle [ 1075.401429][T22636] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1075.425578][T22636] usb 6-1: device descriptor read/8, error -71 [ 1075.666252][T22636] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1075.690853][T22636] usb 6-1: device descriptor read/8, error -71 [ 1075.770842][T17849] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1075.802842][T22636] usb usb6-port1: unable to enumerate USB device [ 1076.652990][ T33] kauditd_printk_skb: 40 callbacks suppressed [ 1076.653004][ T33] audit: type=1800 audit(5371731196.210:7131): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1076.753242][ T33] audit: type=1800 audit(5371731196.310:7132): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1076.968431][ T33] audit: type=1800 audit(5371731196.530:7133): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342285 res=0 errno=0 [ 1077.053132][ T33] audit: type=1800 audit(5371731196.610:7134): pid=23087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3670" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1077.326975][ T33] audit: type=1800 audit(5371731196.890:7135): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1077.545243][ T33] audit: type=1800 audit(5371731197.110:7136): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 1078.810811][ C0] net_ratelimit: 391 callbacks suppressed [ 1078.811316][ T33] audit: type=1800 audit(5371731198.370:7137): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1079.027734][ T33] audit: type=1800 audit(5371731198.590:7138): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1079.379122][ T33] audit: type=1800 audit(5371731198.940:7139): pid=23105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3673" name="authorized_default" dev="sysfs" ino=26986 res=0 errno=0 [ 1080.702141][ T33] audit: type=1800 audit(5371731200.270:7140): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1081.240428][T23127] syzkaller1: entered promiscuous mode [ 1081.240442][T23127] syzkaller1: entered allmulticast mode [ 1081.535100][T23132] xt_hashlimit: max too large, truncated to 1048576 [ 1082.671162][T23070] syz.9.3668 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1082.671196][T23070] CPU: 0 UID: 0 PID: 23070 Comm: syz.9.3668 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1082.671223][T23070] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1082.671230][T23070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.671241][T23070] Call Trace: [ 1082.671249][T23070] [ 1082.671258][T23070] dump_stack_lvl+0xe8/0x150 [ 1082.671292][T23070] dump_header+0xd3/0x4b0 [ 1082.671318][T23070] oom_kill_process+0x3ab/0x9e0 [ 1082.671343][T23070] out_of_memory+0xfb1/0x13b0 [ 1082.671367][T23070] ? try_charge_memcg+0xc16/0x15f0 [ 1082.671403][T23070] ? __pfx_out_of_memory+0x10/0x10 [ 1082.671421][T23070] ? do_raw_spin_unlock+0xf5/0x200 [ 1082.671458][T23070] try_charge_memcg+0xccc/0x15f0 [ 1082.671501][T23070] ? __pfx_try_charge_memcg+0x10/0x10 [ 1082.671523][T23070] ? lock_acquire+0x115/0x350 [ 1082.671561][T23070] ? charge_memcg+0x47/0x310 [ 1082.671588][T23070] charge_memcg+0x1dd/0x310 [ 1082.671613][T23070] __mem_cgroup_charge+0x25/0x80 [ 1082.671636][T23070] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1082.671657][T23070] ? filemap_get_entry+0xcd/0x3f0 [ 1082.671687][T23070] ? __pfx_filemap_get_entry+0x10/0x10 [ 1082.671709][T23070] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1082.671748][T23070] shmem_get_folio_gfp+0x594/0x1330 [ 1082.671788][T23070] shmem_write_begin+0x16c/0x330 [ 1082.671816][T23070] generic_perform_write+0x2d5/0x8e0 [ 1082.671854][T23070] ? __pfx_generic_perform_write+0x10/0x10 [ 1082.671876][T23070] ? down_write+0x166/0x200 [ 1082.671895][T23070] ? generic_write_checks_count+0x41a/0x520 [ 1082.671924][T23070] ? file_update_time_flags+0x2d5/0x440 [ 1082.671949][T23070] shmem_file_write_iter+0xf8/0x120 [ 1082.671974][T23070] __kernel_write_iter+0x44a/0x8f0 [ 1082.672000][T23070] ? __pfx___kernel_write_iter+0x10/0x10 [ 1082.672019][T23070] ? get_dump_page+0x1e6/0x410 [ 1082.672047][T23070] ? __asan_memset+0x22/0x50 [ 1082.672065][T23070] ? iov_iter_bvec+0xb8/0x180 [ 1082.672087][T23070] dump_user_range+0x715/0xca0 [ 1082.672198][T23070] ? __pfx_dump_user_range+0x10/0x10 [ 1082.672233][T23070] ? __pfx_writenote+0x10/0x10 [ 1082.672259][T23070] ? elf_core_dump+0x28d0/0x3a70 [ 1082.672288][T23070] elf_core_dump+0x346a/0x3a70 [ 1082.672328][T23070] ? __pfx_elf_core_dump+0x10/0x10 [ 1082.672351][T23070] ? kasan_save_track+0x4f/0x80 [ 1082.672370][T23070] ? do_coredump+0x4e39/0x69c0 [ 1082.672391][T23070] ? vfs_coredump+0xb41/0x10f0 [ 1082.672410][T23070] ? get_signal+0x108f/0x12c0 [ 1082.672427][T23070] ? arch_do_signal_or_restart+0xbb/0x860 [ 1082.672449][T23070] ? irqentry_exit+0x2ba/0x910 [ 1082.672465][T23070] ? asm_exc_page_fault+0x26/0x30 [ 1082.672529][T23070] ? lock_acquire+0x115/0x350 [ 1082.672550][T23070] ? 0xffffffffff600000 [ 1082.672581][T23070] do_coredump+0x5e50/0x69c0 [ 1082.672633][T23070] ? __pfx_do_coredump+0x10/0x10 [ 1082.672656][T23070] ? lock_acquire+0x115/0x350 [ 1082.672683][T23070] ? __lock_acquire+0x747/0x2de0 [ 1082.672717][T23070] ? __lock_acquire+0x747/0x2de0 [ 1082.672752][T23070] ? lock_acquire+0x115/0x350 [ 1082.672777][T23070] ? lock_acquire+0x115/0x350 [ 1082.672805][T23070] ? is_bpf_text_address+0x26/0x2b0 [ 1082.672828][T23070] ? is_bpf_text_address+0x292/0x2b0 [ 1082.672845][T23070] ? is_bpf_text_address+0x26/0x2b0 [ 1082.672864][T23070] ? kernel_text_address+0xa5/0xe0 [ 1082.672880][T23070] ? __kernel_text_address+0xd/0x30 [ 1082.672894][T23070] ? unwind_get_return_address+0x4d/0x90 [ 1082.672908][T23070] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1082.672923][T23070] ? arch_stack_walk+0xfb/0x150 [ 1082.672947][T23070] ? stack_trace_save+0xa9/0x100 [ 1082.672962][T23070] ? __pfx_stack_trace_save+0x10/0x10 [ 1082.672975][T23070] ? __lock_acquire+0x747/0x2de0 [ 1082.672993][T23070] ? stack_depot_save_flags+0x33/0x7f0 [ 1082.673013][T23070] ? kasan_save_track+0x4f/0x80 [ 1082.673029][T23070] ? kasan_save_track+0x3e/0x80 [ 1082.673044][T23070] ? __kasan_kmalloc+0x93/0xb0 [ 1082.673060][T23070] ? __kmalloc_noprof+0x366/0x710 [ 1082.673075][T23070] ? security_prepare_creds+0x52/0x360 [ 1082.673093][T23070] ? prepare_creds+0x57d/0x820 [ 1082.673106][T23070] ? vfs_coredump+0x2c8/0x10f0 [ 1082.673123][T23070] ? get_signal+0x108f/0x12c0 [ 1082.673148][T23070] ? arch_do_signal_or_restart+0xbb/0x860 [ 1082.673164][T23070] ? irqentry_exit+0x2ba/0x910 [ 1082.673176][T23070] ? asm_exc_page_fault+0x26/0x30 [ 1082.673206][T23070] ? __lock_acquire+0x747/0x2de0 [ 1082.673228][T23070] ? __lock_acquire+0x747/0x2de0 [ 1082.673277][T23070] ? _raw_spin_unlock_irq+0x23/0x50 [ 1082.673301][T23070] vfs_coredump+0xb41/0x10f0 [ 1082.673331][T23070] ? __pfx_vfs_coredump+0x10/0x10 [ 1082.673376][T23070] ? _raw_spin_unlock_irq+0x23/0x50 [ 1082.673400][T23070] get_signal+0x108f/0x12c0 [ 1082.673437][T23070] arch_do_signal_or_restart+0xbb/0x860 [ 1082.673458][T23070] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1082.673492][T23070] irqentry_exit+0x2ba/0x910 [ 1082.673505][T23070] ? trace_irq_disable+0x3b/0x140 [ 1082.673527][T23070] asm_exc_page_fault+0x26/0x30 [ 1082.673540][T23070] RIP: 0033:0x7fed6ec53bd7 [ 1082.673556][T23070] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1082.673569][T23070] RSP: 002b:00007fed6cfd7120 EFLAGS: 00010202 [ 1082.673582][T23070] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fed6ed9e159 [ 1082.673593][T23070] RDX: 00007fed6cfd7140 RSI: 00007fed6cfd7270 RDI: 000000000000000b [ 1082.673604][T23070] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1082.673613][T23070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1082.673622][T23070] R13: 00007fed6f026128 R14: 00007fed6f026090 R15: 00007ffe5f468768 [ 1082.673648][T23070] [ 1082.695926][T23070] memory: usage 307100kB, limit 307200kB, failcnt 22973 [ 1082.695948][T23070] memory+swap: usage 413960kB, limit 9007199254740988kB, failcnt 0 [ 1082.695961][T23070] kmem: usage 4724kB, limit 9007199254740988kB, failcnt 0 [ 1082.695973][T23070] Memory cgroup stats for /syz9: [ 1082.696155][T23070] cache 308236288 [ 1082.696164][T23070] rss 1363968 [ 1082.696171][T23070] rss_huge 0 [ 1082.696177][T23070] shmem 308236288 [ 1082.696184][T23070] mapped_file 4096 [ 1082.696191][T23070] dirty 0 [ 1082.696197][T23070] writeback 0 [ 1082.696204][T23070] workingset_refault_anon 649 [ 1082.696211][T23070] workingset_refault_file 94 [ 1082.696218][T23070] swap 109424640 [ 1082.696225][T23070] swapcached 139264 [ 1082.696231][T23070] pgpgin 331056 [ 1082.696238][T23070] pgpgout 255462 [ 1082.696244][T23070] pgfault 117441 [ 1082.696250][T23070] pgmajfault 178 [ 1082.696257][T23070] inactive_anon 309047296 [ 1082.696264][T23070] active_anon 557056 [ 1082.696271][T23070] inactive_file 0 [ 1082.696278][T23070] active_file 0 [ 1082.696285][T23070] unevictable 0 [ 1082.696292][T23070] hierarchical_memory_limit 314572800 [ 1082.696299][T23070] hierarchical_memsw_limit 9223372036854771712 [ 1082.696307][T23070] total_cache 308236288 [ 1082.696314][T23070] total_rss 1363968 [ 1082.696320][T23070] total_rss_huge 0 [ 1082.696327][T23070] total_shmem 308236288 [ 1082.696334][T23070] total_mapped_file 4096 [ 1082.696340][T23070] total_dirty 0 [ 1082.696347][T23070] total_writeback 0 [ 1082.696354][T23070] total_workingset_refault_anon 649 [ 1082.696361][T23070] total_workingset_refault_file 94 [ 1082.696373][T23070] total_swap 109424640 [ 1082.696379][T23070] total_swapcached 139264 [ 1082.696385][T23070] total_pgpgin 331056 [ 1082.696392][T23070] total_pgpgout 255462 [ 1082.696399][T23070] total_pgfault 117441 [ 1082.696406][T23070] total_pgmajfault 178 [ 1082.696416][T23070] total_inactive_anon 309047296 [ 1082.696424][T23070] total_active_anon 557056 [ 1082.696431][T23070] total_inactive_file 0 [ 1082.696438][T23070] total_active_file 0 [ 1082.696444][T23070] total_unevictable 0 [ 1082.696452][T23070] anon_cost 10762 [ 1082.696458][T23070] file_cost 0 [ 1082.696466][T23070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3668,pid=23061,uid=0 [ 1082.700960][T23070] Memory cgroup out of memory: Killed process 23061 (syz.9.3668) total-vm:98676kB, anon-rss:1392kB, file-rss:57860kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 1082.791222][T23069] syz.9.3668 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1082.791255][T23069] CPU: 0 UID: 0 PID: 23069 Comm: syz.9.3668 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1082.791281][T23069] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1082.791289][T23069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.791299][T23069] Call Trace: [ 1082.791308][T23069] [ 1082.791315][T23069] dump_stack_lvl+0xe8/0x150 [ 1082.791342][T23069] dump_header+0xd3/0x4b0 [ 1082.791368][T23069] oom_kill_process+0x3ab/0x9e0 [ 1082.791393][T23069] out_of_memory+0xfb1/0x13b0 [ 1082.791411][T23069] ? try_charge_memcg+0xc16/0x15f0 [ 1082.791445][T23069] ? __pfx_out_of_memory+0x10/0x10 [ 1082.791462][T23069] ? do_raw_spin_unlock+0xf5/0x200 [ 1082.791497][T23069] try_charge_memcg+0xccc/0x15f0 [ 1082.791537][T23069] ? __pfx_try_charge_memcg+0x10/0x10 [ 1082.791558][T23069] ? lock_acquire+0x115/0x350 [ 1082.791594][T23069] ? charge_memcg+0x47/0x310 [ 1082.791619][T23069] charge_memcg+0x1dd/0x310 [ 1082.791642][T23069] __mem_cgroup_charge+0x25/0x80 [ 1082.791665][T23069] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1082.791686][T23069] ? filemap_get_entry+0xcd/0x3f0 [ 1082.791715][T23069] ? __pfx_filemap_get_entry+0x10/0x10 [ 1082.791735][T23069] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1082.791771][T23069] shmem_get_folio_gfp+0x594/0x1330 [ 1082.791808][T23069] shmem_write_begin+0x16c/0x330 [ 1082.791834][T23069] generic_perform_write+0x2d5/0x8e0 [ 1082.791870][T23069] ? __pfx_generic_perform_write+0x10/0x10 [ 1082.791892][T23069] ? __mark_inode_dirty+0x4e7/0x13b0 [ 1082.791976][T23069] ? mnt_put_write_access_file+0xc3/0x100 [ 1082.792000][T23069] ? file_update_time_flags+0x3ab/0x440 [ 1082.792027][T23069] shmem_file_write_iter+0xf8/0x120 [ 1082.792051][T23069] __kernel_write_iter+0x44a/0x8f0 [ 1082.792077][T23069] ? __pfx___kernel_write_iter+0x10/0x10 [ 1082.792095][T23069] ? get_dump_page+0x1e6/0x410 [ 1082.792125][T23069] ? __asan_memset+0x22/0x50 [ 1082.792149][T23069] ? iov_iter_bvec+0xb8/0x180 [ 1082.792171][T23069] dump_user_range+0x715/0xca0 [ 1082.792211][T23069] ? __pfx_dump_user_range+0x10/0x10 [ 1082.792246][T23069] ? __pfx_writenote+0x10/0x10 [ 1082.792271][T23069] ? elf_core_dump+0x28d0/0x3a70 [ 1082.792302][T23069] elf_core_dump+0x346a/0x3a70 [ 1082.792345][T23069] ? __pfx_elf_core_dump+0x10/0x10 [ 1082.792366][T23069] ? kasan_save_track+0x4f/0x80 [ 1082.792387][T23069] ? do_coredump+0x4e39/0x69c0 [ 1082.792407][T23069] ? vfs_coredump+0xb41/0x10f0 [ 1082.792429][T23069] ? get_signal+0x108f/0x12c0 [ 1082.792447][T23069] ? arch_do_signal_or_restart+0xbb/0x860 [ 1082.792467][T23069] ? irqentry_exit+0x2ba/0x910 [ 1082.792482][T23069] ? asm_exc_page_fault+0x26/0x30 [ 1082.792543][T23069] ? lock_acquire+0x115/0x350 [ 1082.792562][T23069] ? 0xffffffffff600000 [ 1082.792591][T23069] do_coredump+0x5e50/0x69c0 [ 1082.792636][T23069] ? __pfx_do_coredump+0x10/0x10 [ 1082.792657][T23069] ? lock_acquire+0x115/0x350 [ 1082.792683][T23069] ? __lock_acquire+0x747/0x2de0 [ 1082.792713][T23069] ? __lock_acquire+0x747/0x2de0 [ 1082.792741][T23069] ? lock_acquire+0x115/0x350 [ 1082.792759][T23069] ? lock_acquire+0x115/0x350 [ 1082.792779][T23069] ? is_bpf_text_address+0x26/0x2b0 [ 1082.792801][T23069] ? is_bpf_text_address+0x292/0x2b0 [ 1082.792820][T23069] ? is_bpf_text_address+0x26/0x2b0 [ 1082.792844][T23069] ? kernel_text_address+0xa5/0xe0 [ 1082.792865][T23069] ? __kernel_text_address+0xd/0x30 [ 1082.792884][T23069] ? unwind_get_return_address+0x4d/0x90 [ 1082.792903][T23069] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1082.792923][T23069] ? arch_stack_walk+0xfb/0x150 [ 1082.792953][T23069] ? stack_trace_save+0xa9/0x100 [ 1082.792973][T23069] ? __pfx_stack_trace_save+0x10/0x10 [ 1082.792991][T23069] ? __lock_acquire+0x747/0x2de0 [ 1082.793013][T23069] ? stack_depot_save_flags+0x33/0x7f0 [ 1082.793039][T23069] ? kasan_save_track+0x4f/0x80 [ 1082.793056][T23069] ? kasan_save_track+0x3e/0x80 [ 1082.793074][T23069] ? __kasan_kmalloc+0x93/0xb0 [ 1082.793093][T23069] ? __kmalloc_noprof+0x366/0x710 [ 1082.793110][T23069] ? security_prepare_creds+0x52/0x360 [ 1082.793141][T23069] ? prepare_creds+0x57d/0x820 [ 1082.793160][T23069] ? vfs_coredump+0x2c8/0x10f0 [ 1082.793182][T23069] ? get_signal+0x108f/0x12c0 [ 1082.793200][T23069] ? arch_do_signal_or_restart+0xbb/0x860 [ 1082.793220][T23069] ? irqentry_exit+0x2ba/0x910 [ 1082.793236][T23069] ? asm_exc_page_fault+0x26/0x30 [ 1082.793272][T23069] ? __lock_acquire+0x747/0x2de0 [ 1082.793299][T23069] ? __lock_acquire+0x747/0x2de0 [ 1082.793358][T23069] ? _raw_spin_unlock_irq+0x23/0x50 [ 1082.793387][T23069] vfs_coredump+0xb41/0x10f0 [ 1082.793423][T23069] ? __pfx_vfs_coredump+0x10/0x10 [ 1082.793477][T23069] ? _raw_spin_unlock_irq+0x23/0x50 [ 1082.793504][T23069] get_signal+0x108f/0x12c0 [ 1082.793547][T23069] arch_do_signal_or_restart+0xbb/0x860 [ 1082.793574][T23069] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1082.793618][T23069] irqentry_exit+0x2ba/0x910 [ 1082.793634][T23069] ? trace_irq_disable+0x3b/0x140 [ 1082.793666][T23069] asm_exc_page_fault+0x26/0x30 [ 1082.793684][T23069] RIP: 0033:0x7fed6ec53bd7 [ 1082.793701][T23069] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1082.793715][T23069] RSP: 002b:00007fed6cfd7120 EFLAGS: 00010202 [ 1082.793732][T23069] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fed6ed9e159 [ 1082.793743][T23069] RDX: 00007fed6cfd7140 RSI: 00007fed6cfd7270 RDI: 000000000000000b [ 1082.793756][T23069] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1082.793767][T23069] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1082.793778][T23069] R13: 00007fed6f026128 R14: 00007fed6f026090 R15: 00007ffe5f468768 [ 1082.793809][T23069] [ 1082.822070][T23069] memory: usage 307196kB, limit 307200kB, failcnt 23054 [ 1082.822088][T23069] memory+swap: usage 414212kB, limit 9007199254740988kB, failcnt 0 [ 1082.822101][T23069] kmem: usage 4688kB, limit 9007199254740988kB, failcnt 0 [ 1082.822112][T23069] Memory cgroup stats for /syz9: [ 1082.822277][T23069] cache 308375552 [ 1082.822286][T23069] rss 1294336 [ 1082.822293][T23069] rss_huge 0 [ 1082.822300][T23069] shmem 308375552 [ 1082.822307][T23069] mapped_file 4096 [ 1082.822314][T23069] dirty 0 [ 1082.822321][T23069] writeback 0 [ 1082.822328][T23069] workingset_refault_anon 649 [ 1082.822336][T23069] workingset_refault_file 94 [ 1082.822343][T23069] swap 109584384 [ 1082.822350][T23069] swapcached 135168 [ 1082.822358][T23069] pgpgin 331129 [ 1082.822394][T23069] pgpgout 255502 [ 1082.822402][T23069] pgfault 117441 [ 1082.822408][T23069] pgmajfault 178 [ 1082.822416][T23069] inactive_anon 309211136 [ 1082.822423][T23069] active_anon 557056 [ 1082.822430][T23069] inactive_file 0 [ 1082.822437][T23069] active_file 0 [ 1082.822444][T23069] unevictable 0 [ 1082.822451][T23069] hierarchical_memory_limit 314572800 [ 1082.822459][T23069] hierarchical_memsw_limit 9223372036854771712 [ 1082.822467][T23069] total_cache 308375552 [ 1082.822474][T23069] total_rss 1294336 [ 1082.822481][T23069] total_rss_huge 0 [ 1082.822488][T23069] total_shmem 308375552 [ 1082.822495][T23069] total_mapped_file 4096 [ 1082.822502][T23069] total_dirty 0 [ 1082.822509][T23069] total_writeback 0 [ 1082.822516][T23069] total_workingset_refault_anon 649 [ 1082.822524][T23069] total_workingset_refault_file 94 [ 1082.822531][T23069] total_swap 109584384 [ 1082.822538][T23069] total_swapcached 135168 [ 1082.822545][T23069] total_pgpgin 331129 [ 1082.822552][T23069] total_pgpgout 255502 [ 1082.822559][T23069] total_pgfault 117441 [ 1082.822566][T23069] total_pgmajfault 178 [ 1082.822573][T23069] total_inactive_anon 309211136 [ 1082.822580][T23069] total_active_anon 557056 [ 1082.822587][T23069] total_inactive_file 0 [ 1082.822594][T23069] total_active_file 0 [ 1082.822601][T23069] total_unevictable 0 [ 1082.822608][T23069] anon_cost 13003 [ 1082.822614][T23069] file_cost 0 [ 1082.822622][T23069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3668,pid=23060,uid=0 [ 1082.828300][T23069] Memory cgroup out of memory: Killed process 23060 (syz.9.3668) total-vm:98676kB, anon-rss:1412kB, file-rss:57860kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 1082.867564][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 1082.867580][ T33] audit: type=1800 audit(5371731202.430:7143): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342477 res=0 errno=0 [ 1082.906013][ T33] audit: type=1800 audit(5371731202.470:7144): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342488 res=0 errno=0 [ 1082.964422][ T4927] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1082.980511][ T4927] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1082.985432][ T4927] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1083.017708][ T4927] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1083.020882][ T4927] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1083.155223][ T33] audit: type=1800 audit(5371731202.720:7145): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342518 res=0 errno=0 [ 1083.173245][ T33] audit: type=1800 audit(5371731202.740:7146): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342507 res=0 errno=0 [ 1083.273452][T23063] syz.9.3668 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1083.273478][T23063] CPU: 0 UID: 0 PID: 23063 Comm: syz.9.3668 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1083.273504][T23063] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1083.273511][T23063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1083.273521][T23063] Call Trace: [ 1083.273529][T23063] [ 1083.273545][T23063] dump_stack_lvl+0xe8/0x150 [ 1083.273572][T23063] dump_header+0xd3/0x4b0 [ 1083.273598][T23063] oom_kill_process+0x3ab/0x9e0 [ 1083.273629][T23063] out_of_memory+0xfb1/0x13b0 [ 1083.273647][T23063] ? try_charge_memcg+0xc16/0x15f0 [ 1083.273681][T23063] ? __pfx_out_of_memory+0x10/0x10 [ 1083.273699][T23063] ? do_raw_spin_unlock+0xf5/0x200 [ 1083.273743][T23063] try_charge_memcg+0xccc/0x15f0 [ 1083.273787][T23063] ? __pfx_try_charge_memcg+0x10/0x10 [ 1083.273808][T23063] ? lock_acquire+0x115/0x350 [ 1083.273847][T23063] ? charge_memcg+0x47/0x310 [ 1083.273873][T23063] charge_memcg+0x1dd/0x310 [ 1083.273898][T23063] __mem_cgroup_charge+0x25/0x80 [ 1083.273920][T23063] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1083.273943][T23063] ? filemap_get_entry+0xcd/0x3f0 [ 1083.273972][T23063] ? __pfx_filemap_get_entry+0x10/0x10 [ 1083.273992][T23063] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1083.274028][T23063] shmem_get_folio_gfp+0x594/0x1330 [ 1083.274064][T23063] shmem_write_begin+0x16c/0x330 [ 1083.274091][T23063] generic_perform_write+0x2d5/0x8e0 [ 1083.274126][T23063] ? __pfx_generic_perform_write+0x10/0x10 [ 1083.274149][T23063] ? __mark_inode_dirty+0x4e7/0x13b0 [ 1083.274175][T23063] ? mnt_put_write_access_file+0xc3/0x100 [ 1083.274198][T23063] ? file_update_time_flags+0x3ab/0x440 [ 1083.274223][T23063] shmem_file_write_iter+0xf8/0x120 [ 1083.274247][T23063] __kernel_write_iter+0x44a/0x8f0 [ 1083.274273][T23063] ? __pfx___kernel_write_iter+0x10/0x10 [ 1083.274291][T23063] ? get_dump_page+0x1e6/0x410 [ 1083.274316][T23063] ? __asan_memset+0x22/0x50 [ 1083.274334][T23063] ? iov_iter_bvec+0xb8/0x180 [ 1083.274356][T23063] dump_user_range+0x715/0xca0 [ 1083.274395][T23063] ? __pfx_dump_user_range+0x10/0x10 [ 1083.274431][T23063] ? __pfx_writenote+0x10/0x10 [ 1083.274456][T23063] ? elf_core_dump+0x28d0/0x3a70 [ 1083.274487][T23063] elf_core_dump+0x346a/0x3a70 [ 1083.274528][T23063] ? __pfx_elf_core_dump+0x10/0x10 [ 1083.274559][T23063] ? kasan_save_track+0x4f/0x80 [ 1083.274580][T23063] ? do_coredump+0x4e39/0x69c0 [ 1083.274601][T23063] ? vfs_coredump+0xb41/0x10f0 [ 1083.274622][T23063] ? get_signal+0x108f/0x12c0 [ 1083.274641][T23063] ? arch_do_signal_or_restart+0xbb/0x860 [ 1083.274668][T23063] ? irqentry_exit+0x2ba/0x910 [ 1083.274690][T23063] ? asm_exc_page_fault+0x26/0x30 [ 1083.274763][T23063] ? lock_acquire+0x115/0x350 [ 1083.274782][T23063] ? 0xffffffffff600000 [ 1083.274812][T23063] do_coredump+0x5e50/0x69c0 [ 1083.274867][T23063] ? __pfx_do_coredump+0x10/0x10 [ 1083.274888][T23063] ? lock_acquire+0x115/0x350 [ 1083.274916][T23063] ? __lock_acquire+0x747/0x2de0 [ 1083.274948][T23063] ? __lock_acquire+0x747/0x2de0 [ 1083.274981][T23063] ? lock_acquire+0x115/0x350 [ 1083.275021][T23063] ? lock_acquire+0x115/0x350 [ 1083.275048][T23063] ? is_bpf_text_address+0x26/0x2b0 [ 1083.275082][T23063] ? is_bpf_text_address+0x292/0x2b0 [ 1083.275105][T23063] ? is_bpf_text_address+0x26/0x2b0 [ 1083.275137][T23063] ? kernel_text_address+0xa5/0xe0 [ 1083.275174][T23063] ? __kernel_text_address+0xd/0x30 [ 1083.275197][T23063] ? unwind_get_return_address+0x4d/0x90 [ 1083.275217][T23063] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1083.275236][T23063] ? arch_stack_walk+0xfb/0x150 [ 1083.275296][T23063] ? stack_trace_save+0xa9/0x100 [ 1083.275325][T23063] ? __pfx_stack_trace_save+0x10/0x10 [ 1083.275357][T23063] ? __lock_acquire+0x747/0x2de0 [ 1083.275399][T23063] ? stack_depot_save_flags+0x33/0x7f0 [ 1083.275423][T23063] ? kasan_save_track+0x4f/0x80 [ 1083.275440][T23063] ? kasan_save_track+0x3e/0x80 [ 1083.275457][T23063] ? __kasan_kmalloc+0x93/0xb0 [ 1083.275475][T23063] ? __kmalloc_noprof+0x366/0x710 [ 1083.275492][T23063] ? security_prepare_creds+0x52/0x360 [ 1083.275523][T23063] ? prepare_creds+0x57d/0x820 [ 1083.275540][T23063] ? vfs_coredump+0x2c8/0x10f0 [ 1083.275561][T23063] ? get_signal+0x108f/0x12c0 [ 1083.275595][T23063] ? arch_do_signal_or_restart+0xbb/0x860 [ 1083.275616][T23063] ? irqentry_exit+0x2ba/0x910 [ 1083.275631][T23063] ? asm_exc_page_fault+0x26/0x30 [ 1083.275664][T23063] ? __lock_acquire+0x747/0x2de0 [ 1083.275689][T23063] ? __lock_acquire+0x747/0x2de0 [ 1083.275752][T23063] ? _raw_spin_unlock_irq+0x23/0x50 [ 1083.275790][T23063] vfs_coredump+0xb41/0x10f0 [ 1083.275843][T23063] ? __pfx_vfs_coredump+0x10/0x10 [ 1083.275895][T23063] ? _raw_spin_unlock_irq+0x23/0x50 [ 1083.275927][T23063] get_signal+0x108f/0x12c0 [ 1083.275978][T23063] arch_do_signal_or_restart+0xbb/0x860 [ 1083.276017][T23063] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1083.276059][T23063] irqentry_exit+0x2ba/0x910 [ 1083.276075][T23063] ? trace_irq_disable+0x3b/0x140 [ 1083.276102][T23063] asm_exc_page_fault+0x26/0x30 [ 1083.276119][T23063] RIP: 0033:0x7fed6ec53bd7 [ 1083.276135][T23063] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1083.276150][T23063] RSP: 002b:00007fed6cfd7120 EFLAGS: 00010202 [ 1083.276166][T23063] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fed6ed9e159 [ 1083.276178][T23063] RDX: 00007fed6cfd7140 RSI: 00007fed6cfd7270 RDI: 000000000000000b [ 1083.276190][T23063] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1083.276201][T23063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1083.276211][T23063] R13: 00007fed6f026128 R14: 00007fed6f026090 R15: 00007ffe5f468768 [ 1083.276240][T23063] [ 1083.327157][T23063] memory: usage 307200kB, limit 307200kB, failcnt 23316 [ 1083.327175][T23063] memory+swap: usage 414688kB, limit 9007199254740988kB, failcnt 0 [ 1083.327187][T23063] kmem: usage 4680kB, limit 9007199254740988kB, failcnt 0 [ 1083.327199][T23063] Memory cgroup stats for /syz9: [ 1083.327310][T23063] cache 308502528 [ 1083.327318][T23063] rss 1028096 [ 1083.327325][T23063] rss_huge 0 [ 1083.327331][T23063] shmem 308502528 [ 1083.327338][T23063] mapped_file 4096 [ 1083.327344][T23063] dirty 0 [ 1083.327351][T23063] writeback 0 [ 1083.327357][T23063] workingset_refault_anon 649 [ 1083.327364][T23063] workingset_refault_file 94 [ 1083.327371][T23063] swap 110067712 [ 1083.327377][T23063] swapcached 131072 [ 1083.327384][T23063] pgpgin 331284 [ 1083.327390][T23063] pgpgout 255657 [ 1083.327396][T23063] pgfault 117441 [ 1083.327403][T23063] pgmajfault 178 [ 1083.327409][T23063] inactive_anon 308899840 [ 1083.327416][T23063] active_anon 815104 [ 1083.327423][T23063] inactive_file 0 [ 1083.327429][T23063] active_file 0 [ 1083.327436][T23063] unevictable 0 [ 1083.327442][T23063] hierarchical_memory_limit 314572800 [ 1083.327450][T23063] hierarchical_memsw_limit 9223372036854771712 [ 1083.327457][T23063] total_cache 308502528 [ 1083.327472][T23063] total_rss 1028096 [ 1083.327479][T23063] total_rss_huge 0 [ 1083.327485][T23063] total_shmem 308502528 [ 1083.327492][T23063] total_mapped_file 4096 [ 1083.327498][T23063] total_dirty 0 [ 1083.327505][T23063] total_writeback 0 [ 1083.327511][T23063] total_workingset_refault_anon 649 [ 1083.327518][T23063] total_workingset_refault_file 94 [ 1083.327525][T23063] total_swap 110067712 [ 1083.327532][T23063] total_swapcached 131072 [ 1083.327539][T23063] total_pgpgin 331284 [ 1083.327545][T23063] total_pgpgout 255657 [ 1083.327552][T23063] total_pgfault 117441 [ 1083.327559][T23063] total_pgmajfault 178 [ 1083.327565][T23063] total_inactive_anon 308899840 [ 1083.327573][T23063] total_active_anon 815104 [ 1083.327584][T23063] total_inactive_file 0 [ 1083.327591][T23063] total_active_file 0 [ 1083.327597][T23063] total_unevictable 0 [ 1083.327604][T23063] anon_cost 14251 [ 1083.327610][T23063] file_cost 0 [ 1083.327618][T23063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3668,pid=23070,uid=0 [ 1083.327710][T23063] Memory cgroup out of memory: Killed process 23070 (syz.9.3668) total-vm:98808kB, anon-rss:1428kB, file-rss:57732kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 1083.597673][T23068] syz.9.3668 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1083.597700][T23068] CPU: 0 UID: 0 PID: 23068 Comm: syz.9.3668 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1083.597731][T23068] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1083.597739][T23068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1083.597750][T23068] Call Trace: [ 1083.597758][T23068] [ 1083.597765][T23068] dump_stack_lvl+0xe8/0x150 [ 1083.597808][T23068] dump_header+0xd3/0x4b0 [ 1083.597834][T23068] oom_kill_process+0x3ab/0x9e0 [ 1083.597859][T23068] out_of_memory+0xfb1/0x13b0 [ 1083.597878][T23068] ? try_charge_memcg+0xc16/0x15f0 [ 1083.597913][T23068] ? __pfx_out_of_memory+0x10/0x10 [ 1083.597930][T23068] ? do_raw_spin_unlock+0xf5/0x200 [ 1083.597965][T23068] try_charge_memcg+0xccc/0x15f0 [ 1083.598006][T23068] ? __pfx_try_charge_memcg+0x10/0x10 [ 1083.598026][T23068] ? lock_acquire+0x115/0x350 [ 1083.598063][T23068] ? charge_memcg+0x47/0x310 [ 1083.598089][T23068] charge_memcg+0x1dd/0x310 [ 1083.598114][T23068] __mem_cgroup_charge+0x25/0x80 [ 1083.598136][T23068] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1083.598158][T23068] ? filemap_get_entry+0xcd/0x3f0 [ 1083.598188][T23068] ? __pfx_filemap_get_entry+0x10/0x10 [ 1083.598209][T23068] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1083.598245][T23068] shmem_get_folio_gfp+0x594/0x1330 [ 1083.598282][T23068] shmem_write_begin+0x16c/0x330 [ 1083.598310][T23068] generic_perform_write+0x2d5/0x8e0 [ 1083.598345][T23068] ? __pfx_generic_perform_write+0x10/0x10 [ 1083.598368][T23068] ? __mark_inode_dirty+0x4e7/0x13b0 [ 1083.598393][T23068] ? mnt_put_write_access_file+0xc3/0x100 [ 1083.598416][T23068] ? file_update_time_flags+0x3ab/0x440 [ 1083.598442][T23068] shmem_file_write_iter+0xf8/0x120 [ 1083.598469][T23068] __kernel_write_iter+0x44a/0x8f0 [ 1083.598495][T23068] ? __pfx___kernel_write_iter+0x10/0x10 [ 1083.598512][T23068] ? get_dump_page+0x1e6/0x410 [ 1083.598539][T23068] ? __asan_memset+0x22/0x50 [ 1083.598557][T23068] ? iov_iter_bvec+0xb8/0x180 [ 1083.598579][T23068] dump_user_range+0x715/0xca0 [ 1083.598620][T23068] ? __pfx_dump_user_range+0x10/0x10 [ 1083.598657][T23068] ? __pfx_writenote+0x10/0x10 [ 1083.598682][T23068] ? elf_core_dump+0x28d0/0x3a70 [ 1083.598720][T23068] elf_core_dump+0x346a/0x3a70 [ 1083.598762][T23068] ? __pfx_elf_core_dump+0x10/0x10 [ 1083.598785][T23068] ? kasan_save_track+0x4f/0x80 [ 1083.598805][T23068] ? do_coredump+0x4e39/0x69c0 [ 1083.598827][T23068] ? vfs_coredump+0xb41/0x10f0 [ 1083.598847][T23068] ? get_signal+0x108f/0x12c0 [ 1083.598865][T23068] ? arch_do_signal_or_restart+0xbb/0x860 [ 1083.598886][T23068] ? irqentry_exit+0x2ba/0x910 [ 1083.598903][T23068] ? asm_exc_page_fault+0x26/0x30 [ 1083.598965][T23068] ? lock_acquire+0x115/0x350 [ 1083.598984][T23068] ? 0xffffffffff600000 [ 1083.599014][T23068] do_coredump+0x5e50/0x69c0 [ 1083.599064][T23068] ? __pfx_do_coredump+0x10/0x10 [ 1083.599086][T23068] ? lock_acquire+0x115/0x350 [ 1083.599113][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.599145][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.599179][T23068] ? lock_acquire+0x115/0x350 [ 1083.599205][T23068] ? lock_acquire+0x115/0x350 [ 1083.599233][T23068] ? is_bpf_text_address+0x26/0x2b0 [ 1083.599261][T23068] ? is_bpf_text_address+0x292/0x2b0 [ 1083.599283][T23068] ? is_bpf_text_address+0x26/0x2b0 [ 1083.599310][T23068] ? kernel_text_address+0xa5/0xe0 [ 1083.599331][T23068] ? __kernel_text_address+0xd/0x30 [ 1083.599349][T23068] ? unwind_get_return_address+0x4d/0x90 [ 1083.599367][T23068] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1083.599387][T23068] ? arch_stack_walk+0xfb/0x150 [ 1083.599416][T23068] ? stack_trace_save+0xa9/0x100 [ 1083.599435][T23068] ? __pfx_stack_trace_save+0x10/0x10 [ 1083.599452][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.599473][T23068] ? stack_depot_save_flags+0x33/0x7f0 [ 1083.599498][T23068] ? kasan_save_track+0x4f/0x80 [ 1083.599515][T23068] ? kasan_save_track+0x3e/0x80 [ 1083.599533][T23068] ? __kasan_kmalloc+0x93/0xb0 [ 1083.599551][T23068] ? __kmalloc_noprof+0x366/0x710 [ 1083.599567][T23068] ? security_prepare_creds+0x52/0x360 [ 1083.599588][T23068] ? prepare_creds+0x57d/0x820 [ 1083.599605][T23068] ? vfs_coredump+0x2c8/0x10f0 [ 1083.599627][T23068] ? get_signal+0x108f/0x12c0 [ 1083.599645][T23068] ? arch_do_signal_or_restart+0xbb/0x860 [ 1083.599665][T23068] ? irqentry_exit+0x2ba/0x910 [ 1083.599680][T23068] ? asm_exc_page_fault+0x26/0x30 [ 1083.599719][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.599745][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.599803][T23068] ? _raw_spin_unlock_irq+0x23/0x50 [ 1083.599830][T23068] vfs_coredump+0xb41/0x10f0 [ 1083.599865][T23068] ? __pfx_vfs_coredump+0x10/0x10 [ 1083.599926][T23068] ? _raw_spin_unlock_irq+0x23/0x50 [ 1083.599953][T23068] get_signal+0x108f/0x12c0 [ 1083.599993][T23068] arch_do_signal_or_restart+0xbb/0x860 [ 1083.600019][T23068] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1083.600062][T23068] irqentry_exit+0x2ba/0x910 [ 1083.600077][T23068] ? trace_irq_disable+0x3b/0x140 [ 1083.600104][T23068] asm_exc_page_fault+0x26/0x30 [ 1083.600121][T23068] RIP: 0033:0x7fed6ec53bd7 [ 1083.600138][T23068] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1083.600152][T23068] RSP: 002b:00007fed6cfd7120 EFLAGS: 00010202 [ 1083.600167][T23068] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fed6ed9e159 [ 1083.600179][T23068] RDX: 00007fed6cfd7140 RSI: 00007fed6cfd7270 RDI: 000000000000000b [ 1083.600191][T23068] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1083.600202][T23068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1083.600213][T23068] R13: 00007fed6f026128 R14: 00007fed6f026090 R15: 00007ffe5f468768 [ 1083.600242][T23068] [ 1083.656441][T23068] memory: usage 307200kB, limit 307200kB, failcnt 23558 [ 1083.656459][T23068] memory+swap: usage 414704kB, limit 9007199254740988kB, failcnt 0 [ 1083.656472][T23068] kmem: usage 4648kB, limit 9007199254740988kB, failcnt 0 [ 1083.656483][T23068] Memory cgroup stats for /syz9: [ 1083.656594][T23068] cache 308699136 [ 1083.656603][T23068] rss 1024000 [ 1083.656610][T23068] rss_huge 0 [ 1083.656617][T23068] shmem 308699136 [ 1083.656624][T23068] mapped_file 4096 [ 1083.656630][T23068] dirty 0 [ 1083.656637][T23068] writeback 0 [ 1083.656643][T23068] workingset_refault_anon 649 [ 1083.656651][T23068] workingset_refault_file 94 [ 1083.656659][T23068] swap 110084096 [ 1083.656665][T23068] swapcached 122880 [ 1083.656671][T23068] pgpgin 331341 [ 1083.656678][T23068] pgpgout 255703 [ 1083.656684][T23068] pgfault 117442 [ 1083.656691][T23068] pgmajfault 178 [ 1083.656697][T23068] inactive_anon 303595520 [ 1083.656703][T23068] active_anon 6164480 [ 1083.656710][T23068] inactive_file 0 [ 1083.656716][T23068] active_file 0 [ 1083.656723][T23068] unevictable 0 [ 1083.656730][T23068] hierarchical_memory_limit 314572800 [ 1083.656737][T23068] hierarchical_memsw_limit 9223372036854771712 [ 1083.656745][T23068] total_cache 308699136 [ 1083.656752][T23068] total_rss 1024000 [ 1083.656758][T23068] total_rss_huge 0 [ 1083.656765][T23068] total_shmem 308699136 [ 1083.656772][T23068] total_mapped_file 4096 [ 1083.656778][T23068] total_dirty 0 [ 1083.656786][T23068] total_writeback 0 [ 1083.656791][T23068] total_workingset_refault_anon 649 [ 1083.656798][T23068] total_workingset_refault_file 94 [ 1083.656805][T23068] total_swap 110084096 [ 1083.656812][T23068] total_swapcached 122880 [ 1083.656819][T23068] total_pgpgin 331341 [ 1083.656826][T23068] total_pgpgout 255703 [ 1083.656833][T23068] total_pgfault 117442 [ 1083.656839][T23068] total_pgmajfault 178 [ 1083.656846][T23068] total_inactive_anon 303595520 [ 1083.656853][T23068] total_active_anon 6164480 [ 1083.656860][T23068] total_inactive_file 0 [ 1083.656867][T23068] total_active_file 0 [ 1083.656874][T23068] total_unevictable 0 [ 1083.656880][T23068] anon_cost 18282 [ 1083.656887][T23068] file_cost 0 [ 1083.656894][T23068] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3668,pid=23069,uid=0 [ 1083.656982][T23068] Memory cgroup out of memory: Killed process 23069 (syz.9.3668) total-vm:98808kB, anon-rss:1428kB, file-rss:57732kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 1083.850806][ C0] net_ratelimit: 430 callbacks suppressed [ 1083.884555][T23068] syz.9.3668 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1083.884585][T23068] CPU: 0 UID: 0 PID: 23068 Comm: syz.9.3668 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1083.884609][T23068] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1083.884617][T23068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1083.884628][T23068] Call Trace: [ 1083.884635][T23068] [ 1083.884643][T23068] dump_stack_lvl+0xe8/0x150 [ 1083.884671][T23068] dump_header+0xd3/0x4b0 [ 1083.884697][T23068] oom_kill_process+0x3ab/0x9e0 [ 1083.884721][T23068] out_of_memory+0xfb1/0x13b0 [ 1083.884740][T23068] ? try_charge_memcg+0xc16/0x15f0 [ 1083.884775][T23068] ? __pfx_out_of_memory+0x10/0x10 [ 1083.884792][T23068] ? do_raw_spin_unlock+0xf5/0x200 [ 1083.884826][T23068] try_charge_memcg+0xccc/0x15f0 [ 1083.884870][T23068] ? __pfx_try_charge_memcg+0x10/0x10 [ 1083.884891][T23068] ? lock_acquire+0x115/0x350 [ 1083.884927][T23068] ? charge_memcg+0x47/0x310 [ 1083.884960][T23068] charge_memcg+0x1dd/0x310 [ 1083.884985][T23068] __mem_cgroup_charge+0x25/0x80 [ 1083.885007][T23068] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1083.885029][T23068] ? filemap_get_entry+0xcd/0x3f0 [ 1083.885058][T23068] ? __pfx_filemap_get_entry+0x10/0x10 [ 1083.885079][T23068] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1083.885115][T23068] shmem_get_folio_gfp+0x594/0x1330 [ 1083.885157][T23068] shmem_write_begin+0x16c/0x330 [ 1083.885185][T23068] generic_perform_write+0x2d5/0x8e0 [ 1083.885220][T23068] ? __pfx_generic_perform_write+0x10/0x10 [ 1083.885242][T23068] ? __mark_inode_dirty+0x4e7/0x13b0 [ 1083.885268][T23068] ? mnt_put_write_access_file+0xc3/0x100 [ 1083.885292][T23068] ? file_update_time_flags+0x3ab/0x440 [ 1083.885318][T23068] shmem_file_write_iter+0xf8/0x120 [ 1083.885342][T23068] __kernel_write_iter+0x44a/0x8f0 [ 1083.885368][T23068] ? __pfx___kernel_write_iter+0x10/0x10 [ 1083.885385][T23068] ? get_dump_page+0x1e6/0x410 [ 1083.885412][T23068] ? __asan_memset+0x22/0x50 [ 1083.885429][T23068] ? iov_iter_bvec+0xb8/0x180 [ 1083.885451][T23068] dump_user_range+0x715/0xca0 [ 1083.885490][T23068] ? __pfx_dump_user_range+0x10/0x10 [ 1083.885526][T23068] ? __pfx_writenote+0x10/0x10 [ 1083.885551][T23068] ? elf_core_dump+0x28d0/0x3a70 [ 1083.885583][T23068] elf_core_dump+0x346a/0x3a70 [ 1083.885625][T23068] ? __pfx_elf_core_dump+0x10/0x10 [ 1083.885646][T23068] ? kasan_save_track+0x4f/0x80 [ 1083.885667][T23068] ? do_coredump+0x4e39/0x69c0 [ 1083.885688][T23068] ? vfs_coredump+0xb41/0x10f0 [ 1083.885708][T23068] ? get_signal+0x108f/0x12c0 [ 1083.885726][T23068] ? arch_do_signal_or_restart+0xbb/0x860 [ 1083.885747][T23068] ? irqentry_exit+0x2ba/0x910 [ 1083.885763][T23068] ? asm_exc_page_fault+0x26/0x30 [ 1083.885826][T23068] ? lock_acquire+0x115/0x350 [ 1083.885845][T23068] ? 0xffffffffff600000 [ 1083.885874][T23068] do_coredump+0x5e50/0x69c0 [ 1083.885925][T23068] ? __pfx_do_coredump+0x10/0x10 [ 1083.885947][T23068] ? lock_acquire+0x115/0x350 [ 1083.885973][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.886006][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.886039][T23068] ? lock_acquire+0x115/0x350 [ 1083.886065][T23068] ? lock_acquire+0x115/0x350 [ 1083.886092][T23068] ? is_bpf_text_address+0x26/0x2b0 [ 1083.886121][T23068] ? is_bpf_text_address+0x292/0x2b0 [ 1083.886150][T23068] ? is_bpf_text_address+0x26/0x2b0 [ 1083.886176][T23068] ? kernel_text_address+0xa5/0xe0 [ 1083.886196][T23068] ? __kernel_text_address+0xd/0x30 [ 1083.886215][T23068] ? unwind_get_return_address+0x4d/0x90 [ 1083.886233][T23068] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1083.886253][T23068] ? arch_stack_walk+0xfb/0x150 [ 1083.886283][T23068] ? stack_trace_save+0xa9/0x100 [ 1083.886301][T23068] ? __pfx_stack_trace_save+0x10/0x10 [ 1083.886318][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.886340][T23068] ? stack_depot_save_flags+0x33/0x7f0 [ 1083.886363][T23068] ? kasan_save_track+0x4f/0x80 [ 1083.886381][T23068] ? kasan_save_track+0x3e/0x80 [ 1083.886398][T23068] ? __kasan_kmalloc+0x93/0xb0 [ 1083.886416][T23068] ? __kmalloc_noprof+0x366/0x710 [ 1083.886433][T23068] ? security_prepare_creds+0x52/0x360 [ 1083.886455][T23068] ? prepare_creds+0x57d/0x820 [ 1083.886472][T23068] ? vfs_coredump+0x2c8/0x10f0 [ 1083.886493][T23068] ? get_signal+0x108f/0x12c0 [ 1083.886511][T23068] ? arch_do_signal_or_restart+0xbb/0x860 [ 1083.886531][T23068] ? irqentry_exit+0x2ba/0x910 [ 1083.886546][T23068] ? asm_exc_page_fault+0x26/0x30 [ 1083.886580][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.886605][T23068] ? __lock_acquire+0x747/0x2de0 [ 1083.886662][T23068] ? _raw_spin_unlock_irq+0x23/0x50 [ 1083.886689][T23068] vfs_coredump+0xb41/0x10f0 [ 1083.886724][T23068] ? __pfx_vfs_coredump+0x10/0x10 [ 1083.886782][T23068] ? _raw_spin_unlock_irq+0x23/0x50 [ 1083.886808][T23068] get_signal+0x108f/0x12c0 [ 1083.886850][T23068] arch_do_signal_or_restart+0xbb/0x860 [ 1083.886875][T23068] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1083.886918][T23068] irqentry_exit+0x2ba/0x910 [ 1083.886933][T23068] ? trace_irq_disable+0x3b/0x140 [ 1083.886960][T23068] asm_exc_page_fault+0x26/0x30 [ 1083.886976][T23068] RIP: 0033:0x7fed6ec53bd7 [ 1083.886993][T23068] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1083.887007][T23068] RSP: 002b:00007fed6cfd7120 EFLAGS: 00010202 [ 1083.887023][T23068] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fed6ed9e159 [ 1083.887035][T23068] RDX: 00007fed6cfd7140 RSI: 00007fed6cfd7270 RDI: 000000000000000b [ 1083.887046][T23068] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1083.887058][T23068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1083.887069][T23068] R13: 00007fed6f026128 R14: 00007fed6f026090 R15: 00007ffe5f468768 [ 1083.887099][T23068] [ 1083.944112][T23068] memory: usage 307200kB, limit 307200kB, failcnt 23716 [ 1083.944137][T23068] memory+swap: usage 414704kB, limit 9007199254740988kB, failcnt 0 [ 1083.944150][T23068] kmem: usage 4648kB, limit 9007199254740988kB, failcnt 0 [ 1083.944161][T23068] Memory cgroup stats for /syz9: [ 1083.944277][T23068] cache 308830208 [ 1083.944286][T23068] rss 892928 [ 1083.944292][T23068] rss_huge 0 [ 1083.944299][T23068] shmem 308830208 [ 1083.944305][T23068] mapped_file 4096 [ 1083.944312][T23068] dirty 0 [ 1083.944318][T23068] writeback 0 [ 1083.944325][T23068] workingset_refault_anon 649 [ 1083.944332][T23068] workingset_refault_file 94 [ 1083.944339][T23068] swap 110084096 [ 1083.944345][T23068] swapcached 122880 [ 1083.944352][T23068] pgpgin 331373 [ 1083.944358][T23068] pgpgout 255735 [ 1083.944365][T23068] pgfault 117443 [ 1083.944371][T23068] pgmajfault 178 [ 1083.944378][T23068] inactive_anon 295469056 [ 1083.944384][T23068] active_anon 14290944 [ 1083.944391][T23068] inactive_file 0 [ 1083.944398][T23068] active_file 0 [ 1083.944404][T23068] unevictable 0 [ 1083.944411][T23068] hierarchical_memory_limit 314572800 [ 1083.944418][T23068] hierarchical_memsw_limit 9223372036854771712 [ 1083.944427][T23068] total_cache 308830208 [ 1083.944433][T23068] total_rss 892928 [ 1083.944440][T23068] total_rss_huge 0 [ 1083.944446][T23068] total_shmem 308830208 [ 1083.944453][T23068] total_mapped_file 4096 [ 1083.944459][T23068] total_dirty 0 [ 1083.944466][T23068] total_writeback 0 [ 1083.944472][T23068] total_workingset_refault_anon 649 [ 1083.944480][T23068] total_workingset_refault_file 94 [ 1083.944487][T23068] total_swap 110084096 [ 1083.944493][T23068] total_swapcached 122880 [ 1083.944500][T23068] total_pgpgin 331373 [ 1083.944507][T23068] total_pgpgout 255735 [ 1083.944514][T23068] total_pgfault 117443 [ 1083.944521][T23068] total_pgmajfault 178 [ 1083.944527][T23068] total_inactive_anon 295469056 [ 1083.944534][T23068] total_active_anon 14290944 [ 1083.944541][T23068] total_inactive_file 0 [ 1083.944548][T23068] total_active_file 0 [ 1083.944554][T23068] total_unevictable 0 [ 1083.944560][T23068] anon_cost 9922 [ 1083.944567][T23068] file_cost 0 [ 1083.944574][T23068] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3668,pid=23068,uid=0 [ 1083.947835][T23068] Memory cgroup out of memory: Killed process 23068 (syz.9.3668) total-vm:98808kB, anon-rss:1428kB, file-rss:57732kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 1084.550264][T23063] syz.9.3668 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1084.550298][T23063] CPU: 1 UID: 0 PID: 23063 Comm: syz.9.3668 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1084.550323][T23063] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1084.550331][T23063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.550342][T23063] Call Trace: [ 1084.550349][T23063] [ 1084.550357][T23063] dump_stack_lvl+0xe8/0x150 [ 1084.550386][T23063] dump_header+0xd3/0x4b0 [ 1084.550411][T23063] oom_kill_process+0x3ab/0x9e0 [ 1084.550437][T23063] out_of_memory+0xfb1/0x13b0 [ 1084.550456][T23063] ? try_charge_memcg+0xc16/0x15f0 [ 1084.550491][T23063] ? __pfx_out_of_memory+0x10/0x10 [ 1084.550515][T23063] ? do_raw_spin_unlock+0xf5/0x200 [ 1084.550552][T23063] try_charge_memcg+0xccc/0x15f0 [ 1084.550594][T23063] ? __pfx_try_charge_memcg+0x10/0x10 [ 1084.550614][T23063] ? lock_acquire+0x115/0x350 [ 1084.550651][T23063] ? charge_memcg+0x47/0x310 [ 1084.550676][T23063] charge_memcg+0x1dd/0x310 [ 1084.550702][T23063] __mem_cgroup_charge+0x25/0x80 [ 1084.550724][T23063] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1084.550746][T23063] ? filemap_get_entry+0xcd/0x3f0 [ 1084.550775][T23063] ? __pfx_filemap_get_entry+0x10/0x10 [ 1084.550796][T23063] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1084.550831][T23063] shmem_get_folio_gfp+0x594/0x1330 [ 1084.550868][T23063] shmem_write_begin+0x16c/0x330 [ 1084.550896][T23063] generic_perform_write+0x2d5/0x8e0 [ 1084.550930][T23063] ? __pfx_generic_perform_write+0x10/0x10 [ 1084.550951][T23063] ? down_write+0x166/0x200 [ 1084.550969][T23063] ? generic_write_checks_count+0x41a/0x520 [ 1084.550999][T23063] ? file_update_time_flags+0x2d5/0x440 [ 1084.551025][T23063] shmem_file_write_iter+0xf8/0x120 [ 1084.551049][T23063] __kernel_write_iter+0x44a/0x8f0 [ 1084.551075][T23063] ? __pfx___kernel_write_iter+0x10/0x10 [ 1084.551093][T23063] ? get_dump_page+0x1e6/0x410 [ 1084.551120][T23063] ? __asan_memset+0x22/0x50 [ 1084.551137][T23063] ? iov_iter_bvec+0xb8/0x180 [ 1084.551182][T23063] dump_user_range+0x715/0xca0 [ 1084.551224][T23063] ? __pfx_dump_user_range+0x10/0x10 [ 1084.551260][T23063] ? __pfx_writenote+0x10/0x10 [ 1084.551287][T23063] ? elf_core_dump+0x28d0/0x3a70 [ 1084.551318][T23063] elf_core_dump+0x346a/0x3a70 [ 1084.551361][T23063] ? __pfx_elf_core_dump+0x10/0x10 [ 1084.551383][T23063] ? kasan_save_track+0x4f/0x80 [ 1084.551403][T23063] ? do_coredump+0x4e39/0x69c0 [ 1084.551424][T23063] ? vfs_coredump+0xb41/0x10f0 [ 1084.551445][T23063] ? get_signal+0x108f/0x12c0 [ 1084.551462][T23063] ? arch_do_signal_or_restart+0xbb/0x860 [ 1084.551484][T23063] ? irqentry_exit+0x2ba/0x910 [ 1084.551498][T23063] ? asm_exc_page_fault+0x26/0x30 [ 1084.551568][T23063] ? lock_acquire+0x115/0x350 [ 1084.551587][T23063] ? 0xffffffffff600000 [ 1084.551616][T23063] do_coredump+0x5e50/0x69c0 [ 1084.551666][T23063] ? __pfx_do_coredump+0x10/0x10 [ 1084.551688][T23063] ? lock_acquire+0x115/0x350 [ 1084.551715][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.551747][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.551780][T23063] ? lock_acquire+0x115/0x350 [ 1084.551806][T23063] ? lock_acquire+0x115/0x350 [ 1084.551834][T23063] ? is_bpf_text_address+0x26/0x2b0 [ 1084.551862][T23063] ? is_bpf_text_address+0x292/0x2b0 [ 1084.551885][T23063] ? is_bpf_text_address+0x26/0x2b0 [ 1084.551911][T23063] ? kernel_text_address+0xa5/0xe0 [ 1084.551932][T23063] ? __kernel_text_address+0xd/0x30 [ 1084.551950][T23063] ? unwind_get_return_address+0x4d/0x90 [ 1084.551968][T23063] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1084.551987][T23063] ? arch_stack_walk+0xfb/0x150 [ 1084.552016][T23063] ? stack_trace_save+0xa9/0x100 [ 1084.552035][T23063] ? __pfx_stack_trace_save+0x10/0x10 [ 1084.552052][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.552074][T23063] ? stack_depot_save_flags+0x33/0x7f0 [ 1084.552097][T23063] ? kasan_save_track+0x4f/0x80 [ 1084.552115][T23063] ? kasan_save_track+0x3e/0x80 [ 1084.552132][T23063] ? __kasan_kmalloc+0x93/0xb0 [ 1084.552151][T23063] ? __kmalloc_noprof+0x366/0x710 [ 1084.552166][T23063] ? security_prepare_creds+0x52/0x360 [ 1084.552188][T23063] ? prepare_creds+0x57d/0x820 [ 1084.552205][T23063] ? vfs_coredump+0x2c8/0x10f0 [ 1084.552227][T23063] ? get_signal+0x108f/0x12c0 [ 1084.552244][T23063] ? arch_do_signal_or_restart+0xbb/0x860 [ 1084.552265][T23063] ? irqentry_exit+0x2ba/0x910 [ 1084.552278][T23063] ? asm_exc_page_fault+0x26/0x30 [ 1084.552313][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.552337][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.552387][T23063] ? _raw_spin_unlock_irq+0x23/0x50 [ 1084.552413][T23063] vfs_coredump+0xb41/0x10f0 [ 1084.552447][T23063] ? __pfx_vfs_coredump+0x10/0x10 [ 1084.552506][T23063] ? _raw_spin_unlock_irq+0x23/0x50 [ 1084.552534][T23063] get_signal+0x108f/0x12c0 [ 1084.552574][T23063] arch_do_signal_or_restart+0xbb/0x860 [ 1084.552600][T23063] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1084.552643][T23063] irqentry_exit+0x2ba/0x910 [ 1084.552658][T23063] ? trace_irq_disable+0x3b/0x140 [ 1084.552685][T23063] asm_exc_page_fault+0x26/0x30 [ 1084.552702][T23063] RIP: 0033:0x7fed6ec53bd7 [ 1084.552718][T23063] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1084.552734][T23063] RSP: 002b:00007fed6cfd7120 EFLAGS: 00010202 [ 1084.552750][T23063] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fed6ed9e159 [ 1084.552762][T23063] RDX: 00007fed6cfd7140 RSI: 00007fed6cfd7270 RDI: 000000000000000b [ 1084.552774][T23063] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1084.552785][T23063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1084.552796][T23063] R13: 00007fed6f026128 R14: 00007fed6f026090 R15: 00007ffe5f468768 [ 1084.552826][T23063] [ 1084.573222][T23063] memory: usage 307200kB, limit 307200kB, failcnt 23953 [ 1084.573239][T23063] memory+swap: usage 414736kB, limit 9007199254740988kB, failcnt 0 [ 1084.573251][T23063] kmem: usage 4520kB, limit 9007199254740988kB, failcnt 0 [ 1084.573263][T23063] Memory cgroup stats for /syz9: [ 1084.573382][T23063] cache 309317632 [ 1084.573390][T23063] rss 536576 [ 1084.573396][T23063] rss_huge 0 [ 1084.573403][T23063] shmem 309317632 [ 1084.573409][T23063] mapped_file 0 [ 1084.573416][T23063] dirty 0 [ 1084.573422][T23063] writeback 0 [ 1084.573429][T23063] workingset_refault_anon 649 [ 1084.573436][T23063] workingset_refault_file 94 [ 1084.573443][T23063] swap 110116864 [ 1084.573449][T23063] swapcached 90112 [ 1084.573456][T23063] pgpgin 331503 [ 1084.573462][T23063] pgpgout 255833 [ 1084.573469][T23063] pgfault 117458 [ 1084.573474][T23063] pgmajfault 178 [ 1084.573479][T23063] inactive_anon 281231360 [ 1084.573486][T23063] active_anon 28626944 [ 1084.573492][T23063] inactive_file 0 [ 1084.573497][T23063] active_file 0 [ 1084.573510][T23063] unevictable 0 [ 1084.573516][T23063] hierarchical_memory_limit 314572800 [ 1084.573523][T23063] hierarchical_memsw_limit 9223372036854771712 [ 1084.573531][T23063] total_cache 309317632 [ 1084.573538][T23063] total_rss 536576 [ 1084.573545][T23063] total_rss_huge 0 [ 1084.573552][T23063] total_shmem 309317632 [ 1084.573559][T23063] total_mapped_file 0 [ 1084.573565][T23063] total_dirty 0 [ 1084.573572][T23063] total_writeback 0 [ 1084.573579][T23063] total_workingset_refault_anon 649 [ 1084.573586][T23063] total_workingset_refault_file 94 [ 1084.573593][T23063] total_swap 110116864 [ 1084.573600][T23063] total_swapcached 90112 [ 1084.573607][T23063] total_pgpgin 331503 [ 1084.573613][T23063] total_pgpgout 255833 [ 1084.573620][T23063] total_pgfault 117458 [ 1084.573627][T23063] total_pgmajfault 178 [ 1084.573633][T23063] total_inactive_anon 281231360 [ 1084.573640][T23063] total_active_anon 28626944 [ 1084.573648][T23063] total_inactive_file 0 [ 1084.573655][T23063] total_active_file 0 [ 1084.573661][T23063] total_unevictable 0 [ 1084.573667][T23063] anon_cost 11906 [ 1084.573674][T23063] file_cost 0 [ 1084.573681][T23063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3668,pid=23072,uid=0 [ 1084.573783][T23063] Memory cgroup out of memory: Killed process 23072 (syz.9.3668) total-vm:98808kB, anon-rss:1424kB, file-rss:57732kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 1084.727305][T23063] syz.9.3668 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1084.727335][T23063] CPU: 1 UID: 0 PID: 23063 Comm: syz.9.3668 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1084.727361][T23063] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1084.727368][T23063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.727379][T23063] Call Trace: [ 1084.727387][T23063] [ 1084.727395][T23063] dump_stack_lvl+0xe8/0x150 [ 1084.727422][T23063] dump_header+0xd3/0x4b0 [ 1084.727449][T23063] oom_kill_process+0x3ab/0x9e0 [ 1084.727474][T23063] out_of_memory+0xfb1/0x13b0 [ 1084.727500][T23063] ? try_charge_memcg+0xc16/0x15f0 [ 1084.727535][T23063] ? __pfx_out_of_memory+0x10/0x10 [ 1084.727552][T23063] ? do_raw_spin_unlock+0xf5/0x200 [ 1084.727588][T23063] try_charge_memcg+0xccc/0x15f0 [ 1084.727629][T23063] ? __pfx_try_charge_memcg+0x10/0x10 [ 1084.727650][T23063] ? lock_acquire+0x115/0x350 [ 1084.727686][T23063] ? charge_memcg+0x47/0x310 [ 1084.727712][T23063] charge_memcg+0x1dd/0x310 [ 1084.727737][T23063] __mem_cgroup_charge+0x25/0x80 [ 1084.727759][T23063] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1084.727781][T23063] ? filemap_get_entry+0xcd/0x3f0 [ 1084.727810][T23063] ? __pfx_filemap_get_entry+0x10/0x10 [ 1084.727831][T23063] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1084.727866][T23063] shmem_get_folio_gfp+0x594/0x1330 [ 1084.727903][T23063] shmem_write_begin+0x16c/0x330 [ 1084.727931][T23063] generic_perform_write+0x2d5/0x8e0 [ 1084.727968][T23063] ? __pfx_generic_perform_write+0x10/0x10 [ 1084.727989][T23063] ? down_write+0x166/0x200 [ 1084.728008][T23063] ? generic_write_checks_count+0x41a/0x520 [ 1084.728037][T23063] ? file_update_time_flags+0x2d5/0x440 [ 1084.728062][T23063] shmem_file_write_iter+0xf8/0x120 [ 1084.728087][T23063] __kernel_write_iter+0x44a/0x8f0 [ 1084.728112][T23063] ? __pfx___kernel_write_iter+0x10/0x10 [ 1084.728130][T23063] ? get_dump_page+0x1e6/0x410 [ 1084.728157][T23063] ? __asan_memset+0x22/0x50 [ 1084.728173][T23063] ? iov_iter_bvec+0xb8/0x180 [ 1084.728195][T23063] dump_user_range+0x715/0xca0 [ 1084.728235][T23063] ? __pfx_dump_user_range+0x10/0x10 [ 1084.728270][T23063] ? __pfx_writenote+0x10/0x10 [ 1084.728296][T23063] ? elf_core_dump+0x28d0/0x3a70 [ 1084.728327][T23063] elf_core_dump+0x346a/0x3a70 [ 1084.728369][T23063] ? __pfx_elf_core_dump+0x10/0x10 [ 1084.728392][T23063] ? kasan_save_track+0x4f/0x80 [ 1084.728412][T23063] ? do_coredump+0x4e39/0x69c0 [ 1084.728433][T23063] ? vfs_coredump+0xb41/0x10f0 [ 1084.728454][T23063] ? get_signal+0x108f/0x12c0 [ 1084.728472][T23063] ? arch_do_signal_or_restart+0xbb/0x860 [ 1084.728499][T23063] ? irqentry_exit+0x2ba/0x910 [ 1084.728514][T23063] ? asm_exc_page_fault+0x26/0x30 [ 1084.728575][T23063] ? lock_acquire+0x115/0x350 [ 1084.728595][T23063] ? 0xffffffffff600000 [ 1084.728624][T23063] do_coredump+0x5e50/0x69c0 [ 1084.728672][T23063] ? __pfx_do_coredump+0x10/0x10 [ 1084.728694][T23063] ? lock_acquire+0x115/0x350 [ 1084.728721][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.728753][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.728786][T23063] ? lock_acquire+0x115/0x350 [ 1084.728811][T23063] ? lock_acquire+0x115/0x350 [ 1084.728839][T23063] ? is_bpf_text_address+0x26/0x2b0 [ 1084.728868][T23063] ? is_bpf_text_address+0x292/0x2b0 [ 1084.728891][T23063] ? is_bpf_text_address+0x26/0x2b0 [ 1084.728917][T23063] ? kernel_text_address+0xa5/0xe0 [ 1084.728938][T23063] ? __kernel_text_address+0xd/0x30 [ 1084.728956][T23063] ? unwind_get_return_address+0x4d/0x90 [ 1084.728975][T23063] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1084.728994][T23063] ? arch_stack_walk+0xfb/0x150 [ 1084.729018][T23063] ? stack_trace_save+0xa9/0x100 [ 1084.729032][T23063] ? __pfx_stack_trace_save+0x10/0x10 [ 1084.729046][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.729068][T23063] ? stack_depot_save_flags+0x33/0x7f0 [ 1084.729092][T23063] ? kasan_save_track+0x4f/0x80 [ 1084.729109][T23063] ? kasan_save_track+0x3e/0x80 [ 1084.729126][T23063] ? __kasan_kmalloc+0x93/0xb0 [ 1084.729145][T23063] ? __kmalloc_noprof+0x366/0x710 [ 1084.729161][T23063] ? security_prepare_creds+0x52/0x360 [ 1084.729182][T23063] ? prepare_creds+0x57d/0x820 [ 1084.729201][T23063] ? vfs_coredump+0x2c8/0x10f0 [ 1084.729221][T23063] ? get_signal+0x108f/0x12c0 [ 1084.729238][T23063] ? arch_do_signal_or_restart+0xbb/0x860 [ 1084.729259][T23063] ? irqentry_exit+0x2ba/0x910 [ 1084.729273][T23063] ? asm_exc_page_fault+0x26/0x30 [ 1084.729308][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.729332][T23063] ? __lock_acquire+0x747/0x2de0 [ 1084.729390][T23063] ? _raw_spin_unlock_irq+0x23/0x50 [ 1084.729418][T23063] vfs_coredump+0xb41/0x10f0 [ 1084.729453][T23063] ? __pfx_vfs_coredump+0x10/0x10 [ 1084.729527][T23063] ? _raw_spin_unlock_irq+0x23/0x50 [ 1084.729554][T23063] get_signal+0x108f/0x12c0 [ 1084.729595][T23063] arch_do_signal_or_restart+0xbb/0x860 [ 1084.729620][T23063] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1084.729662][T23063] irqentry_exit+0x2ba/0x910 [ 1084.729678][T23063] ? trace_irq_disable+0x3b/0x140 [ 1084.729704][T23063] asm_exc_page_fault+0x26/0x30 [ 1084.729721][T23063] RIP: 0033:0x7fed6ec53bd7 [ 1084.729737][T23063] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1084.729751][T23063] RSP: 002b:00007fed6cfd7120 EFLAGS: 00010202 [ 1084.729768][T23063] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fed6ed9e159 [ 1084.729780][T23063] RDX: 00007fed6cfd7140 RSI: 00007fed6cfd7270 RDI: 000000000000000b [ 1084.729792][T23063] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1084.729802][T23063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1084.729813][T23063] R13: 00007fed6f026128 R14: 00007fed6f026090 R15: 00007ffe5f468768 [ 1084.729843][T23063] [ 1084.755830][T23063] memory: usage 307200kB, limit 307200kB, failcnt 24029 [ 1084.755844][T23063] memory+swap: usage 414736kB, limit 9007199254740988kB, failcnt 0 [ 1084.755857][T23063] kmem: usage 4496kB, limit 9007199254740988kB, failcnt 0 [ 1084.755867][T23063] Memory cgroup stats for /syz9: [ 1084.755969][T23063] cache 309342208 [ 1084.755977][T23063] rss 536576 [ 1084.755984][T23063] rss_huge 0 [ 1084.755990][T23063] shmem 309342208 [ 1084.755996][T23063] mapped_file 0 [ 1084.756002][T23063] dirty 0 [ 1084.756009][T23063] writeback 0 [ 1084.756015][T23063] workingset_refault_anon 649 [ 1084.756021][T23063] workingset_refault_file 94 [ 1084.756029][T23063] swap 110116864 [ 1084.756035][T23063] swapcached 90112 [ 1084.756042][T23063] pgpgin 331510 [ 1084.756048][T23063] pgpgout 255834 [ 1084.756055][T23063] pgfault 117458 [ 1084.756061][T23063] pgmajfault 178 [ 1084.756068][T23063] inactive_anon 281100288 [ 1084.756075][T23063] active_anon 28811264 [ 1084.756081][T23063] inactive_file 0 [ 1084.756088][T23063] active_file 0 [ 1084.756095][T23063] unevictable 0 [ 1084.756101][T23063] hierarchical_memory_limit 314572800 [ 1084.756108][T23063] hierarchical_memsw_limit 9223372036854771712 [ 1084.756116][T23063] total_cache 309342208 [ 1084.756122][T23063] total_rss 536576 [ 1084.756129][T23063] total_rss_huge 0 [ 1084.756135][T23063] total_shmem 309342208 [ 1084.756142][T23063] total_mapped_file 0 [ 1084.756148][T23063] total_dirty 0 [ 1084.756155][T23063] total_writeback 0 [ 1084.756161][T23063] total_workingset_refault_anon 649 [ 1084.756168][T23063] total_workingset_refault_file 94 [ 1084.756175][T23063] total_swap 110116864 [ 1084.756182][T23063] total_swapcached 90112 [ 1084.756189][T23063] total_pgpgin 331510 [ 1084.756196][T23063] total_pgpgout 255834 [ 1084.756203][T23063] total_pgfault 117458 [ 1084.756209][T23063] total_pgmajfault 178 [ 1084.756216][T23063] total_inactive_anon 281100288 [ 1084.756223][T23063] total_active_anon 28811264 [ 1084.756229][T23063] total_inactive_file 0 [ 1084.756236][T23063] total_active_file 0 [ 1084.756242][T23063] total_unevictable 0 [ 1084.756249][T23063] anon_cost 15835 [ 1084.756255][T23063] file_cost 0 [ 1084.756262][T23063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3668,pid=23065,uid=0 [ 1084.756347][T23063] Memory cgroup out of memory: Killed process 23065 (syz.9.3668) total-vm:98808kB, anon-rss:1428kB, file-rss:57732kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 1085.210993][T17849] Bluetooth: hci8: command tx timeout [ 1087.293456][T17849] Bluetooth: hci8: command tx timeout [ 1088.205903][ T33] audit: type=1800 audit(5371731207.750:7147): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1088.854470][ T33] audit: type=1800 audit(5371731208.420:7148): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1088.890618][ C1] net_ratelimit: 511 callbacks suppressed [ 1089.010115][ T33] audit: type=1800 audit(5371731208.570:7149): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1089.069538][T23162] netlink: 'syz.9.3679': attribute type 10 has an invalid length. [ 1089.187041][T23162] bond0: (slave bond_slave_0): Releasing backup interface [ 1089.376047][T17849] Bluetooth: hci8: command tx timeout [ 1089.424200][ T33] audit: type=1800 audit(5371731208.990:7150): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15598 res=0 errno=0 [ 1089.635984][ T33] audit: type=1800 audit(5371731209.200:7151): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1090.137242][ T33] audit: type=1800 audit(5371731209.700:7152): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1090.543598][ T33] audit: type=1800 audit(5371731210.110:7153): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342686 res=0 errno=0 [ 1090.574911][ T33] audit: type=1800 audit(5371731210.140:7154): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342595 res=0 errno=0 [ 1090.697903][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.830208][T23195] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1090.830235][T23195] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1090.830268][T23195] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1090.959261][ T33] audit: type=1800 audit(5371731210.520:7155): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15229 res=0 errno=0 [ 1091.158120][ T33] audit: type=1800 audit(5371731210.720:7156): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16090 res=0 errno=0 [ 1091.451116][T17849] Bluetooth: hci8: command tx timeout [ 1091.512328][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.512929][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.740684][T21816] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1091.758274][T23195] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1091.837828][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.916642][T21816] usb 3-1: New USB device found: idVendor=0b05, idProduct=1866, bcdDevice=0.00 [ 1091.922015][T21816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 1091.922083][T21816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.937253][T21816] usb 3-1: config 0 descriptor?? [ 1092.094060][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.150637][ T27] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1092.177095][T21816] usbhid 3-1:0.0: can't add hid device: -71 [ 1092.177188][T21816] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1092.202799][T21816] usb 3-1: USB disconnect, device number 99 [ 1092.311340][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.329198][ T27] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1092.329241][ T27] usb 10-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 1092.330495][ T27] usb 10-1: config 114 has an invalid interface number: 240 but max is 0 [ 1092.330515][ T27] usb 10-1: config 114 has no interface number 0 [ 1092.364403][ T27] usb 10-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1092.364431][ T27] usb 10-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1092.364455][ T27] usb 10-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1092.364475][ T27] usb 10-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 1092.364497][ T27] usb 10-1: config 114 interface 240 has no altsetting 0 [ 1092.368359][ T27] usb 10-1: string descriptor 0 read error: -22 [ 1092.368554][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.425333][T23223] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1092.455554][ T27] ir_usb 10-1:114.240: IR Dongle converter detected [ 1092.643672][T23223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.644395][T23223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.685261][ T27] usb 10-1: IRDA class descriptor not found, device not bound [ 1093.253832][ T33] kauditd_printk_skb: 26 callbacks suppressed [ 1093.253846][ T33] audit: type=1800 audit(5371731212.820:7183): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345115 res=0 errno=0 [ 1093.258309][ T33] audit: type=1800 audit(5371731212.820:7184): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=345120 res=0 errno=0 [ 1093.259290][ T33] audit: type=1800 audit(5371731212.820:7185): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=345124 res=0 errno=0 [ 1093.260148][ T33] audit: type=1800 audit(5371731212.820:7186): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=345123 res=0 errno=0 [ 1093.266791][ T33] audit: type=1800 audit(5371731212.830:7187): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=345126 res=0 errno=0 [ 1093.547439][ T33] audit: type=1800 audit(5371731213.110:7188): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345450 res=0 errno=0 [ 1093.554271][ T33] audit: type=1800 audit(5371731213.120:7189): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=345455 res=0 errno=0 [ 1093.556957][ T33] audit: type=1800 audit(5371731213.120:7190): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=345459 res=0 errno=0 [ 1093.558566][ T33] audit: type=1800 audit(5371731213.120:7191): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=345458 res=0 errno=0 [ 1093.561961][ T33] audit: type=1800 audit(5371731213.120:7192): pid=23151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=345461 res=0 errno=0 [ 1093.807509][ T62] bridge_slave_1: left allmulticast mode [ 1093.807546][ T62] bridge_slave_1: left promiscuous mode [ 1093.807772][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.837290][ T62] bridge_slave_0: left allmulticast mode [ 1093.837308][ T62] bridge_slave_0: left promiscuous mode [ 1093.837528][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.879771][T17849] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1093.880079][T17849] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1094.090645][ C0] net_ratelimit: 473 callbacks suppressed [ 1094.479405][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.501321][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.517910][ T62] bond0 (unregistering): Released all slaves [ 1094.660425][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1094.904635][T23139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.904737][T23139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.904939][T23139] bridge_slave_0: entered allmulticast mode [ 1094.911610][T23139] bridge_slave_0: entered promiscuous mode [ 1094.927898][T23139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.929180][T23139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.929365][T23139] bridge_slave_1: entered allmulticast mode [ 1094.936471][T23139] bridge_slave_1: entered promiscuous mode [ 1095.057618][T23255] usb 10-1: USB disconnect, device number 113 [ 1095.226881][T23139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.336406][T23139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.350965][T21816] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1095.487441][T21816] usb 3-1: device descriptor read/64, error -71 [ 1095.520867][T23255] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 1095.646065][T23139] team0: Port device team_slave_0 added [ 1095.658976][T23139] team0: Port device team_slave_1 added [ 1095.673069][T23255] usb 10-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1095.679937][T23255] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1095.679958][T23255] usb 10-1: config 0 has no interface number 0 [ 1095.696218][T23255] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.696236][T23255] usb 10-1: Product: syz [ 1095.696249][T23255] usb 10-1: Manufacturer: syz [ 1095.696262][T23255] usb 10-1: SerialNumber: syz [ 1095.713512][T23255] usb 10-1: config 0 descriptor?? [ 1095.723389][T21816] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1095.816297][ T62] hsr_slave_0: left promiscuous mode [ 1095.820413][ T62] hsr_slave_1: left promiscuous mode [ 1095.824030][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.824047][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.827675][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.827690][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.864231][T21816] usb 3-1: device descriptor read/64, error -71 [ 1095.913022][ T62] veth1_macvtap: left promiscuous mode [ 1095.913083][ T62] veth0_macvtap: left promiscuous mode [ 1095.913181][ T62] veth1_vlan: left promiscuous mode [ 1095.913268][ T62] veth0_vlan: left promiscuous mode [ 1095.919667][T23255] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1095.945046][T23255] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1095.948258][T23255] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1095.948324][T23255] usb 10-1: media controller created [ 1095.978846][T21816] usb usb3-port1: attempt power cycle [ 1096.077738][T23255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1096.134995][T23263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.135623][T23263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.157716][T23263] ================================================================== [ 1096.157728][T ** replaying previous printk message ** [ 1096.157728][T23263] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x1b8/0x320 [ 1096.157796][T23263] Read of size 64 at addr ffffffff9b21b200 by task syz.9.3691/23263 [ 1096.157811][T23263] [ 1096.157824][T23263] CPU: 1 UID: 0 PID: 23263 Comm: syz.9.3691 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1096.157852][T23263] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1096.157861][T23263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1096.157871][T23263] Call Trace: [ 1096.157878][T23263] [ 1096.157885][T23263] dump_stack_lvl+0xe8/0x150 [ 1096.157908][T23263] print_address_description+0x55/0x1e0 [ 1096.157933][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1096.157947][T23263] print_report+0x58/0x70 [ 1096.157967][T23263] kasan_report+0x117/0x150 [ 1096.157988][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1096.158007][T23263] kasan_check_range+0x264/0x2c0 [ 1096.158029][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1096.158045][T23263] __asan_memcpy+0x29/0x70 [ 1096.158064][T23263] usb_copy_descriptors+0x1b8/0x320 [ 1096.158082][T23263] usb_assign_descriptors+0xcf/0x290 [ 1096.158098][T23263] f_audio_bind+0x1b5e/0x34b0 [ 1096.158176][T23274] kcov: kcov_start: t = ffff8880992c1f40, size = 524288, area = ffffc90011b48000 [ 1096.158205][T23263] usb_add_function+0x2e1/0x9f0 [ 1096.158226][T23263] configfs_composite_bind+0xde0/0x1410 [ 1096.158250][T23263] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1096.158270][T23263] gadget_bind_driver+0x2ca/0x9e0 [ 1096.158298][T23263] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1096.158320][T23263] really_probe+0x254/0xae0 [ 1096.158347][T23263] __driver_probe_device+0x1e8/0x360 [ 1096.158371][T23263] driver_probe_device+0x4f/0x240 [ 1096.158393][T23263] __driver_attach+0x339/0x600 [ 1096.158416][T23263] bus_for_each_dev+0x23b/0x2c0 [ 1096.158430][T23263] ? __pfx___driver_attach+0x10/0x10 [ 1096.158451][T23263] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1096.158469][T23263] ? do_raw_spin_unlock+0xf5/0x200 [ 1096.158495][T23263] bus_add_driver+0x345/0x670 [ 1096.158514][T23263] driver_register+0x23a/0x320 [ 1096.158538][T23263] usb_gadget_register_driver_owner+0xf9/0x270 [ 1096.158563][T23263] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1096.158587][T23263] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1096.158609][T23263] configfs_write_iter+0x337/0x430 [ 1096.158633][T23263] vfs_write+0x612/0xba0 [ 1096.158654][T23263] ? __pfx_vfs_write+0x10/0x10 [ 1096.158673][T23263] ? __fget_files+0x3a2/0x420 [ 1096.158691][T23263] ? __fget_files+0x2a/0x420 [ 1096.158706][T23263] ? fdget+0x1ac/0x250 [ 1096.158724][T23263] ksys_write+0x150/0x270 [ 1096.158743][T23263] ? __pfx_ksys_write+0x10/0x10 [ 1096.158764][T23263] do_syscall_64+0x166/0x520 [ 1096.158780][T23263] ? trace_irq_disable+0x3b/0x140 [ 1096.158800][T23263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.158818][T23263] ? clear_bhb_loop+0x70/0xc0 [ 1096.158839][T23263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.158858][T23263] RIP: 0033:0x7fed6ed9e159 [ 1096.158872][T23263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.158887][T23263] RSP: 002b:00007fed6fb9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1096.158905][T23263] RAX: ffffffffffffffda RBX: 00007fed6f025fa0 RCX: 00007fed6ed9e159 [ 1096.158918][T23263] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000005 [ 1096.158930][T23263] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1096.158940][T23263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.158950][T23263] R13: 00007fed6f026038 R14: 00007fed6f025fa0 R15: 00007ffe5f468768 [ 1096.158969][T23263] [ 1096.158975][T23263] [ 1096.158979][T23263] The buggy address belongs to the variable: [ 1096.158985][T23263] ac_header_desc+0x0/0x20 [ 1096.159051][T23263] [ 1096.159055][T23263] The buggy address belongs to the physical page: [ 1096.159064][T23263] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b21b [ 1096.159080][T23263] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1096.159104][T23263] raw: 00fff00000002000 ffffea00006c86c8 ffffea00006c86c8 0000000000000000 [ 1096.159119][T23263] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1096.159128][T23263] page dumped because: kasan: bad access detected [ 1096.159170][T23263] page_owner info is not present (never set?) [ 1096.159179][T23263] [ 1096.159184][T23263] Memory state around the buggy address: [ 1096.159204][T23263] ffffffff9b21b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.159216][T23263] ffffffff9b21b180: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 1096.159228][T23263] >ffffffff9b21b200: 00 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9 [ 1096.159237][T23263] ^ [ 1096.159247][T23263] ffffffff9b21b280: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 00 00 [ 1096.159260][T23263] ffffffff9b21b300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.159270][T23263] ================================================================== [ 1096.159334][T23255] usb 10-1: media_gobj_create id 971: sink pad 'dvr-tsout #100':0 [ 1096.159401][T23255] usb 10-1: media_gobj_create id 972: entity 'dvr-tsout #101' [ 1096.159417][T23255] usb 10-1: media_gobj_create id 973: sink pad 'dvr-tsout #101':0 [ 1096.159469][T23255] usb 10-1: media_gobj_create id 974: entity 'dvr-tsout #102' [ 1096.159486][T23255] usb 10-1: media_gobj_create id 975: sink pad 'dvr-tsout #102':0 [ 1096.159537][T23255] usb 10-1: media_gobj_create id 976: entity 'dvr-tsout #103' [ 1096.159553][T23255] usb 10-1: media_gobj_create id 977: sink pad 'dvr-tsout #103':0 [ 1096.159603][T23255] usb 10-1: media_gobj_create id 978: entity 'dvr-tsout #104' [ 1096.159618][T23255] usb 10-1: media_gobj_create id 979: sink pad 'dvr-tsout #104':0 [ 1096.159668][T23255] usb 10-1: media_gobj_create id 980: entity 'dvr-tsout #105' [ 1096.159684][T23255] usb 10-1: media_gobj_create id 981: sink pad 'dvr-tsout #105':0 [ 1096.159731][T23255] usb 10-1: media_gobj_create id 982: entity 'dvr-tsout #106' [ 1096.159747][T23255] usb 10-1: media_gobj_create id 983: sink pad 'dvr-tsout #106':0 [ 1096.159795][T23255] usb 10-1: media_gobj_create id 984: entity 'dvr-tsout #107' [ 1096.159810][T23255] usb 10-1: media_gobj_create id 985: sink pad 'dvr-tsout #107':0 [ 1096.161910][ T62] hsr0: bond_netdev_event received NETDEV_DOWN [ 1096.161940][ T62] net hsr0: siw: event 2 [ 1096.161980][ T62] IPv6: walker ffffc9000153f1e0 adjusted by delroute [ 1096.162120][ T62] IPv6: walker ffffc9000153f1e0 adjusted by delroute [ 1096.162247][ T62] IPv6: walker ffffc9000153f1e0 adjusted by delroute [ 1096.162260][ T62] IPv6: fixing tree: plen=128 iter=0 [ 1096.162272][ T62] IPv6: W ffffc9000153f1e0 adjusted by delnode 1, s=4/2 [ 1096.162289][ T62] IPv6: fixing tree: plen=127 iter=1 [ 1096.162300][ T62] IPv6: W ffffc9000153f1e0 adjusted by delnode 2, s=2 [ 1096.162314][ T62] IPv6: fixing tree: plen=126 iter=2 [ 1096.162412][ T62] IPv6: walker ffffc9000153f1e0 adjusted by delroute [ 1096.162520][ T62] IPv6: walker ffffc9000153f1e0 adjusted by delroute [ 1096.162847][T23255] usb 10-1: media_gobj_create id 986: entity 'dvr-tsout #108' [ 1096.162866][T23255] usb 10-1: media_gobj_create id 987: sink pad 'dvr-tsout #108':0 [ 1096.162919][T23255] usb 10-1: media_gobj_create id 988: entity 'dvr-tsout #109' [ 1096.162935][T23255] usb 10-1: media_gobj_create id 989: sink pad 'dvr-tsout #109':0 [ 1096.162985][T23255] usb 10-1: media_gobj_create id 990: entity 'dvr-tsout #110' [ 1096.163000][T23255] usb 10-1: media_gobj_create id 991: sink pad 'dvr-tsout #110':0 [ 1096.163049][T23255] usb 10-1: media_gobj_create id 992: entity 'dvr-tsout #111' [ 1096.163065][T23255] usb 10-1: media_gobj_create id 993: sink pad 'dvr-tsout #111':0 [ 1096.163114][T23255] usb 10-1: media_gobj_create id 994: entity 'dvr-tsout #112' [ 1096.163128][T23255] usb 10-1: media_gobj_create id 995: sink pad 'dvr-tsout #112':0 [ 1096.163177][T23255] usb 10-1: media_gobj_create id 996: entity 'dvr-tsout #113' [ 1096.163200][T23255] usb 10-1: media_gobj_create id 997: sink pad 'dvr-tsout #113':0 [ 1096.163249][T23255] usb 10-1: media_gobj_create id 998: entity 'dvr-tsout #114' [ 1096.163265][T23255] usb 10-1: media_gobj_create id 999: sink pad 'dvr-tsout #114':0 [ 1096.163313][T23255] usb 10-1: media_gobj_create id 1000: entity 'dvr-tsout #115' [ 1096.163328][T23255] usb 10-1: media_gobj_create id 1001: sink pad 'dvr-tsout #115':0 [ 1096.163376][T23255] usb 10-1: media_gobj_create id 1002: entity 'dvr-tsout #116' [ 1096.163392][T23255] usb 10-1: media_gobj_create id 1003: sink pad 'dvr-tsout #116':0 [ 1096.163440][T23255] usb 10-1: media_gobj_create id 1004: entity 'dvr-tsout #117' [ 1096.163456][T23255] usb 10-1: media_gobj_create id 1005: sink pad 'dvr-tsout #117':0 [ 1096.163505][T23255] usb 10-1: media_gobj_create id 1006: entity 'dvr-tsout #118' [ 1096.163522][T23255] usb 10-1: media_gobj_create id 1007: sink pad 'dvr-tsout #118':0 [ 1096.163569][T23255] usb 10-1: media_gobj_create id 1008: entity 'dvr-tsout #119' [ 1096.163585][T23255] usb 10-1: media_gobj_create id 1009: sink pad 'dvr-tsout #119':0 [ 1096.163633][T23255] usb 10-1: media_gobj_create id 1010: entity 'dvr-tsout #120' [ 1096.163649][T23255] usb 10-1: media_gobj_create id 1011: sink pad 'dvr-tsout #120':0 [ 1096.163697][T23255] usb 10-1: media_gobj_create id 1012: entity 'dvr-tsout #121' [ 1096.163713][T23255] usb 10-1: media_gobj_create id 1013: sink pad 'dvr-tsout #121':0 [ 1096.163760][T23255] usb 10-1: media_gobj_create id 1014: entity 'dvr-tsout #122' [ 1096.163776][T23255] usb 10-1: media_gobj_create id 1015: sink pad 'dvr-tsout #122':0 [ 1096.163824][T23255] usb 10-1: media_gobj_create id 1016: entity 'dvr-tsout #123' [ 1096.163840][T23255] usb 10-1: media_gobj_create id 1017: sink pad 'dvr-tsout #123':0 [ 1096.163889][T23255] usb 10-1: media_gobj_create id 1018: entity 'dvr-tsout #124' [ 1096.163904][T23255] usb 10-1: media_gobj_create id 1019: sink pad 'dvr-tsout #124':0 [ 1096.163952][T23255] usb 10-1: media_gobj_create id 1020: entity 'dvr-tsout #125' [ 1096.163968][T23255] usb 10-1: media_gobj_create id 1021: sink pad 'dvr-tsout #125':0 [ 1096.164017][T23255] usb 10-1: media_gobj_create id 1022: entity 'dvr-tsout #126' [ 1096.164032][T23255] usb 10-1: media_gobj_create id 1023: sink pad 'dvr-tsout #126':0 [ 1096.164080][T23255] usb 10-1: media_gobj_create id 1024: entity 'dvr-tsout #127' [ 1096.164096][T23255] usb 10-1: media_gobj_create id 1025: sink pad 'dvr-tsout #127':0 [ 1096.169280][ T62] hsr_slave_1: bond_netdev_event received NETDEV_DOWN [ 1096.169308][ T62] net hsr_slave_1: siw: event 2 [ 1096.169355][ T62] IPv6: walker ffffc9000153f1e0 adjusted by delroute [ 1096.169532][ T62] IPv6: walker ffffc9000153f1e0 adjusted by delroute [ 1096.169545][ T62] IPv6: fixing tree: plen=128 iter=0 [ 1096.169557][ T62] IPv6: W ffffc9000153f1e0 adjusted by delnode 1, s=4/2 [ 1096.169573][ T62] IPv6: fixing tree: plen=69 iter=1 [ 1096.169585][ T62] IPv6: W ffffc9000153f1e0 adjusted by delnode 2, s=2 [ 1096.169598][ T62] IPv6: fixing tree: plen=66 iter=2 [ 1096.169707][ T62] IPv6: walker ffffc9000153f1e0 adjusted by delroute [ 1096.169856][T23263] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1097.215852][T23263] CPU: 1 UID: 0 PID: 23263 Comm: syz.9.3691 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1097.226869][T23263] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1097.232657][T23263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1097.242702][T23263] Call Trace: [ 1097.245969][T23263] [ 1097.248891][T23263] vpanic+0x26f/0x710 [ 1097.252868][T23263] panic+0xc5/0xd0 [ 1097.256580][T23263] ? __pfx_panic+0x10/0x10 [ 1097.260996][T23263] ? preempt_schedule_thunk+0x16/0x40 [ 1097.266356][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1097.271717][T23263] ? preempt_schedule_thunk+0x16/0x40 [ 1097.277101][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1097.282464][T23263] check_panic_on_warn+0x89/0xb0 [ 1097.287394][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1097.292751][T23263] end_report+0x73/0x170 [ 1097.296993][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1097.302355][T23263] kasan_report+0x128/0x150 [ 1097.306847][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1097.312209][T23263] kasan_check_range+0x264/0x2c0 [ 1097.317136][T23263] ? usb_copy_descriptors+0x1b8/0x320 [ 1097.322494][T23263] __asan_memcpy+0x29/0x70 [ 1097.326901][T23263] usb_copy_descriptors+0x1b8/0x320 [ 1097.332100][T23263] usb_assign_descriptors+0xcf/0x290 [ 1097.337389][T23263] f_audio_bind+0x1b5e/0x34b0 [ 1097.342063][T23263] usb_add_function+0x2e1/0x9f0 [ 1097.346906][T23263] configfs_composite_bind+0xde0/0x1410 [ 1097.352652][T23263] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1097.358628][T23263] gadget_bind_driver+0x2ca/0x9e0 [ 1097.363654][T23263] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1097.369201][T23263] really_probe+0x254/0xae0 [ 1097.373710][T23263] __driver_probe_device+0x1e8/0x360 [ 1097.378994][T23263] driver_probe_device+0x4f/0x240 [ 1097.384011][T23263] __driver_attach+0x339/0x600 [ 1097.388769][T23263] bus_for_each_dev+0x23b/0x2c0 [ 1097.393612][T23263] ? __pfx___driver_attach+0x10/0x10 [ 1097.398887][T23263] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1097.404276][T23263] ? do_raw_spin_unlock+0xf5/0x200 [ 1097.409403][T23263] bus_add_driver+0x345/0x670 [ 1097.414107][T23263] driver_register+0x23a/0x320 [ 1097.418879][T23263] usb_gadget_register_driver_owner+0xf9/0x270 [ 1097.425025][T23263] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1097.430658][T23263] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1097.436830][T23263] configfs_write_iter+0x337/0x430 [ 1097.441940][T23263] vfs_write+0x612/0xba0 [ 1097.446174][T23263] ? __pfx_vfs_write+0x10/0x10 [ 1097.450924][T23263] ? __fget_files+0x3a2/0x420 [ 1097.455588][T23263] ? __fget_files+0x2a/0x420 [ 1097.460184][T23263] ? fdget+0x1ac/0x250 [ 1097.464246][T23263] ksys_write+0x150/0x270 [ 1097.468566][T23263] ? __pfx_ksys_write+0x10/0x10 [ 1097.473418][T23263] do_syscall_64+0x166/0x520 [ 1097.477997][T23263] ? trace_irq_disable+0x3b/0x140 [ 1097.483009][T23263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.489060][T23263] ? clear_bhb_loop+0x70/0xc0 [ 1097.493726][T23263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.499628][T23263] RIP: 0033:0x7fed6ed9e159 [ 1097.504030][T23263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.523618][T23263] RSP: 002b:00007fed6fb9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1097.532038][T23263] RAX: ffffffffffffffda RBX: 00007fed6f025fa0 RCX: 00007fed6ed9e159 [ 1097.539999][T23263] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000005 [ 1097.547958][T23263] RBP: 00007fed6ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1097.555917][T23263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1097.563883][T23263] R13: 00007fed6f026038 R14: 00007fed6f025fa0 R15: 00007ffe5f468768 [ 1097.571848][T23263] [ 1097.575006][T23263] Kernel Offset: disabled [ 1097.579323][T23263] Rebooting in 86400 seconds..