last executing test programs: 14m23.216480972s ago: executing program 1 (id=1872): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) 14m23.158248871s ago: executing program 1 (id=1873): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x0, 0x3, {0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x9}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)="6725c0958649345fe6e26e376756940151123595f6ebef40c2b58f4458f23a2c9936005ae5c8d697d8d96522afe8f9667e024c632846c4747d880e79980f2e6cb2aa78f6cbb6bb2a82ec297ab76dc5eaf06ba0306c74d07b6ab17413f156dbcdddb4b1b9e4f25f32b627fb7c8df485a150728d29d24296ad5a9d12f041d9f91043e3509f739346880b0d23e1d39fdef5e0e20bb99fb454af6b64214e49e8", 0x9e}, {&(0x7f0000000480)="6b803170b027e7fc6c18e150c916b6b5e5a271629400ca9df100f9bece3318d3146fe24699d6eca77d0e01afe894710cd48c62f95bccf6b6fa95517af3757b787697641cd04ff25692d2d7", 0x4b}, {&(0x7f0000000500)="ed3e77a8752af9a275b852c527aa0729bda498776d4aa13dade50d2f5f5c36c212f2522398a98b", 0x27}, {&(0x7f0000000540)="632556f98e149d3de93a3dbd0447c97ff400bcb0af2e7b4324c7b8cf5f8ec422f9e796a936415df631f6b9f3ad6cbd3accb23db543efb4cbeaff054e74aa608d137ba0f34c670a03b5f7a498126b4838bb7090a95ea9728df4ec0bbe77b5ed0a887d6f76390b77961871d05fd31cade1cefa4d26d6b61ad35fc0fbae55acaaa6d6f92b325dda27ab4641b72e94098e70f1c7c96e5b39a1e85c95014c4212daea4ca409ea1874d6fb", 0xa8}, {&(0x7f0000000600)="666aeb4ccefbef1138b1c83b64d287904557769ee772992659fcb131434a280fc53f2feadc7434", 0x27}, {&(0x7f0000000640)="761e3bff0cd854fe50a6d21435ae325626d3975a662376459277b7e81229cf9208642492070853d07eec2838c3e5c5c7fdb08a3819ab2ddbaf37466050e6293367d0ccd3882560830505c6f5b2c6d75b907dbaf14b9e948a80567d6ba2e81f0de67a02c4eb7408e752db9c8425a4d8b1e157da8b7f864f83d39042fc4ae3f7884eb91c394aee9088522dfdc700c983e48a42a98e4fd2d4950e8ec770ab2d576fa0897ae27c9a1723479935f048925d544269c44c568bb169802f96cf51b099f847cb934b76ae2cff0f7340e505b9204a28175599157af4ac75c902e6c932fd6fbac4488900ac6afc1846eae1eb30ea32c20b", 0xf2}], 0x6, &(0x7f00000007c0)=[{0xd8, 0x114, 0x6, "37f192134f04c7c41aee9b4efdc27d5ad4e5c189bb307d887ce64c13eaf68578480cdbb939ccc9b7760f2f68b7e2d1f803aadb7993744ea229bc2669363973cd59390985179b1307fad16531dcb2cad99eaee0476437a5f6b0755c9898cd69bdff49cff46266759737ff39a842924def49ca8b1379313615459437e8cce481da9ac3d3aafd24281244e27cf4675344710c258ca2577608f2d751d121fe84b078b15fce6771471e3262593187af06546398cd96ba709c6f4883e18266e82dfdd54c090e53c452"}, {0x110, 0x10c, 0x9, "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"}, {0x100, 0x109, 0x5, "0c0a8df567cd4bba1f85cb79809713c5440f2f7af893a20c66455b147969ff3861f0fdadadb00b93623359557083c720e0ea5c778c674a0a10e2c16b628ad0ffcc56aa55d07e126df2e84f0334316b42e94493cfe77b01abca663398b228356559b762eaf25058b16791b23fca2f4de9aebf1689b34c46cc5ec421fb4745869b74b0ec6f24ca60129fcd5876eb7b41d233ab9de4a846a21145a50fd1c4088a926a326753bf49ccbf8b19f5243d53ca59186e048c64648ad32782916924aec3ba9bf3a81e7f0483e1d164a7d7b04bd527ad058f0f271a26b9245797d07287015476b0953e825b56d8237d2628"}], 0x2e8}, 0x4005) ioctl$UI_DEV_CREATE(r4, 0x5501) write$UHID_INPUT(r2, &(0x7f0000001640)={0xfc, {"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", 0x4e1}}, 0x109e) 14m22.52421322s ago: executing program 1 (id=1874): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003b00010327bd"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0xc004) 14m22.480503166s ago: executing program 1 (id=1875): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80004522, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x400040, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0xb]}, 0x8) renameat2(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x4) clock_gettime(0xfffffffffffffffb, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r3, @ANYBLOB="2c626c6b73697a653d30783030303030303030303030a2000000302c626c6b73697a653d307830303026fd14ae75d92afd823ef1303030303030303030303830302c64656661756c745f7065726d697373696f6e732c626c6b73697a653d30ea2d1d6be029288d3030303030313430302c008ff9270f4364ad4285fcd05cbc44afe959702840ccff449b1af47da93f984381cb084bf5dbb74b4ca60f7d76e16b4c0bd666128d8b34dbd8abd06eade07961249d0be4"]) 14m22.323729977s ago: executing program 1 (id=1876): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='attr/current\x00') 14m21.159218437s ago: executing program 1 (id=1880): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 14m20.799210009s ago: executing program 32 (id=1880): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m42.471621173s ago: executing program 3 (id=2692): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000480)={0x5, 0x1, &(0x7f0000000240)=[0x7], &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(r3) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 12m41.303045432s ago: executing program 3 (id=2698): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a4181, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000100)={0x0, 0x70}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x2}, 0x2) 12m41.113280364s ago: executing program 3 (id=2699): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) prctl$PR_SET_SECCOMP(0x4e, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syslog(0x9, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000000080)={0xe1}) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10088, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x7, 0x20000800, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x6, 0x20001801, 0x2000, 0x1, 0x2, 0x0, 0x1}, 0x10) 12m40.747549557s ago: executing program 3 (id=2700): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x40045613, &(0x7f0000000040)={0x0, 0x34324142, 0x2, @discrete={0x6, 0x3a92}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x1cf180, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000021, &(0x7f00000003c0)=0x5, 0x4) sendto$inet6(r2, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000302000/0x4000)=nil) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140)='/de\xa1\xe2V\x1aED\x06Cm\xf5)\f\xde\xdf\x15/snd/seq\x02', 0x123000, &(0x7f00000000c0)={@align=0x10, {0x0, 0x0, 0x40, 0xc57}}, 0x7d, &(0x7f0000000100), &(0x7f0000000180)=0x4}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x5}, @addr={0xa, 0x40}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x16f, @time={0x6, 0x7ff}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x200000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYRES64, @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040064766d727031000000000000000000000800050006080000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, 0x0, 0x0) sendmsg$nl_xfrm(r9, 0x0, 0x9000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 12m40.43121852s ago: executing program 3 (id=2701): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@any, 0x80000}, 0x400, "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"}, 0x418}) (fail_nth: 3) 12m39.565703215s ago: executing program 0 (id=2702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)={0x1}) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) fsopen(&(0x7f0000000240)='exfat\x00', 0x0) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = dup(r1) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000200)={0xb99, 0x4e}) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4606ff78a3000000000100000002003e00cd00000077020000000000004000000000000000ea03000000000000000001000a00380001000600b10600040300000005000000ff000000bdd926b44fc9977562ef000006000000000000000600"], 0x78) syncfs(r1) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffff1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) 12m39.158754789s ago: executing program 3 (id=2703): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x20000000}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = dup3(r2, r3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 12m38.820064147s ago: executing program 33 (id=2703): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x20000000}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = dup3(r2, r3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 12m38.812135198s ago: executing program 0 (id=2706): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000480)={0x5, 0x1, &(0x7f0000000240)=[0x7], &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(r3) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 12m35.566306235s ago: executing program 0 (id=2722): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_cmd={0x27, 0xfffffffc, 0x4000, 0x1, 0x9, 0x3, 0x0, 0x8, 0x5, 0x7, 0x2, 0x0, 0x6, 0x1, 0xff, 0x5, [0x77, 0x100000]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCL_SETSEL(r1, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0x6, 0x7, 0x6, 0xfff7, 0xf}}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x140c, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x8801) 12m35.066234797s ago: executing program 0 (id=2725): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0x40045613, &(0x7f0000000040)={0x0, 0x34324142, 0x2, @discrete={0x6, 0x3a92}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x1cf180, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000021, &(0x7f00000003c0)=0x5, 0x4) sendto$inet6(r2, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000302000/0x4000)=nil) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140)='/de\xa1\xe2V\x1aED\x06Cm\xf5)\f\xde\xdf\x15/snd/seq\x02', 0x123000, &(0x7f00000000c0)={@align=0x10, {0x0, 0x0, 0x40, 0xc57}}, 0x7d, &(0x7f0000000100), &(0x7f0000000180)=0x4}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x5}, @addr={0xa, 0x40}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x16f, @time={0x6, 0x7ff}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x200000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYRES64, @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040064766d727031000000000000000000000800050006080000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, 0x0, 0x0) sendmsg$nl_xfrm(r9, 0x0, 0x9000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 12m34.568561032s ago: executing program 0 (id=2730): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040), 0xd, 0x121800) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x3, 0x1, 0x4, 0x80, 0x4, {0x0, 0x2710}, {0x1, 0x1, 0x2, 0xb3, 0xb2, 0x5, "d8d92f80"}, 0x93, 0x3, {&(0x7f00000003c0)=[{0x5, 0x3, {0x6}, 0x3}, {0x7, 0x5, {0x6}, 0x3}]}, 0x2}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12m32.013466795s ago: executing program 0 (id=2734): mount(&(0x7f0000000180)=@sr0, &(0x7f0000000000)='./file3/file0\x00', 0x0, 0x100010, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) open$dir(0x0, 0x90000, 0x188) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x40, 0xd, 0x65, {0x65, 0x10, "c3cd07beffbcd0d963414a86accc06cdceff694cb6154769218075cd8b635991da9b45fc88959de1015102921c2cd796e8f6f7b0d4a1ef56f832566a400a8c5fdd04ae5d01b7dc6518bdc37166b96854863277fa38a949fecc738234d4ceeabdbddbcb"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "e155b0747237d64d58b9d2178e2426faee5797c2ec2b35949261a6a807"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x16, 0x65, "ab0dacd788f6d254d9684f4c78528ab09d326d31e7ffbcc07fdf3968f3ad89142188c34da2c01ec67bb93b0cfc2e2723397e2ed86891fdfae70bfaa0398e2257a407fc0fcc1df7c8548cd6df80830a6233f2a346c97d236c899ef3af1a2643e89891923046"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x81, 0x2, "ae0d"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "b7c7"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "e7ea59"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "c95a71"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "f2cdd7"}}) r2 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000017c0), &(0x7f0000002800)=0x8) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x3}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f00000008c0)={0x40, 0x1b}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xda}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x76}, &(0x7f00000009c0), 0x0}) 12m31.445499987s ago: executing program 34 (id=2734): mount(&(0x7f0000000180)=@sr0, &(0x7f0000000000)='./file3/file0\x00', 0x0, 0x100010, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) open$dir(0x0, 0x90000, 0x188) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x40, 0xd, 0x65, {0x65, 0x10, "c3cd07beffbcd0d963414a86accc06cdceff694cb6154769218075cd8b635991da9b45fc88959de1015102921c2cd796e8f6f7b0d4a1ef56f832566a400a8c5fdd04ae5d01b7dc6518bdc37166b96854863277fa38a949fecc738234d4ceeabdbddbcb"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "e155b0747237d64d58b9d2178e2426faee5797c2ec2b35949261a6a807"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x16, 0x65, "ab0dacd788f6d254d9684f4c78528ab09d326d31e7ffbcc07fdf3968f3ad89142188c34da2c01ec67bb93b0cfc2e2723397e2ed86891fdfae70bfaa0398e2257a407fc0fcc1df7c8548cd6df80830a6233f2a346c97d236c899ef3af1a2643e89891923046"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x81, 0x2, "ae0d"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "b7c7"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "e7ea59"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "c95a71"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "f2cdd7"}}) r2 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000017c0), &(0x7f0000002800)=0x8) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x3}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f00000008c0)={0x40, 0x1b}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xda}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x76}, &(0x7f00000009c0), 0x0}) 11m19.675729402s ago: executing program 4 (id=3205): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000000)='1\x00', 0x2) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 11m18.143729868s ago: executing program 4 (id=3214): r0 = fanotify_init(0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x80d, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r1, 0x1b226000) 11m17.975265571s ago: executing program 4 (id=3216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r3, 0x0, 0x2, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000100)={0x18, r4, 0x1, 0x0, &(0x7f0000000180)=[{0xfffeffffffffff9f, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r4, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000080)={0x28, 0x10000, r4, 0x0, 0x359554, 0x6, 0xa, 0x2ef91a}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200640101000c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000"], 0x80}}, 0x0) 11m17.424996789s ago: executing program 4 (id=3217): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) 11m17.309331669s ago: executing program 4 (id=3218): r0 = socket$kcm(0x10, 0x400000002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r2, 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000340)="d73d9974461d78c2ca35aef8a0bc058a59540968b9ad0334997a0fe9d1fdcdf17d9654f76e3682665c5d8e87c272e2d7af1583f17d34084ddd045a58271bf786b0c95a461054bb789b59da2a0a6f05e49f5dfc47c957f4940c19943882d8b0a592e2950b0d889d4977244f561e10423c1c95ec96") r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = fanotify_init(0x40, 0x80000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x11c) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4083, 0xff3}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000780)=""/4137, 0x1029}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000000280)=""/164, 0xa4}], 0x6}, 0x120) 11m15.830755838s ago: executing program 4 (id=3225): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000019080)="42b5b1381b3851b76fa06e6bf91142a6", 0x10) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0xfffffffb) r3 = fcntl$dupfd(r0, 0x0, r0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8, 0xf00) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) write$tun(r3, &(0x7f0000019700)=ANY=[@ANYBLOB="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"], 0x314) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) signalfd4(r2, &(0x7f00000190c0)={[0xc]}, 0x8, 0x0) fallocate(r2, 0x1, 0x1ff, 0x2) sendmsg$can_raw(r1, &(0x7f0000019200)={&(0x7f0000019100), 0x10, &(0x7f00000191c0)={&(0x7f0000019140)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x35, 0x1, 0x0, 0x0, "d4c1e65ba08d0626d98be668dc827b2e9162c0c139b73f8a08ea9a4e5ba0f3524147b207347ae27d8fc8720dc31a6b42710132bfbb419c5ad0ecf76c256a372e"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000193c0)={&(0x7f0000019240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000019380)={&(0x7f0000019280)={0xdc, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x7, 0x1, 0xffff, 0xff, 0x9, 0x1]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 11m0.735401507s ago: executing program 35 (id=3225): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000019080)="42b5b1381b3851b76fa06e6bf91142a6", 0x10) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0xfffffffb) r3 = fcntl$dupfd(r0, 0x0, r0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8, 0xf00) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) write$tun(r3, &(0x7f0000019700)=ANY=[@ANYBLOB="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"], 0x314) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) signalfd4(r2, &(0x7f00000190c0)={[0xc]}, 0x8, 0x0) fallocate(r2, 0x1, 0x1ff, 0x2) sendmsg$can_raw(r1, &(0x7f0000019200)={&(0x7f0000019100), 0x10, &(0x7f00000191c0)={&(0x7f0000019140)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x35, 0x1, 0x0, 0x0, "d4c1e65ba08d0626d98be668dc827b2e9162c0c139b73f8a08ea9a4e5ba0f3524147b207347ae27d8fc8720dc31a6b42710132bfbb419c5ad0ecf76c256a372e"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000193c0)={&(0x7f0000019240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000019380)={&(0x7f0000019280)={0xdc, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x7, 0x1, 0xffff, 0xff, 0x9, 0x1]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 3m52.475825922s ago: executing program 5 (id=5854): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$VT_RESIZE(r0, 0x8924, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3m52.424687365s ago: executing program 5 (id=5855): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40881}, 0x4040) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="320200007d00000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102"], 0x232) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={0x37c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x168, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x64}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5acf}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa71}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd5}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x66f6}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x955d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x64}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x47d007e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x30000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_REG_RULES={0x134, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7a29}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x28c9c5a9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x180}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe66}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x37c}, 0x1, 0x0, 0x0, 0x44}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r4 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r4, 0x82, 0x5, &(0x7f0000002340)='hello') r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYBLOB="80c19de3f1a6776306ec364940d339935d8203136641f66062e9ba27a8633ba843d2950bb2fe6048dc9e8578a9753cab358d0ee8f0ba75a7dad4f22756e26df95d552a298525ddefa7adf76067ad850e1a6e4784bbd7299e9c681a1fae1849afef4f488df69490d40dc448cd7477b89e6b4c77ab47139f665f76621ea1b4993ef83f5aa9cdfa020bd0156dcf73f0da98c9f4060000000000000055ab414efa7a54d5e27b34cd", @ANYBLOB="eda66d57c45c3102701bce9a260528ddf38445d52e895ce846f1987565987dfbee02c63298819ed2abcba92b601ebdaa08a17ec462d7036aebfde04fd6e151708a5b43ef91e2644f57b493e7fba9944f4048da67b1de136e123d75b6a6c6978d482636f269aa1a0641b9fdfbf982d1d5f1f8391c4a7e8835c6920fb46bf62d7a523a617db47294d9dfec919133769a2e7ef24af79c27a06a38860570e2d7f91c3867b0841307f978ee", @ANYBLOB="a8d55653b93c36352be720dbe8cc9517156e00e9da4476b331ccac4bd36d1ef6423fdf34b60572628f69c86ba26da8bc5a601fd938996cd1779b661be2c62d9625a3b1a09818c405912b2aacf1b86ffa9b304cc09d284a60adbdf72b67013c183395832c7d20d13d1abb892a679d0137a236bb0281bd97e3e71fc50849ac697aabff3ac97e17e0313345c63b1e", @ANYRESDEC=r1], 0x58}, 0x1, 0x0, 0x0, 0x24040090}, 0x98) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000200)=0x4) syz_usb_control_io$uac1(r1, 0x0, 0x0) 3m52.128815609s ago: executing program 5 (id=5857): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x80) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50", 0x4b}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x10002) 3m51.889943803s ago: executing program 5 (id=5859): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') (async) r3 = socket$kcm(0x21, 0x2, 0xa) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet(0x2, 0x801, 0x0) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@any, 0xa}, {@my=0x1, 0x7}, 0x400, "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"}, 0x418, 0x102}) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) sendmmsg(r8, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=ANY=[], 0x1260}}], 0x1, 0x40080d1) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001eb000100000000000000000000001800000000000000100100000c000000e800000000000000"], 0x30}, 0x0) (rerun: 32) 3m51.612312964s ago: executing program 5 (id=5862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x88a0}, 0x0) (fail_nth: 3) 3m50.753244221s ago: executing program 5 (id=5867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0500000000000000e500070080000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0) 3m50.257610465s ago: executing program 36 (id=5867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0500000000000000e500070080000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0) 2m52.150209955s ago: executing program 2 (id=6070): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f02000000000000001100010000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000004c0)={0x0, "34e6498c27bdeaccff00000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000700000000001a00", r6}) 2m51.921061317s ago: executing program 2 (id=6071): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x17, 0x4, "04045a0b"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2m49.680537573s ago: executing program 2 (id=6076): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000ac0)={0x79f3, 0x8ba, 0x2, {0x6, @sliced={0x8, [0x60, 0x6, 0xd34, 0x9, 0x2, 0x1, 0x5, 0x8, 0x59, 0x256, 0x9, 0x3, 0x91df, 0x100, 0x3, 0x2, 0x7, 0xd, 0x0, 0x6, 0x7, 0x3, 0x92a, 0x81, 0x135, 0x9, 0xffff, 0x2, 0xa0, 0x1, 0x1, 0xf280, 0x0, 0x401, 0x7, 0x2, 0x0, 0x0, 0x6, 0x7, 0xfffa, 0x5380, 0x2, 0xfff7, 0x889, 0x200, 0x8, 0x2], 0x8}}, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000a40)={[0x10000, 0x1, 0xb51, 0x81, 0x3, 0x8000, 0x7fffffff, 0x6, 0x5, 0x0, 0xfffffff7, 0x1, 0x396, 0x4, 0x1, 0x8, 0xfffffff7, 0x1, 0x1a9, 0x0, 0x5, 0xfffffffe, 0xec2, 0x9, 0x8, 0xda, 0x6, 0x7, 0x80000000, 0x8000, 0x401, 0x7, 0x4, 0x8, 0x4, 0x1, 0x0, 0x6, 0xa, 0x8, 0x5, 0x3, 0xfffffff7, 0x9, 0x8f4d, 0x2, 0x7, 0x1c2, 0xfffffffe, 0x0, 0x4, 0x6, 0xc4a9, 0x9, 0x9, 0x7d3f949a, 0x800, 0x81, 0x4, 0x3ff, 0x6, 0x80000001, 0x0, 0x1, 0x6, 0x9, 0x2, 0x9, 0x10000000, 0x0, 0x0, 0x5, 0x4, 0x7f, 0x7, 0x7fff, 0x1, 0xffff, 0x0, 0x3, 0x3, 0x80, 0xe0, 0x5a, 0x10000, 0x1, 0x7, 0x0, 0x7fff, 0xfda0, 0x800, 0xffff8001, 0x1, 0x6, 0x3, 0x3ff, 0x3, 0xfffffffc, 0x7, 0x9, 0x3e0, 0x1, 0xb, 0xd375, 0xcf, 0x2, 0x5, 0x7, 0x9, 0x2b91, 0x6, 0xfffffffd, 0xfffff274, 0x59f53f25, 0x8, 0x5, 0x8, 0x8, 0x4, 0x0, 0x7, 0x10000, 0xd, 0x1, 0x5, 0xdb0f, 0x5, 0xe8, 0x1000, 0x7ff, 0x8, 0x5, 0x38c, 0x6, 0x68, 0x6, 0x4, 0xffffff7f, 0x44f, 0x1, 0x79, 0xfffffffd, 0x8000, 0xffff, 0x7, 0x2, 0xffffff9c, 0x5, 0x200, 0x2, 0x6, 0xfffffff9, 0xa3a, 0x1, 0x72, 0x3, 0x32d, 0x6a2, 0x0, 0x7fff, 0x80000001, 0x8, 0x8, 0x9, 0xbc4b, 0x8001, 0x1, 0x4, 0x6, 0x5, 0x7, 0x3, 0x2, 0x8, 0x8, 0xe, 0x4, 0x9, 0x3ff, 0x7, 0x4, 0x42ec, 0xce5, 0xffff, 0x6, 0x5, 0x9, 0x8, 0x9, 0x7fff, 0xa9, 0x80, 0x6, 0x92bc, 0x6, 0x5, 0xffffffff, 0x401, 0x401, 0x2d72, 0x8, 0x10001, 0xfac5, 0x161, 0xb31, 0x8, 0x800, 0xa1ed, 0x8, 0x7, 0x10000, 0x5, 0x1ff, 0x9, 0x5, 0x2, 0x7fffffff, 0x4, 0xfffffffc, 0x9, 0x6, 0x4, 0x9, 0x2, 0x81, 0x7, 0xffffffd7, 0x7ff, 0x83d, 0x3c, 0x3, 0x2, 0x2185c9a7, 0x8, 0x9, 0x101, 0x4, 0x3, 0x956, 0x8, 0x6e000, 0x2, 0xff, 0x9, 0x54, 0x9, 0x7, 0x8, 0x39d1, 0x4, 0xffffffff, 0xff, 0x9, 0x1ff, 0xa, 0x3, 0x9794, 0x7, 0x216, 0x8, 0x8, 0xd78, 0x6, 0x40ab57a7, 0x6, 0x7, 0x7, 0x2, 0x9, 0x5, 0x4, 0x1e, 0xfffffffa, 0x4, 0xfffffffe, 0xb, 0x7, 0x9, 0x1, 0x1, 0x3, 0xfff, 0x22, 0x0, 0xb99d, 0x5, 0x7, 0x4, 0xb00, 0x7cd, 0x8, 0x7fff, 0x7c, 0x1, 0x8, 0x4, 0x4, 0x4, 0x1, 0x49, 0x4, 0xf, 0x5e17, 0xdf0, 0x7, 0x5, 0x0, 0x1, 0x2, 0x3, 0x93, 0x2, 0xd, 0x4, 0x400, 0x573b, 0x6, 0x9, 0xb, 0x80, 0x40, 0x40, 0x10001, 0x1ff, 0x7, 0x1, 0x6, 0x8, 0x0, 0x8, 0x5d4, 0x2, 0xc, 0x9, 0x5, 0xf, 0x100, 0x7fff, 0x53, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffd, 0xac1, 0x8, 0xd447, 0x0, 0x2, 0xcd9d, 0x401, 0x7f, 0x3, 0xfffffff9, 0x6, 0x2, 0x7fffffff, 0x5, 0x4, 0x9, 0x326, 0x400, 0x7, 0x9, 0x3, 0x4, 0x3, 0x2, 0x40, 0x7011, 0x7, 0x401, 0x42e, 0xa, 0x7, 0xb37, 0xd, 0x7, 0x3, 0xd9f1, 0x3, 0x253, 0xfffffffe, 0x7ff, 0x0, 0x7, 0x7, 0x2, 0x8, 0x2, 0x9, 0x200, 0x5, 0x0, 0x7, 0xfffffffe, 0x8000, 0x3ff, 0x4, 0x1ff, 0xb, 0x0, 0x4, 0x1, 0x2, 0x1, 0x8, 0x4, 0x8, 0x5, 0x1, 0x1, 0x2, 0x1000, 0xb, 0x9, 0x0, 0x6, 0x6, 0x6, 0xf3, 0xfffffe09, 0x7, 0x7, 0x0, 0x2, 0x9, 0x84ab, 0x3, 0x8, 0x5, 0x0, 0x8, 0xf, 0x9, 0x0, 0xb9, 0x89, 0x10000, 0x89b, 0x8000, 0x8000, 0x7, 0x4, 0x3, 0x386, 0x7, 0x8, 0x3, 0x6, 0x6, 0x9, 0x9, 0x99, 0x7, 0xfffffff7, 0x1, 0xd, 0x98, 0x28c, 0x7, 0x9, 0x10, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0xfffffff9, 0x4, 0x6, 0x401, 0xd, 0x6, 0x8, 0xfffffff9, 0x516d, 0x6, 0x4, 0x4000, 0xc25, 0x10, 0x9, 0x80000000, 0x8, 0xdfd, 0x9, 0x1, 0x8, 0x1, 0xb36, 0xd4f2, 0xa5d4, 0x5, 0x6, 0x2, 0x2, 0x5, 0x0, 0x3a0, 0x51a, 0xffffffff, 0x2, 0x5, 0x8d57, 0xb, 0x41687846, 0x9, 0x0, 0x4, 0x2, 0x9f, 0x7, 0xffffffff, 0xbb5, 0x1, 0x1, 0x101, 0x6, 0x1, 0x1, 0xbb31, 0x5, 0x4, 0x5, 0x126, 0x4, 0x0, 0x0, 0xff, 0x1, 0x5, 0x5bd, 0x27a3, 0x2, 0x7, 0x80, 0x1, 0x4, 0x2b88fc07, 0xffffffff, 0x3, 0x5, 0x2a08, 0x1, 0x7d, 0x7, 0x4, 0xe0, 0xed75, 0x8, 0x81, 0x5, 0x9, 0x5b64, 0x8, 0x7416, 0xfffffff9, 0xffffffff, 0x1, 0x3, 0x10000, 0x5, 0x1, 0x6, 0xa0bd, 0xc36, 0x2, 0x9, 0xf115, 0x800, 0x9, 0x9, 0x1000, 0x1, 0x27a, 0xfff, 0xe5, 0x80e, 0x1, 0x2, 0xac, 0x9, 0x8, 0x0, 0x10000, 0x4, 0xfffffffa, 0xc9, 0x40, 0x6, 0x6, 0xfffffff9, 0x8000, 0x9, 0xfff, 0x7, 0x8, 0x5, 0x81, 0x6, 0x827, 0x64b, 0x7, 0x80000000, 0xfffffff9, 0x7ff, 0x80000000, 0x4, 0x2, 0x7fffffff, 0x2, 0x10001, 0x21e, 0x8, 0x6, 0xfffffff9, 0x5, 0x8, 0x1, 0x7ff, 0x79, 0xfa, 0x80, 0x401, 0x2, 0x7, 0x7ff, 0x6, 0x988, 0x7fff, 0x3, 0x0, 0x9, 0x9, 0x8, 0x7, 0x9, 0x4, 0xe, 0x7, 0x1, 0x200, 0x1000, 0x66ae, 0x1, 0x5, 0x1538, 0x6, 0x743, 0x4b5, 0x8, 0x9, 0x7, 0x3, 0x3, 0x401, 0x2, 0x101, 0x7, 0xf, 0xa, 0x200, 0x7fffffff, 0xfffffff8, 0xc1e, 0x6bdf, 0x100, 0x4, 0x6, 0x5, 0x80000001, 0x80000000, 0x5, 0x10001, 0x7fff, 0xe, 0xfff, 0x8, 0x23, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x8001, 0x0, 0xf22, 0x1, 0x4, 0xeb, 0x5, 0x8, 0x588, 0x401, 0x7, 0x6, 0x0, 0x7, 0x708, 0x8, 0x800, 0x236, 0x8, 0xfffffff8, 0x3, 0xffffffff, 0x9, 0xeb, 0x0, 0x7f, 0x9c, 0x40, 0x2, 0x7, 0x10000, 0x7fff, 0xffffffb7, 0x1, 0x3a, 0x3, 0x6, 0x2, 0x1, 0x9, 0x5, 0x1, 0x4, 0x5, 0x8, 0x4, 0x6, 0x0, 0x4, 0x2, 0x4, 0x96, 0x6, 0x6, 0x5, 0x0, 0xa, 0x3, 0x100, 0x0, 0x6ee38fb0, 0x3, 0x80000000, 0x1ff, 0x2, 0xfff, 0x1, 0x2, 0x9, 0x8, 0xc1, 0x6, 0x10001, 0x401, 0x2, 0xfffffff9, 0xc, 0x9, 0x1, 0x1f, 0x0, 0x0, 0x5, 0xedcf, 0x4a6b, 0xc3f, 0x10, 0x6, 0x1000000, 0xc6, 0x6c9, 0x2, 0x7ff, 0x7, 0xc7c, 0x2, 0xe, 0x8, 0x9, 0x5, 0x6, 0x1000, 0x2e, 0x4, 0x3, 0x7, 0x1, 0x3, 0x80000001, 0x5, 0x8, 0x7, 0x400, 0x1000, 0x7, 0x9, 0x7fffffff, 0x8, 0x3, 0x2, 0x0, 0x2, 0x8, 0x400, 0x7, 0x9, 0x8, 0x1, 0x58, 0x2, 0x6, 0x8, 0x7, 0x2, 0x15d5, 0xff, 0xd, 0x7fffffff, 0x253, 0x9, 0xfffffff6, 0x1, 0xf, 0x6, 0x9, 0x0, 0x8, 0xd, 0x8, 0x10, 0x522, 0x2, 0x2, 0x4, 0x3, 0x8, 0x8, 0x4, 0x7, 0x5a6, 0xd5, 0x5, 0x8, 0x9, 0x7fffffff, 0xfd76, 0x2, 0x4, 0x0, 0x9, 0x9, 0x3, 0x2cf5, 0xe, 0x1513, 0x6, 0x10, 0x81, 0xffffffff, 0x8, 0x0, 0xfffffff8, 0x0, 0x8, 0xf, 0x3, 0x1, 0xc3a, 0x4, 0x8, 0x40, 0x4, 0x4, 0x6bf, 0x6, 0x5, 0x1, 0x8001, 0x9, 0x4, 0xbeef, 0x8, 0x9, 0x9, 0x3, 0xfffffbff, 0x4, 0x3d, 0x2, 0x0, 0x5, 0x10001, 0xf, 0x2, 0xe15a, 0xffffffc0, 0x9, 0x842, 0x4, 0x4, 0x4, 0x8, 0x0, 0x2, 0xfff, 0x0, 0x9, 0x80000000, 0xffffffff, 0x1, 0x0, 0x1, 0x90ff, 0x10001, 0x0, 0x2, 0x8, 0x7f, 0x4, 0x77d, 0x3, 0x9, 0x10000, 0x7fff, 0x7f, 0x7, 0x1, 0x6, 0x2, 0x9688, 0x16c1, 0x401, 0xcd, 0xf5c4, 0x85, 0x4a, 0x7, 0x9, 0x126, 0x0, 0x10, 0x223, 0x7, 0x4, 0x2, 0x3, 0x0, 0x9, 0x9, 0x4, 0x3, 0x6, 0x9, 0x2, 0x6, 0x3, 0x8000, 0x4, 0x35, 0x3, 0xfffff800, 0x5, 0xaf, 0x3, 0x0, 0x5, 0x9, 0x0, 0x2, 0x6, 0xa, 0x9, 0x800, 0x34, 0x7fff, 0x9, 0xd22a, 0x9, 0x3, 0x6, 0x6, 0x9, 0x27b, 0xe, 0x1ff, 0x5, 0x3, 0x100, 0x7e, 0x7, 0xcc40, 0x9, 0x3, 0x4, 0x6, 0x6df, 0xf, 0x40, 0x7fff, 0x5d, 0xfffff901, 0x28f, 0x8a, 0x2f, 0x2, 0x2, 0x9, 0xb7, 0x4, 0x2c, 0x9, 0x8aa2, 0x7, 0xffff, 0x100, 0x80000001, 0x1296ec09, 0x4]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 2m49.545780307s ago: executing program 2 (id=6078): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0xfe, {0xfe, 0xf, "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"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, &(0x7f00000002c0)={0x0, 0xf, 0x91, {0x5, 0xf, 0x91, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x8, 0x7, 0x0, 0x40}, @generic={0x51, 0x10, 0x3, "d188cf6783f25bb11b982975567d9144df448be07490863aa6bf00307a969fa4281e2a8f4cc47fcda719cf2b8a5196f505b054f107b6be1412cbc4a1433c804d2a0fd90cdde60b81c324fd4d4bec"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x3, 0xf00, 0x1, [0x30, 0xff0000, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x4, 0xf000, 0x3, [0x0, 0xff0030, 0xf]}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x6, 0x8, "6ed8bbfe", "a61ec8dd"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x6, 0x9, 0x9, 0x9, 0x9c2}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x0, 0x3e, 0xd9, "5523d41271c79315e14e60314a28b93c6f782e51374c80ac43fe31147b0a5dccc6f0d334d4526b3af2bd9fba332e46786004d567912fb5bc2a01608035e94c29116f532f3bb56edf6d11ee10bf57e23e562803e0cac91e01ac0002065ffcf10c500b7e7b733b7f800caf5cdfc41b19cd881ffefcf2226935bd39a7254a2c44f97067126d8c0472caba730cf668af69f960e9e32b0e150195fc4798029106fd3cc998deab192f15cc04be422600656724b3244b40e6f3139a5f6a75cea6c0c0ba448ee63cf06a5a6182fbe474357c30d6be49ba106ad1b0cf1a"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9b}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x800, 0x2, [0x1ef00]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x10}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "9d7d"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000880)={0x40, 0x13, 0x6}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000900)={0x40, 0x19, 0x2, "3901"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0xa}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000e010000b30ba4af2ece468acd43f2528b69bccbaedf3ab2afdc96e664799db46c63922f40186b25e8d5cfa7ba06000000bdfbf71c608de2da06d384331b74bb56633a36cbe35d3888af77a13e469a2d4fd957caf6cf07c4cdddf977fccc65d04b196aaa67f0a682c52a51f03a4a7ec17c6440bc09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m46.59035005s ago: executing program 2 (id=6089): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0xcb1, 0x4000, 0x0, 0x80000000, 0x20000}) unlink(&(0x7f00000001c0)='./file0\x00') r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x6, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x4, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xf40, 0x3a, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m46.442881557s ago: executing program 2 (id=6090): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) gettimeofday(&(0x7f00000000c0), 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000a00)={0x2, 0x1, 0x4000000c, 0x2, 0x1b5, 0x0}) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1e, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0xe845, 0x0, 0x0, 0x3, 0x1, 0xc}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0xcd5, 0x0, 0x0, 0x2}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000080)=@buf) madvise(&(0x7f00008aa000/0x3000)=nil, 0x3000, 0x14) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r7, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0xb}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f0000002a40)=""/4088, 0xff8}, {&(0x7f0000003a40)=""/153, 0x99}], 0x5}, 0x7fffffff}, {{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/192, 0xc0}, {&(0x7f0000002800)=""/191, 0xfffffffffffffdbe}, {&(0x7f00000028c0)=""/102, 0x66}, {&(0x7f0000003d80)=""/4096}], 0x4, &(0x7f0000003b80)=""/245, 0xf5}, 0x4}], 0x4, 0x10122, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fedbdf250f0000000e0001006c657464657673696d0000000f0002006e657464657600006d3000000600110006000000080001007063ac2011000200303030303a30303a31302e300000000008000000000000000000110001000000"], 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2}) 2m31.187492368s ago: executing program 37 (id=6090): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) gettimeofday(&(0x7f00000000c0), 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000a00)={0x2, 0x1, 0x4000000c, 0x2, 0x1b5, 0x0}) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1e, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0xe845, 0x0, 0x0, 0x3, 0x1, 0xc}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0xcd5, 0x0, 0x0, 0x2}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000080)=@buf) madvise(&(0x7f00008aa000/0x3000)=nil, 0x3000, 0x14) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r7, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0xb}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f0000002a40)=""/4088, 0xff8}, {&(0x7f0000003a40)=""/153, 0x99}], 0x5}, 0x7fffffff}, {{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/192, 0xc0}, {&(0x7f0000002800)=""/191, 0xfffffffffffffdbe}, {&(0x7f00000028c0)=""/102, 0x66}, {&(0x7f0000003d80)=""/4096}], 0x4, &(0x7f0000003b80)=""/245, 0xf5}, 0x4}], 0x4, 0x10122, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fedbdf250f0000000e0001006c657464657673696d0000000f0002006e657464657600006d3000000600110006000000080001007063ac2011000200303030303a30303a31302e300000000008000000000000000000110001000000"], 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2}) 42.068318132s ago: executing program 7 (id=6485): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x2a00, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1) 41.756045609s ago: executing program 7 (id=6486): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0xffffffff, "fa02791d2a69a2610f02000000000000001100010016d000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) 41.213766902s ago: executing program 7 (id=6487): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) readv(r1, &(0x7f0000003c00)=[{&(0x7f00000004c0)=""/142, 0x8e}], 0x1) r3 = fanotify_init(0x40, 0xc0003) fanotify_mark(r3, 0x0, 0x8000052, r2, &(0x7f0000000040)='./file0\x00') write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x1, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x7, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0x6, 0x3ff, 0x3, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x1000, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x805, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x1005, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x802, 0xc, 0x0, 0x2329, 0xfd7, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0xfffffffe, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xffff, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x100, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x40000010, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x7, 0x6, 0x0, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x3, 0x0, 0x5, 0x8000009, 0x0, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x600000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1906, 0x4000000, 0xc, 0x8, 0x7ff, 0x27c, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x200, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x3, 0x3, 0x0, 0xffffffff, 'syz0\x00', 0xfffffe01}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x1000, 0x7fffffffffffffff, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup(r0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r8, 0x10c, 0x7, &(0x7f0000000080)=0x3, 0x4) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a3b1a0890e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 38.027625267s ago: executing program 7 (id=6497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x40, 0x10, 0x4a, {0x4a, 0xe, "6bb19204945d5296f8fd0e4db4cb2d401c98d21ea5ebf9be0a3e860f26bd75690d1abd444b5779a0a0b603640e76d034da7179cce0434ec7ad4b08ae5959f2b7057eef115f8eb0bf"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000000400)={0x34, &(0x7f0000000280)={0x20, 0x31, 0x23, "9e226a8e0dfd374d2118d03112a5297ef07c8cc2448e490e6a8ad14dc6d0e71e67982b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xf}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x4}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "15a3804eea9588f6bad0f61b190e706fa98dfeb95a7a16f280e3d77e496bdac4be6bc02ff6030fd987ae5e821909c5"}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003580000005803"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 35.733328737s ago: executing program 7 (id=6501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000010a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400000000240000000080a010100000000000000000a0000060900020073797a31000000000900010073797a3100"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 35.400718613s ago: executing program 7 (id=6504): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e01020301090261000100000000090400"], 0x0) r3 = socket(0x1, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5ab879ca62cdab2a0a00000086d85ba5665a3247e500f61681905db882d2a2ed6e91626f068881e50f6853770721a100efb76cba37ff3111d6847e8b9398a6c008daefba68e6222103472bc55704cdb72b4b996e5f34171113d806726615380fe65a6a0a72e1000000000000e000b6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4ac79f599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r4 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) ioctl$RTC_AIE_OFF(r4, 0x7002) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r4], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x90}, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x408400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="d87dfc10", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf2508000000100004800900010073797a3100000000"], 0x24}}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000280)={0x1, {{0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00', 0x9922}}}, 0x88) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x90) 19.900587231s ago: executing program 38 (id=6504): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e01020301090261000100000000090400"], 0x0) r3 = socket(0x1, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5ab879ca62cdab2a0a00000086d85ba5665a3247e500f61681905db882d2a2ed6e91626f068881e50f6853770721a100efb76cba37ff3111d6847e8b9398a6c008daefba68e6222103472bc55704cdb72b4b996e5f34171113d806726615380fe65a6a0a72e1000000000000e000b6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4ac79f599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r4 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) ioctl$RTC_AIE_OFF(r4, 0x7002) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r4], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x90}, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x408400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="d87dfc10", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf2508000000100004800900010073797a3100000000"], 0x24}}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000280)={0x1, {{0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00', 0x9922}}}, 0x88) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x90) 14.215400498s ago: executing program 6 (id=6575): r0 = socket$unix(0x1, 0x5, 0x0) listen(r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x40802, 0x10) write$tcp_congestion(r1, &(0x7f0000000300)='illinois\x00', 0x9) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x40, 0x1, 0x0, "da7893900cd98d67a85222250342d04a2c1f1a3f20d4507c14e951d29546029a"}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x200000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180000006a001f03"], 0x20}], 0x1, 0x0, 0x0, 0x2c0040d0}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x4484}, {r0, 0x30a1}, {r2, 0x28}, {r0}, {r3, 0x220}, {r4}], 0x6, &(0x7f0000000080), &(0x7f00000000c0)={[0xe81]}, 0x8) socket$unix(0x1, 0x5, 0x0) (async) listen(r0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x40802, 0x10) (async) write$tcp_congestion(r1, &(0x7f0000000300)='illinois\x00', 0x9) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x40, 0x1, 0x0, "da7893900cd98d67a85222250342d04a2c1f1a3f20d4507c14e951d29546029a"}) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x200000, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180000006a001f03"], 0x20}], 0x1, 0x0, 0x0, 0x2c0040d0}, 0x10) (async) ppoll(&(0x7f0000000040)=[{r0, 0x4484}, {r0, 0x30a1}, {r2, 0x28}, {r0}, {r3, 0x220}, {r4}], 0x6, &(0x7f0000000080), &(0x7f00000000c0)={[0xe81]}, 0x8) (async) 13.873621516s ago: executing program 6 (id=6576): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) (fail_nth: 22) 12.952652319s ago: executing program 6 (id=6578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000000000000220000000a0001007770616ec23248"], 0x20}}, 0x4000000) ioctl$sock_proto_private(r2, 0x89e2, &(0x7f0000000240)="65fced09dfcce0bddcc6abdfe26964d6bfa6b6d852d136f22c2a3a21aa1a740e64d258b19e05e502113c7794fb51b1d8f667c3913d34f4da4449b383ca4a02962c7615f547e71fa0cb28edfd0ddfc6a462eeacfb26e7b17dd51b8928fdcd5f8b63fe450e883b766304bbd2d1faffa6a841ee4bd94d5cdf3024caf0f02c85530ba9bdad016d4c7aaea045417f59cf06815cbb07ac8e1be8371ebf81dcb1b18a7a3d1271c5c79c5154ce021015383075d7fee06d0df2ee8b4d1cac5657602f27a09ad59c5990b385d96a88aa8f8b") write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14, 0x20}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 10.398402632s ago: executing program 6 (id=6587): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x3ec0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000010280)={&(0x7f0000010000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000010240)={&(0x7f0000010040)={0x1f0, 0x12, 0x10, 0x70bd26, 0x25dfdbfe, {0x2c, 0x4, 0x3, 0x7, {0x4e21, 0x4e23, [0x16, 0x10000, 0x1ff, 0x6], [0x9, 0x9, 0x1e2, 0xc], 0x0, [0x9, 0x51be]}, 0x9, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x88, 0x1, "c85cf136d3d3a45973130922a49b97d67de4146e23bb3e49434b523779274922731bd40e505e889216f7933778ace226209bc938324c756ba66bff0a24947b8b5da3ebad707854d9317cf0046c5a2fe710a9b8db32068c4dab8a8139eb98f7fd3690aa7e4432a6a63c420301dde069180a40cb75ff61237507dedf39fe3bde46fb54e0d5"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "3cdd12a4244e55c064b25f4557552c574028881ddbcee77d9f62dfd4eddf5bc245861c07e6085bfc5d53f9f428955e62bafb184e6613fb64f0cf8633363951a7c4ff9402388b22f81f8ee3a7718f115563bbc92f33cada78c3767a02eb3403c251be3b5e06159ec804c897a17597af581a1ccae974c38d033067aa1a0e36f00f79df6a1a644165c907e0c4f23d683c88c94e6d6a321fc923976714f327dd6d66eaceccd47e7209ebb31434ee710ba4c864e8020d0b6c8f01ef80c3896ba3b844d6695f66f61624157dfc0bc783b7"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "371b2cff77ad180107c1ece1e11dd47aa775027be7883a42d9e3b4d0bdb96a0d85b2f28c7ceb813ea7865fde5f7a0b607232ea8f8d419ba5b13c7e378d6456ca387486b5"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x10008080}, 0x2000c8c0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000102c0)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57da2ad}, 0x240408c5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.836060355s ago: executing program 9 (id=6591): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x4000001d}) setgid(0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback={0xff00}}, 0x1c) 9.535568525s ago: executing program 9 (id=6592): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='.\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000ffdbff25010000000000000009410000004c00180000000373797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f25ee1d77cbf09ab9ed366402d29706a7fc9793953f8b07bfaf17bcdced69a6393b89d9dee8b0b2dcd424cdca42e6ae431f10156e899b241b0359dfde8ea676e2e18591ce855f0d6eade0f774f0a25b936b3c78257884aa7eb5fa46a44ffec2a33dd0255ec77809f0a18f911384573d2679a7aae58000000000000000000000000000400"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x9031) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1ff, 0x1}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x18c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x104}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x0, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) 9.508076168s ago: executing program 6 (id=6593): r0 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x7ff, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x8d, 0x0, 0x7}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) 7.833257098s ago: executing program 9 (id=6596): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x2000) 7.677005134s ago: executing program 9 (id=6597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) unshare(0x8000000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'nr0\x00', @random="860d7ce10864"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) shmget$private(0x0, 0xfffffffffeffffff, 0x4000000, &(0x7f0000ffc000/0x3000)=nil) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) file_getattr(r5, 0x0, 0x0, 0x47, 0x1000) 6.983739031s ago: executing program 9 (id=6598): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) syz_usb_connect(0x7, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff0000403205e929c0f2010203010902120001000000000904"], 0x0) 6.398230731s ago: executing program 9 (id=6600): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x7, 0x1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01001a000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.200753114s ago: executing program 6 (id=6602): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4380, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={r2, 0x6, 0x3}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x580, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3fb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0801}, 0x24000000) 1.959660341s ago: executing program 8 (id=6607): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ff"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x53, 0x2, 0x1, {0x1, 0x5}, {0x8, 0x5}, @period={0x5c, 0x4, 0x40, 0xd282, 0x7, {0x4, 0x7, 0x2, 0xfffd}, 0x7, &(0x7f00000000c0)=[0x5, 0x7, 0x0, 0xd66b, 0x1, 0x7ff, 0x8]}}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eabb5611b655e5f65991c3e1e6f89550928b713582f37d43e4b35a9f7a5b12d01438c9c419900b0e3001000"}, 0x48, r1) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, r2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000004e40)={0x8, 0x8, 0xfffc, 0x0, "4d512c91002a495067614268710cdcd3f82acf5a890400000000000000fbf29c"}) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r3) 1.170995357s ago: executing program 8 (id=6608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) r2 = syz_clone(0x1048000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x40bb, 0x2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x9, 0x0, 0x2}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x8, r0}, 0x0) move_pages(0x0, 0x3f, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], 0x0, 0x2) 841.427888ms ago: executing program 8 (id=6609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="24002f800c000200000000000000000008000100000000000c0003800800010001000000"], 0x40}}, 0x4000040) 719.175609ms ago: executing program 8 (id=6610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$802154_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="35da489d25c1b52da8eee02f90eea5857b65708331", 0x15}, 0x1, 0x0, 0x0, 0x8000004}, 0x8010) 461.386369ms ago: executing program 8 (id=6611): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x6) 0s ago: executing program 8 (id=6612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000001c0)=""/40, 0x20}, {0x0}], 0x2, 0x0, 0x17}, 0x1ff}], 0x1, 0x10100, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) kernel console output (not intermixed with test programs): oogle Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1234.211454][T24092] Call Trace: [ 1234.211463][T24092] [ 1234.211474][T24092] dump_stack_lvl+0xe8/0x150 [ 1234.211507][T24092] should_fail_ex+0x46b/0x600 [ 1234.211549][T24092] _copy_to_user+0x31/0xb0 [ 1234.211582][T24092] simple_read_from_buffer+0xe1/0x170 [ 1234.211620][T24092] proc_fail_nth_read+0x1be/0x230 [ 1234.211658][T24092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1234.211695][T24092] ? rw_verify_area+0x2ac/0x4e0 [ 1234.211730][T24092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1234.211764][T24092] vfs_read+0x212/0xa80 [ 1234.211808][T24092] ? __pfx_vfs_read+0x10/0x10 [ 1234.211848][T24092] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1234.211881][T24092] ? lockdep_hardirqs_on+0x7a/0x110 [ 1234.211912][T24092] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1234.211943][T24092] ? mutex_lock_nested+0x152/0x1d0 [ 1234.211967][T24092] ? fdget_pos+0x252/0x320 [ 1234.212007][T24092] ksys_read+0x156/0x270 [ 1234.212033][T24092] ? __pfx_ksys_read+0x10/0x10 [ 1234.212069][T24092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.212094][T24092] do_syscall_64+0x15f/0xf80 [ 1234.212123][T24092] ? trace_irq_disable+0x3b/0x140 [ 1234.212159][T24092] ? clear_bhb_loop+0x40/0x90 [ 1234.212188][T24092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.212212][T24092] RIP: 0033:0x7f400ffed68e [ 1234.212232][T24092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1234.212253][T24092] RSP: 002b:00007f400e285fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1234.212276][T24092] RAX: ffffffffffffffda RBX: 00007f400e2866c0 RCX: 00007f400ffed68e [ 1234.212293][T24092] RDX: 000000000000000f RSI: 00007f400e2860a0 RDI: 0000000000000004 [ 1234.212307][T24092] RBP: 00007f400e286090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.212321][T24092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.212334][T24092] R13: 00007f40102a6038 R14: 00007f40102a5fa0 R15: 00007ffe6c8e4bb8 [ 1234.212368][T24092] [ 1234.952906][T24010] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1235.024727][T24106] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6248'. [ 1235.025849][T24106] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6248'. [ 1235.082800][T24010] usb 8-1: device descriptor read/64, error -71 [ 1235.178187][T24074] syz.6.6240 (24074): drop_caches: 2 [ 1235.354278][T24010] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1235.359147][T24110] overlay: filesystem on ./bus not supported [ 1235.482625][T24010] usb 8-1: device descriptor read/64, error -71 [ 1235.596228][T24010] usb usb8-port1: attempt power cycle [ 1235.722477][ T9619] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1235.882374][ T9619] usb 9-1: Using ep0 maxpacket: 16 [ 1235.889669][ T4933] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1235.891139][ T9619] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1235.892394][ T9619] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1235.892433][ T9619] usb 9-1: can't read configurations, error -71 [ 1235.943066][T24010] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1235.963187][T24010] usb 8-1: device descriptor read/8, error -71 [ 1236.202923][T24010] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1236.226779][T24010] usb 8-1: device descriptor read/8, error -71 [ 1236.333082][T24010] usb usb8-port1: unable to enumerate USB device [ 1236.417638][ T5725] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1236.522965][ T32] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1236.586448][ T5725] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1236.586487][ T5725] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1236.586533][ T5725] usb 10-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 1236.586559][ T5725] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.647892][ T5725] usb 10-1: config 0 descriptor?? [ 1236.682706][ T32] usb 7-1: Using ep0 maxpacket: 32 [ 1236.747780][T24134] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1236.761419][ T32] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1236.761449][ T32] usb 7-1: config 0 has no interface number 0 [ 1236.761508][ T32] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1236.761535][ T32] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1236.851049][ T32] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1236.851307][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.851331][ T32] usb 7-1: Product: syz [ 1236.851348][ T32] usb 7-1: Manufacturer: syz [ 1236.851364][ T32] usb 7-1: SerialNumber: syz [ 1237.058883][ T32] usb 7-1: config 0 descriptor?? [ 1237.071999][ T5725] usbhid 10-1:0.0: can't add hid device: -71 [ 1237.072129][ T5725] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1237.103454][ T5725] usb 10-1: USB disconnect, device number 3 [ 1237.486908][ T32] appletouch 7-1:0.85: Geyser mode initialized. [ 1237.503240][ T32] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input161 [ 1237.928673][ T9619] usb 7-1: USB disconnect, device number 42 [ 1237.928757][ C0] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1238.039765][T24157] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6256'. [ 1238.057323][T24155] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6256'. [ 1238.189849][ T9619] appletouch 7-1:0.85: input: appletouch disconnected [ 1238.408028][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.408131][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.622320][ T5769] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1238.782680][ T5769] usb 8-1: Using ep0 maxpacket: 8 [ 1238.795621][ T5769] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1238.799167][ T5769] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.799358][ T5769] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 1238.799438][ T5769] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1238.799493][ T5769] usb 8-1: config 1 interface 0 has no altsetting 1 [ 1238.806670][ T5769] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1238.806759][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.806816][ T5769] usb 8-1: Product: syz [ 1238.806861][ T5769] usb 8-1: Manufacturer: syz [ 1238.806906][ T5769] usb 8-1: SerialNumber: syz [ 1239.461832][ T5769] usb 8-1: selecting invalid altsetting 1 [ 1239.462379][ T5769] cdc_ncm 8-1:1.0: bind() failure [ 1239.477426][ T5769] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1239.477519][ T5769] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1239.515021][ T5769] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1239.515074][ T5769] cdc_ncm 8-1:1.1: bind() failure [ 1239.519097][ T5769] usbtest 8-1:1.1: couldn't get endpoints, -22 [ 1239.519202][ T5769] usbtest 8-1:1.1: probe with driver usbtest failed with error -22 [ 1239.641945][ T5769] usb 8-1: USB disconnect, device number 23 [ 1240.483543][ T4933] Bluetooth: hci0: command 0x0406 tx timeout [ 1240.826997][T24219] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1240.828021][T24219] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1240.896602][ T5769] libceph: connect (1)[c::]:6789 error -101 [ 1240.955539][ T5769] libceph: mon0 (1)[c::]:6789 connect error [ 1241.018928][ T5769] libceph: connect (1)[c::]:6789 error -101 [ 1241.019118][ T5769] libceph: mon0 (1)[c::]:6789 connect error [ 1241.049090][T24222] ceph: No mds server is up or the cluster is laggy [ 1242.398220][ T4933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1242.468823][ T4933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1242.479271][ T4933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1242.483764][ T4933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1242.485142][ T4933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1242.818964][T11557] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 1242.994024][T11557] usb 10-1: device descriptor read/64, error -71 [ 1243.103829][ T5725] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1243.215384][ T5769] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1243.279333][T11557] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1243.288779][ T5725] usb 8-1: Using ep0 maxpacket: 16 [ 1243.291020][ T5725] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 1243.291050][ T5725] usb 8-1: config 0 has no interface number 0 [ 1243.291097][ T5725] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1243.291123][ T5725] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1243.294563][ T5725] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1243.294593][ T5725] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.294615][ T5725] usb 8-1: Product: syz [ 1243.294632][ T5725] usb 8-1: Manufacturer: syz [ 1243.294656][ T5725] usb 8-1: SerialNumber: syz [ 1243.330991][ T5725] usb 8-1: config 0 descriptor?? [ 1243.339716][ T5769] usb 9-1: device descriptor read/64, error -71 [ 1243.362921][T24258] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1243.363062][T24258] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1243.443800][T11557] usb 10-1: device descriptor read/64, error -71 [ 1243.549095][T11557] usb usb10-port1: attempt power cycle [ 1243.598706][ T5769] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1243.616369][T24258] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1243.616702][T24258] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1243.723332][T24247] wg0 speed is unknown, defaulting to 1000 [ 1243.738567][ T5769] usb 9-1: device descriptor read/64, error -71 [ 1243.833737][ T5725] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1243.834026][ T5725] asix 8-1:0.34: probe with driver asix failed with error -61 [ 1243.858469][ T5769] usb usb9-port1: attempt power cycle [ 1243.941052][T11557] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1243.976444][T11557] usb 10-1: device descriptor read/8, error -71 [ 1244.287849][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.299821][ T5769] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1244.299974][T11557] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 1244.332525][ T5769] usb 9-1: device descriptor read/8, error -71 [ 1244.332595][T11557] usb 10-1: device descriptor read/8, error -71 [ 1244.450140][T11557] usb usb10-port1: unable to enumerate USB device [ 1244.658880][ T5769] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1244.681719][ T5769] usb 9-1: device descriptor read/8, error -71 [ 1244.718224][ T5630] Bluetooth: hci3: command tx timeout [ 1244.789996][ T5769] usb usb9-port1: unable to enumerate USB device [ 1244.924104][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.277438][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): left promiscuous mode [ 1245.290097][ T68] bridge0: port 3(netdevsim1) entered disabled state [ 1245.492438][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.628414][T24247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.628690][T24247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.629013][T24247] bridge_slave_0: entered allmulticast mode [ 1245.631631][T24247] bridge_slave_0: entered promiscuous mode [ 1245.641942][T24247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.642957][T24247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.644005][T24247] bridge_slave_1: entered allmulticast mode [ 1245.677216][T24247] bridge_slave_1: entered promiscuous mode [ 1245.755705][T24247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.837485][T24010] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1246.028198][T24010] usb 10-1: Using ep0 maxpacket: 8 [ 1246.046480][T24010] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1246.046528][T24010] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1246.046556][T24010] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1246.046582][T24010] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.046630][T24010] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1246.046661][T24010] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.163124][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.269364][T24247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.330601][T24010] usb 10-1: GET_CAPABILITIES returned 0 [ 1246.330654][T24010] usbtmc 10-1:16.0: can't read capabilities [ 1246.395307][T24247] team0: Port device team_slave_0 added [ 1246.412523][T24247] team0: Port device team_slave_1 added [ 1246.489346][T24247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.489365][T24247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.489407][T24247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.501939][T24247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.501969][T24247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.502001][T24247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.622989][T24010] usb 10-1: USB disconnect, device number 8 [ 1246.797129][ T5630] Bluetooth: hci3: command tx timeout [ 1246.873089][T24284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.875043][T24284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.979499][T24288] netlink: 160 bytes leftover after parsing attributes in process `syz.8.6285'. [ 1246.979526][T24288] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1247.060424][T24247] hsr_slave_0: entered promiscuous mode [ 1247.065047][T24247] hsr_slave_1: entered promiscuous mode [ 1247.087632][T24247] debugfs: 'hsr0' already exists in 'hsr' [ 1247.087661][T24247] Cannot create hsr debugfs directory [ 1247.807194][ T5769] usb 8-1: USB disconnect, device number 24 [ 1248.875881][ T5630] Bluetooth: hci3: command tx timeout [ 1249.268898][T24313] binfmt_misc: register: failed to install interpreter file ./file0 [ 1249.465723][ T32] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1249.625566][ T32] usb 9-1: Using ep0 maxpacket: 32 [ 1249.633372][ T32] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1249.633403][ T32] usb 9-1: config 0 has no interface number 0 [ 1249.633473][ T32] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1249.633504][ T32] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1249.646971][ T68] bridge_slave_1: left allmulticast mode [ 1249.647011][ T68] bridge_slave_1: left promiscuous mode [ 1249.647323][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.705675][ T32] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1249.705772][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.705827][ T32] usb 9-1: Product: syz [ 1249.705873][ T32] usb 9-1: Manufacturer: syz [ 1249.705924][ T32] usb 9-1: SerialNumber: syz [ 1249.835697][T24312] Process accounting resumed [ 1249.859618][ T32] usb 9-1: config 0 descriptor?? [ 1250.251239][ T68] bridge_slave_0: left allmulticast mode [ 1250.251281][ T68] bridge_slave_0: left promiscuous mode [ 1250.251583][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.367719][ T32] appletouch 9-1:0.85: Geyser mode initialized. [ 1250.370777][ T32] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input163 [ 1250.640667][T24309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.768982][T24309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.965811][ T5630] Bluetooth: hci3: command tx timeout [ 1251.117835][ T32] usb 9-1: USB disconnect, device number 33 [ 1251.459344][ T32] appletouch 9-1:0.85: input: appletouch disconnected [ 1251.919482][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6295'. [ 1252.209433][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6295'. [ 1252.389217][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6295'. [ 1252.735215][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.798366][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.838406][ T68] bond0 (unregistering): Released all slaves [ 1252.898571][ T5748] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1252.941415][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1253.189619][ T5748] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1253.189658][ T5748] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1253.189688][ T5748] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1253.197076][ T5748] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1253.197110][ T5748] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.197131][ T5748] usb 9-1: Product: syz [ 1253.197146][ T5748] usb 9-1: Manufacturer: syz [ 1253.197176][ T5748] usb 9-1: SerialNumber: syz [ 1253.242808][ T5748] usb 9-1: config 0 descriptor?? [ 1253.285639][T24347] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1253.286044][T24347] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1253.316028][ T5748] usb 9-1: ucan: probing device on interface #0 [ 1254.758745][T24354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.761672][T24354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.856426][T24347] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6296'. [ 1256.087304][ T5748] ucan 9-1:0.0 can0: registered device [ 1256.109992][ T5748] ucan 9-1:0.0 can0: firmware string: JJþÁàAMö=+J_^üYµÀ3þ¿à~°(-mòƒó1’b€¿í”áX-µØÎ[½üÏð¨ [ 1256.351908][ T5725] usb 9-1: USB disconnect, device number 34 [ 1257.461737][ T5725] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1257.611586][ T5725] usb 9-1: Using ep0 maxpacket: 32 [ 1257.615530][ T5725] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1257.615559][ T5725] usb 9-1: config 0 has no interface number 0 [ 1257.615606][ T5725] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1257.619098][ T5725] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1257.619129][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.619150][ T5725] usb 9-1: Product: syz [ 1257.619166][ T5725] usb 9-1: Manufacturer: syz [ 1257.619181][ T5725] usb 9-1: SerialNumber: syz [ 1257.693877][ T5725] usb 9-1: config 0 descriptor?? [ 1258.165267][T24379] netlink: 'syz.9.6307': attribute type 58 has an invalid length. [ 1258.414266][ T5725] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1258.414298][ T5725] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1258.627300][ T5725] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1258.627339][ T5725] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1258.627365][ T5725] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1258.627726][ T5725] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 1259.470715][ T68] hsr_slave_0: left promiscuous mode [ 1259.490609][ T68] hsr_slave_1: left promiscuous mode [ 1259.491588][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.491608][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.531601][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.531625][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.753042][ T68] veth1_macvtap: left promiscuous mode [ 1259.753155][ T68] veth0_macvtap: left promiscuous mode [ 1259.753511][ T68] veth1_vlan: left promiscuous mode [ 1259.754173][ T68] veth0_vlan: left promiscuous mode [ 1260.035663][T24411] tipc: Failed to remove unknown binding: 66,1,1/0:341698211/341698213 [ 1260.590546][ T32] usb 9-1: USB disconnect, device number 35 [ 1261.057233][T24422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1261.073513][T24422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1261.121259][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1261.180576][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1261.449300][T24411] netlink: 'syz.9.6311': attribute type 29 has an invalid length. [ 1261.449325][T24411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6311'. [ 1262.416573][T24445] FAULT_INJECTION: forcing a failure. [ 1262.416573][T24445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.416616][T24445] CPU: 0 UID: 0 PID: 24445 Comm: syz.8.6319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1262.416646][T24445] Tainted: [L]=SOFTLOCKUP [ 1262.416655][T24445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1262.416669][T24445] Call Trace: [ 1262.416679][T24445] [ 1262.416690][T24445] dump_stack_lvl+0xe8/0x150 [ 1262.416729][T24445] should_fail_ex+0x46b/0x600 [ 1262.416771][T24445] _copy_from_user+0x2d/0xb0 [ 1262.416803][T24445] kstrtouint_from_user+0xd6/0x180 [ 1262.416831][T24445] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1262.416874][T24445] proc_fail_nth_write+0x8e/0x210 [ 1262.416910][T24445] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1262.416950][T24445] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1262.416987][T24445] vfs_write+0x2a3/0xba0 [ 1262.417019][T24445] ? __pfx_vfs_write+0x10/0x10 [ 1262.417045][T24445] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1262.417079][T24445] ? lockdep_hardirqs_on+0x7a/0x110 [ 1262.417110][T24445] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1262.417142][T24445] ? mutex_lock_nested+0x152/0x1d0 [ 1262.417166][T24445] ? fdget_pos+0x252/0x320 [ 1262.417208][T24445] ksys_write+0x156/0x270 [ 1262.417235][T24445] ? __pfx_ksys_write+0x10/0x10 [ 1262.417267][T24445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.417293][T24445] do_syscall_64+0x15f/0xf80 [ 1262.417326][T24445] ? trace_irq_disable+0x3b/0x140 [ 1262.417362][T24445] ? clear_bhb_loop+0x40/0x90 [ 1262.417392][T24445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.417415][T24445] RIP: 0033:0x7fd102a1d68e [ 1262.417437][T24445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1262.417458][T24445] RSP: 002b:00007fd100cadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1262.417483][T24445] RAX: ffffffffffffffda RBX: 00007fd100cae6c0 RCX: 00007fd102a1d68e [ 1262.417500][T24445] RDX: 0000000000000001 RSI: 00007fd100cae0a0 RDI: 0000000000000005 [ 1262.417515][T24445] RBP: 00007fd100cae090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.417529][T24445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1262.417542][T24445] R13: 00007fd102cd6038 R14: 00007fd102cd5fa0 R15: 00007ffdde6b4ca8 [ 1262.417586][T24445] [ 1264.109548][T24476] macsec0: entered promiscuous mode [ 1264.109807][T24476] macsec0: entered allmulticast mode [ 1264.109824][T24476] veth1_macvtap: entered allmulticast mode [ 1264.195230][T24479] netlink: 'syz.8.6327': attribute type 11 has an invalid length. [ 1264.362450][T24482] overlay: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is not a directory [ 1264.538891][ T5725] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1264.708241][ T5725] usb 8-1: Using ep0 maxpacket: 8 [ 1264.717383][ T5725] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1264.717452][ T5725] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1264.717479][ T5725] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.772324][ T5725] usb 8-1: config 0 descriptor?? [ 1265.097986][ T5725] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1265.263370][T24247] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1265.294246][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1265.340674][T24247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.342544][T24247] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1265.421691][T24247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.453392][T24247] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1265.454352][ T68] IPVS: stop unused estimator thread 0... [ 1265.454425][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1265.456987][ T9] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1265.457013][ T9] usb 10-1: config 0 has no interface number 0 [ 1265.457058][ T9] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1265.457085][ T9] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1265.457110][ T9] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1265.463868][ T9] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1265.463955][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.464018][ T9] usb 10-1: Product: syz [ 1265.464061][ T9] usb 10-1: Manufacturer: syz [ 1265.464103][ T9] usb 10-1: SerialNumber: syz [ 1265.564555][ T9] usb 10-1: config 0 descriptor?? [ 1265.568390][T24491] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1265.573806][T24491] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1265.803170][T24491] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1265.803455][T24491] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1265.981743][T24247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1266.013434][ T9] sr9700 10-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1266.063367][ T9] usb 10-1: USB disconnect, device number 9 [ 1266.118017][T24247] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1266.302088][ T5769] usb 8-1: USB disconnect, device number 26 [ 1266.391802][T24247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1266.837107][T24529] netlink: 'syz.7.6334': attribute type 24 has an invalid length. [ 1266.839378][T24247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.887413][ T5725] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1266.908341][T24247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.950658][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.950890][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.064205][ T5725] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1267.069909][ T5725] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.069938][ T5725] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1267.094876][ T5725] usb 9-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1267.094910][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.094933][ T5725] usb 9-1: Product: syz [ 1267.094949][ T5725] usb 9-1: Manufacturer: syz [ 1267.094966][ T5725] usb 9-1: SerialNumber: syz [ 1267.279927][T24516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.280353][T24516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.463717][ T5725] snd-usb-hiface 9-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 1267.823511][ T5725] usb 9-1: USB disconnect, device number 36 [ 1268.582518][T24550] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6340'. [ 1268.822292][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6342'. [ 1268.896523][T24558] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6342'. [ 1269.171177][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6342'. [ 1269.172103][T24562] wg0 speed is unknown, defaulting to 1000 [ 1269.255737][ T5606] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1269.256952][T24558] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6342'. [ 1269.408564][ T5606] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1269.408650][ T5606] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1269.411131][ T5606] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1269.411164][ T5606] usb 8-1: can't read configurations, error -61 [ 1269.535656][ T5606] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1269.617690][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6342'. [ 1269.692005][ T5606] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1269.692095][ T5606] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1269.714492][ T5606] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1269.714535][ T5606] usb 8-1: can't read configurations, error -61 [ 1269.718664][ T5606] usb usb8-port1: attempt power cycle [ 1269.832513][T24247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.075288][ T5606] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1270.101568][ T5606] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1270.101661][ T5606] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1270.105441][ T5606] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1270.105491][ T5606] usb 8-1: can't read configurations, error -61 [ 1270.235212][ T5606] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1270.261357][ T5606] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1270.261448][ T5606] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1270.263200][ T5606] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1270.263238][ T5606] usb 8-1: can't read configurations, error -61 [ 1270.263713][ T5606] usb usb8-port1: unable to enumerate USB device [ 1270.440493][T24594] IPVS: length: 44 != 8 [ 1270.612135][T24247] veth0_vlan: entered promiscuous mode [ 1270.648438][T24247] veth1_vlan: entered promiscuous mode [ 1270.725090][ T5769] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1270.781111][T24247] veth0_macvtap: entered promiscuous mode [ 1270.813229][T24247] veth1_macvtap: entered promiscuous mode [ 1270.871984][T24247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.886104][ T5769] usb 10-1: Using ep0 maxpacket: 32 [ 1270.893055][ T5769] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1270.893084][ T5769] usb 10-1: config 0 has no interface number 0 [ 1270.893235][ T5769] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1270.938302][ T5769] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1270.938336][ T5769] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.938358][ T5769] usb 10-1: Product: syz [ 1270.938374][ T5769] usb 10-1: Manufacturer: syz [ 1270.938391][ T5769] usb 10-1: SerialNumber: syz [ 1271.002005][ T5769] usb 10-1: config 0 descriptor?? [ 1271.015852][T24247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.211340][ T1451] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.224128][ T1189] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.224446][ T1189] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.248825][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.511217][ T5769] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1272.511273][ T5769] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1272.511291][ T5769] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1272.511392][ T5769] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1272.827911][ T5769] usb 10-1: USB disconnect, device number 10 [ 1274.955564][T24515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.955588][T24515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.092824][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1275.261298][ T9] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1275.261425][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.261448][ T9] usb 10-1: Product: syz [ 1275.261471][ T9] usb 10-1: Manufacturer: syz [ 1275.261486][ T9] usb 10-1: SerialNumber: syz [ 1275.419898][ T9] usb 10-1: config 0 descriptor?? [ 1275.631325][ T9] cx82310_eth 10-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1275.733752][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.733776][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.036394][ T9] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1276.416843][ T9] usb 10-1: USB disconnect, device number 11 [ 1276.652192][ T9619] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1276.823517][ T9619] usb 7-1: Using ep0 maxpacket: 32 [ 1276.826935][ T9619] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.826973][ T9619] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1276.826997][ T9619] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1276.827024][ T9619] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1276.827050][ T9619] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1276.874375][T24645] FAULT_INJECTION: forcing a failure. [ 1276.874375][T24645] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.874458][T24645] CPU: 1 UID: 0 PID: 24645 Comm: syz.8.6364 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1276.874491][T24645] Tainted: [L]=SOFTLOCKUP [ 1276.874516][T24645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1276.874551][T24645] Call Trace: [ 1276.874573][T24645] [ 1276.874605][T24645] dump_stack_lvl+0xe8/0x150 [ 1276.874647][T24645] should_fail_ex+0x46b/0x600 [ 1276.874745][T24645] should_failslab+0xa8/0x100 [ 1276.874786][T24645] __kmalloc_noprof+0xdf/0x7b0 [ 1276.874831][T24645] ? __vb2_queue_alloc+0x29d/0x15a0 [ 1276.874972][T24645] __vb2_queue_alloc+0x29d/0x15a0 [ 1276.875000][T24645] ? vid_cap_queue_setup+0x1402/0x1580 [ 1276.875129][T24645] vb2_core_reqbufs+0xc1f/0x1410 [ 1276.875177][T24645] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1276.875208][T24645] ? __kasan_kmalloc+0x93/0xb0 [ 1276.875241][T24645] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1276.875261][T24645] ? __vb2_init_fileio+0x1e8/0xff0 [ 1276.875297][T24645] __vb2_init_fileio+0x318/0xff0 [ 1276.875362][T24645] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1276.875451][T24645] vb2_core_poll+0x4c1/0x830 [ 1276.875484][T24645] ? vb2_fop_poll+0xcc/0x310 [ 1276.875600][T24645] vb2_fop_poll+0x199/0x310 [ 1276.875632][T24645] ? __fget_files+0x2a/0x420 [ 1276.875675][T24645] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1276.875722][T24645] v4l2_poll+0x14a/0x2c0 [ 1276.875778][T24645] ? __pfx_v4l2_poll+0x10/0x10 [ 1276.875810][T24645] do_sys_poll+0x92e/0xf50 [ 1276.875882][T24645] ? do_sys_poll+0x3d1/0xf50 [ 1276.875942][T24645] ? __pfx_do_sys_poll+0x10/0x10 [ 1276.875979][T24645] ? aa_file_perm+0x192/0x15f0 [ 1276.876089][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876130][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876184][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876261][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876296][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876327][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876357][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876405][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876451][T24645] ? __pfx_pollwake+0x10/0x10 [ 1276.876572][T24645] ? set_user_sigmask+0xcd/0x1c0 [ 1276.876623][T24645] ? __pfx_set_user_sigmask+0x10/0x10 [ 1276.876669][T24645] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1276.876734][T24645] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1276.876782][T24645] __se_sys_ppoll+0x209/0x2b0 [ 1276.876812][T24645] ? fput+0xa0/0xd0 [ 1276.876898][T24645] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1276.876934][T24645] ? __pfx_ksys_write+0x10/0x10 [ 1276.876965][T24645] ? __x64_sys_ppoll+0x20/0xc0 [ 1276.877027][T24645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.877078][T24645] do_syscall_64+0x15f/0xf80 [ 1276.877111][T24645] ? trace_irq_disable+0x3b/0x140 [ 1276.877146][T24645] ? clear_bhb_loop+0x40/0x90 [ 1276.877190][T24645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.877254][T24645] RIP: 0033:0x7fd102a5ce59 [ 1276.877291][T24645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.877312][T24645] RSP: 002b:00007fd100cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1276.877358][T24645] RAX: ffffffffffffffda RBX: 00007fd102cd5fa0 RCX: 00007fd102a5ce59 [ 1276.877375][T24645] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1276.877390][T24645] RBP: 00007fd100cae090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.877411][T24645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.877425][T24645] R13: 00007fd102cd6038 R14: 00007fd102cd5fa0 R15: 00007ffdde6b4ca8 [ 1276.877460][T24645] [ 1276.888404][ T9619] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1276.888438][ T9619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1276.888460][ T9619] usb 7-1: SerialNumber: syz [ 1277.329516][T24638] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1277.341218][ T9619] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1277.363469][ T9619] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1277.538699][ T9619] usb 7-1: USB disconnect, device number 43 [ 1277.610684][T24653] FAULT_INJECTION: forcing a failure. [ 1277.610684][T24653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.610725][T24653] CPU: 0 UID: 0 PID: 24653 Comm: syz.9.6367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1277.610755][T24653] Tainted: [L]=SOFTLOCKUP [ 1277.610765][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1277.610779][T24653] Call Trace: [ 1277.610788][T24653] [ 1277.610799][T24653] dump_stack_lvl+0xe8/0x150 [ 1277.610829][T24653] should_fail_ex+0x46b/0x600 [ 1277.610871][T24653] _copy_from_user+0x2d/0xb0 [ 1277.610902][T24653] ___sys_sendmsg+0x1c6/0x360 [ 1277.610946][T24653] ? __lock_acquire+0x6b5/0x2d10 [ 1277.610975][T24653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1277.611006][T24653] ? __lock_acquire+0x6b5/0x2d10 [ 1277.611036][T24653] ? kstrtouint+0x6e/0xe0 [ 1277.611112][T24653] __sys_sendmmsg+0x282/0x4e0 [ 1277.611152][T24653] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1277.611196][T24653] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1277.611237][T24653] ? ksys_write+0x248/0x270 [ 1277.611261][T24653] ? __pfx_ksys_write+0x10/0x10 [ 1277.611289][T24653] __x64_sys_sendmmsg+0xa0/0xc0 [ 1277.611325][T24653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.611349][T24653] do_syscall_64+0x15f/0xf80 [ 1277.611379][T24653] ? trace_irq_disable+0x3b/0x140 [ 1277.611414][T24653] ? clear_bhb_loop+0x40/0x90 [ 1277.611443][T24653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.611466][T24653] RIP: 0033:0x7ff5a965ce59 [ 1277.611486][T24653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.611506][T24653] RSP: 002b:00007ff5a78b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1277.611529][T24653] RAX: ffffffffffffffda RBX: 00007ff5a98d5fa0 RCX: 00007ff5a965ce59 [ 1277.611545][T24653] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1277.611559][T24653] RBP: 00007ff5a78b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.611573][T24653] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000002 [ 1277.611586][T24653] R13: 00007ff5a98d6038 R14: 00007ff5a98d5fa0 R15: 00007ffd3c8f6908 [ 1277.611620][T24653] [ 1277.975939][T24657] netlink: 200 bytes leftover after parsing attributes in process `syz.9.6368'. [ 1277.975957][T24657] tc_dump_action: action bad kind [ 1278.051332][ T5725] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1278.251239][ T5725] usb 8-1: Using ep0 maxpacket: 8 [ 1278.256738][ T5725] usb 8-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 1278.256799][ T5725] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1278.256831][ T5725] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1278.256868][ T5725] usb 8-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1278.256894][ T5725] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.324485][ T5725] usb 8-1: config 0 descriptor?? [ 1278.558107][T24669] Invalid logical block size (1048576) [ 1278.734295][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734334][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734363][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734392][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734419][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734446][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734474][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734502][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734528][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734556][ T5725] logitech 0003:046D:CA04.0030: unknown main item tag 0x0 [ 1278.734738][T24674] FAULT_INJECTION: forcing a failure. [ 1278.734738][T24674] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.734769][T24674] CPU: 0 UID: 0 PID: 24674 Comm: syz.9.6376 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1278.734795][T24674] Tainted: [L]=SOFTLOCKUP [ 1278.734803][T24674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1278.734815][T24674] Call Trace: [ 1278.734823][T24674] [ 1278.734831][T24674] dump_stack_lvl+0xe8/0x150 [ 1278.734862][T24674] should_fail_ex+0x46b/0x600 [ 1278.734903][T24674] should_failslab+0xa8/0x100 [ 1278.734926][T24674] __kmalloc_noprof+0xdf/0x7b0 [ 1278.734960][T24674] ? ima_alloc_init_template+0x9a/0x700 [ 1278.735077][T24674] ima_alloc_init_template+0x9a/0x700 [ 1278.735121][T24674] ima_store_measurement+0x1d4/0x680 [ 1278.735165][T24674] ? release_dentry_name_snapshot+0x42/0xb0 [ 1278.735196][T24674] ? __pfx_ima_store_measurement+0x10/0x10 [ 1278.735230][T24674] ? ima_d_path+0x1cb/0x230 [ 1278.735284][T24674] process_measurement+0x13f1/0x1c90 [ 1278.735337][T24674] ? __pfx_process_measurement+0x10/0x10 [ 1278.735415][T24674] ? tomoyo_find_next_domain+0x1732/0x1aa0 [ 1278.735472][T24674] ima_bprm_check+0x121/0x180 [ 1278.735509][T24674] ? __pfx_ima_bprm_check+0x10/0x10 [ 1278.735541][T24674] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1278.735577][T24674] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1278.735610][T24674] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1278.735643][T24674] ? tomoyo_bprm_check_security+0x162/0x180 [ 1278.735680][T24674] security_bprm_check+0xcd/0x240 [ 1278.735710][T24674] bprm_execve+0x8a4/0x1510 [ 1278.735763][T24674] ? __pfx_bprm_execve+0x10/0x10 [ 1278.735799][T24674] ? rt_spin_unlock+0x160/0x200 [ 1278.735827][T24674] ? alloc_bprm+0x50e/0x5c0 [ 1278.735845][T24674] ? count+0x1cb/0x230 [ 1278.735871][T24674] do_execveat_common+0x50d/0x690 [ 1278.735906][T24674] __x64_sys_execveat+0xc7/0xf0 [ 1278.735930][T24674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.735955][T24674] do_syscall_64+0x15f/0xf80 [ 1278.735988][T24674] ? trace_irq_disable+0x3b/0x140 [ 1278.736025][T24674] ? clear_bhb_loop+0x40/0x90 [ 1278.736054][T24674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.736079][T24674] RIP: 0033:0x7ff5a965ce59 [ 1278.736100][T24674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.736121][T24674] RSP: 002b:00007ff5a78b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1278.736145][T24674] RAX: ffffffffffffffda RBX: 00007ff5a98d5fa0 RCX: 00007ff5a965ce59 [ 1278.736162][T24674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1278.736176][T24674] RBP: 00007ff5a78b6090 R08: 0000000000001000 R09: 0000000000000000 [ 1278.736191][T24674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.736204][T24674] R13: 00007ff5a98d6038 R14: 00007ff5a98d5fa0 R15: 00007ffd3c8f6908 [ 1278.736238][T24674] [ 1278.830986][ T5725] logitech 0003:046D:CA04.0030: hidraw0: USB HID v0.07 Device [HID 046d:ca04] on usb-dummy_hcd.7-1/input0 [ 1278.831138][ T5725] logitech 0003:046D:CA04.0030: no inputs found [ 1279.243201][ T38] audit: type=1804 audit(1779179526.618:7229): pid=24674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.9.6376" name=6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0 dev="tmpfs" ino=1201 res=0 errno=0 [ 1279.313655][ T5725] usb 8-1: USB disconnect, device number 31 [ 1279.615286][T24683] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6379'. [ 1279.830405][ T5606] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1279.877120][T24693] loop9: detected capacity change from 0 to 4096 [ 1279.933396][ T13] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1279.954706][ T13] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1279.990591][ T5606] usb 10-1: device descriptor read/64, error -71 [ 1280.020332][ T13] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1280.058579][ T5725] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1280.190370][ T5725] usb 9-1: device descriptor read/64, error -71 [ 1280.230307][ T5606] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1280.250922][ T1459] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 1280.370271][ T5606] usb 10-1: device descriptor read/64, error -71 [ 1280.450201][ T5725] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1280.459006][ T5961] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1280.480455][ T5606] usb usb10-port1: attempt power cycle [ 1280.580192][ T5725] usb 9-1: device descriptor read/64, error -71 [ 1280.648951][T24698] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 1280.648976][T24698] binder: 24697:24698 ioctl 4018620d 200000000100 returned -1 [ 1280.710001][ T5725] usb usb9-port1: attempt power cycle [ 1280.723343][T24698] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 1280.723366][T24698] binder: 24697:24698 ioctl 4018620d 200000004a80 returned -1 [ 1280.849882][ T5606] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1280.882905][ T5606] usb 10-1: device descriptor read/8, error -71 [ 1281.027281][T24706] FAULT_INJECTION: forcing a failure. [ 1281.027281][T24706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.027312][T24706] CPU: 0 UID: 0 PID: 24706 Comm: syz.6.6387 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1281.027335][T24706] Tainted: [L]=SOFTLOCKUP [ 1281.027341][T24706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1281.027352][T24706] Call Trace: [ 1281.027359][T24706] [ 1281.027365][T24706] dump_stack_lvl+0xe8/0x150 [ 1281.027391][T24706] should_fail_ex+0x46b/0x600 [ 1281.027421][T24706] _copy_from_user+0x2d/0xb0 [ 1281.027443][T24706] binder_ioctl_write_read+0xadd/0xa490 [ 1281.027548][T24706] ? is_bpf_text_address+0x26/0x2b0 [ 1281.027577][T24706] ? __kernel_text_address+0xd/0x30 [ 1281.027613][T24706] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1281.027637][T24706] ? stack_depot_save_flags+0x33/0x810 [ 1281.027661][T24706] ? do_raw_spin_lock+0x12b/0x2f0 [ 1281.027709][T24706] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1281.027729][T24706] ? reacquire_held_locks+0x104/0x190 [ 1281.027748][T24706] ? rt_spin_lock+0x1e0/0x400 [ 1281.027766][T24706] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1281.027786][T24706] ? rt_spin_unlock+0x14f/0x200 [ 1281.027810][T24706] ? binder_get_thread+0x177/0x6d0 [ 1281.027835][T24706] binder_ioctl+0x426/0x1b10 [ 1281.027856][T24706] ? tomoyo_path_number_perm+0x219/0x630 [ 1281.027875][T24706] ? tomoyo_path_number_perm+0x219/0x630 [ 1281.027894][T24706] ? do_vfs_ioctl+0x117b/0x1540 [ 1281.027911][T24706] ? __pfx_binder_ioctl+0x10/0x10 [ 1281.027933][T24706] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1281.027973][T24706] ? __fget_files+0x2a/0x420 [ 1281.027998][T24706] ? __fget_files+0x2a/0x420 [ 1281.028019][T24706] ? __fget_files+0x3a6/0x420 [ 1281.028040][T24706] ? __fget_files+0x2a/0x420 [ 1281.028064][T24706] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1281.028091][T24706] ? __pfx_binder_ioctl+0x10/0x10 [ 1281.028112][T24706] __se_sys_ioctl+0xff/0x170 [ 1281.028129][T24706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.028146][T24706] do_syscall_64+0x15f/0xf80 [ 1281.028169][T24706] ? trace_irq_disable+0x3b/0x140 [ 1281.028195][T24706] ? clear_bhb_loop+0x40/0x90 [ 1281.028214][T24706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.028231][T24706] RIP: 0033:0x7fc1253ece59 [ 1281.028246][T24706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.028261][T24706] RSP: 002b:00007fc12363e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.028279][T24706] RAX: ffffffffffffffda RBX: 00007fc125665fa0 RCX: 00007fc1253ece59 [ 1281.028292][T24706] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1281.028303][T24706] RBP: 00007fc12363e090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.028313][T24706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.028323][T24706] R13: 00007fc125666038 R14: 00007fc125665fa0 R15: 00007ffd10fa2a08 [ 1281.028348][T24706] [ 1281.028449][T24706] binder: 24705:24706 ioctl c0306201 2000000001c0 returned -14 [ 1281.050015][ T5725] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1281.147835][ T5725] usb 9-1: device descriptor read/8, error -71 [ 1281.187057][ T5606] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1281.213253][ T32] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 1281.255880][ T5606] usb 10-1: device descriptor read/8, error -71 [ 1281.385037][ T32] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1281.385104][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1281.385125][ T32] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1281.385144][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1281.385164][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1281.392047][ T32] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1281.392215][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1281.392292][ T32] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1281.392379][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1281.392451][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1281.474573][ T32] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1281.474751][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1281.474829][ T32] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1281.474896][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1281.474964][ T32] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1281.477056][ T5606] usb usb10-port1: unable to enumerate USB device [ 1281.530003][ T5725] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1281.565385][ T32] usb 8-1: string descriptor 0 read error: -22 [ 1281.565535][ T32] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1281.565554][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.567586][ T5725] usb 9-1: device descriptor read/8, error -71 [ 1281.664328][ T32] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1281.670962][ T5725] usb usb9-port1: unable to enumerate USB device [ 1281.714228][ T5630] Bluetooth: hci3: adv larger than maximum supported [ 1281.716633][T24708] overlayfs: workdir and upperdir must reside under the same mount [ 1281.741387][ T5630] Bluetooth: hci3: adv larger than maximum supported [ 1281.781719][T24709] overlayfs: workdir and upperdir must reside under the same mount [ 1281.844084][ T32] usb 8-1: USB disconnect, device number 32 [ 1282.339253][ T32] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1282.370331][T13856] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1282.469112][ T32] usb 8-1: device descriptor read/64, error -71 [ 1282.519101][T13856] usb 7-1: Using ep0 maxpacket: 16 [ 1282.522154][T13856] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.522183][T13856] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1282.525268][T13856] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1282.525297][T13856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.525323][T13856] usb 7-1: Product: syz [ 1282.525334][T13856] usb 7-1: Manufacturer: syz [ 1282.525346][T13856] usb 7-1: SerialNumber: syz [ 1282.624457][T13856] usb 7-1: 0:2 : does not exist [ 1282.739200][ T32] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1282.843948][T13856] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1282.902198][ T32] usb 8-1: device descriptor read/64, error -71 [ 1282.914049][T24722] netlink: 'syz.9.6393': attribute type 1 has an invalid length. [ 1283.009431][ T32] usb usb8-port1: attempt power cycle [ 1283.106256][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.106613][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.106920][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.107309][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.107594][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.107846][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.122009][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.126567][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.138409][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.142997][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.152503][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.154245][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.182359][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.186983][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.205063][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.220577][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.224283][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.224681][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.224952][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.225216][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.225484][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.255697][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.263051][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.272025][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.280265][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.294944][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.306371][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.317848][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.318163][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.323071][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.339845][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.340271][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.340672][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.353962][ T32] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1283.368237][T13856] usb 7-1: USB disconnect, device number 44 [ 1283.378146][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.407164][ T32] usb 8-1: device descriptor read/8, error -71 [ 1283.407419][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.407718][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.408047][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.482615][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.482966][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.483227][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.483476][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.483837][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.491374][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.496664][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.497319][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.498281][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.515198][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.535099][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.567612][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.569196][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.575143][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.597174][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.597502][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.597807][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.598064][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.599413][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.623673][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.639348][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.647922][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.648567][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.654688][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.662925][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.672599][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.682309][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.688474][ T32] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1283.704986][T24728] ceph: Unknown parameter 'a‡Ùªðr'‡¢ÇA‚)ì­ôÈC<—1' [ 1283.748523][ T32] usb 8-1: device descriptor read/8, error -71 [ 1283.859003][ T32] usb usb8-port1: unable to enumerate USB device [ 1283.953719][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.971625][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6396'. [ 1284.308681][T24743] binder: 24741:24743 ioctl 40046205 0 returned -22 [ 1285.215676][T24754] FAULT_INJECTION: forcing a failure. [ 1285.215676][T24754] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.215718][T24754] CPU: 1 UID: 0 PID: 24754 Comm: syz.9.6404 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1285.215750][T24754] Tainted: [L]=SOFTLOCKUP [ 1285.215759][T24754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1285.215773][T24754] Call Trace: [ 1285.215783][T24754] [ 1285.215793][T24754] dump_stack_lvl+0xe8/0x150 [ 1285.215827][T24754] should_fail_ex+0x46b/0x600 [ 1285.215882][T24754] should_failslab+0xa8/0x100 [ 1285.215926][T24754] __kmalloc_noprof+0xdf/0x7b0 [ 1285.215960][T24754] ? kfree+0x4d/0x6c0 [ 1285.215991][T24754] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1285.216029][T24754] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1285.216060][T24754] ? tomoyo_domain+0xd7/0x130 [ 1285.216096][T24754] ? tomoyo_path_number_perm+0x219/0x630 [ 1285.216121][T24754] tomoyo_path_number_perm+0x246/0x630 [ 1285.216153][T24754] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1285.216176][T24754] ? __lock_acquire+0x6b5/0x2d10 [ 1285.216204][T24754] ? do_raw_spin_lock+0x12b/0x2f0 [ 1285.216272][T24754] ? __fget_files+0x2a/0x420 [ 1285.216314][T24754] ? __fget_files+0x2a/0x420 [ 1285.216344][T24754] ? __fget_files+0x3a6/0x420 [ 1285.216373][T24754] ? __fget_files+0x2a/0x420 [ 1285.216408][T24754] security_file_ioctl+0xc3/0x2a0 [ 1285.216448][T24754] __se_sys_ioctl+0x47/0x170 [ 1285.216471][T24754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.216497][T24754] do_syscall_64+0x15f/0xf80 [ 1285.216529][T24754] ? trace_irq_disable+0x3b/0x140 [ 1285.216563][T24754] ? clear_bhb_loop+0x40/0x90 [ 1285.216593][T24754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.216616][T24754] RIP: 0033:0x7ff5a965ce59 [ 1285.216636][T24754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.216657][T24754] RSP: 002b:00007ff5a78b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.216682][T24754] RAX: ffffffffffffffda RBX: 00007ff5a98d5fa0 RCX: 00007ff5a965ce59 [ 1285.216699][T24754] RDX: 0000200000000340 RSI: 00000000400448ca RDI: 0000000000000004 [ 1285.216715][T24754] RBP: 00007ff5a78b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.216728][T24754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.216741][T24754] R13: 00007ff5a98d6038 R14: 00007ff5a98d5fa0 R15: 00007ffd3c8f6908 [ 1285.216775][T24754] [ 1285.216888][T24754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1285.287737][ T5769] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1285.510467][ T5769] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1285.510502][ T5769] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.510562][ T5769] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1285.510588][ T5769] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.649719][T24756] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6405'. [ 1285.696250][T24758] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6406'. [ 1285.696276][T24758] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6406'. [ 1285.696296][T24758] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6406'. [ 1285.773027][ T5769] usb 9-1: usb_control_msg returned -32 [ 1285.773080][ T5769] usbtmc 9-1:16.0: can't read capabilities [ 1286.145790][T24769] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1286.160482][ T9619] usb 9-1: USB disconnect, device number 41 [ 1286.239584][T24772] netlink: 763 bytes leftover after parsing attributes in process `syz.9.6411'. [ 1286.242939][T24772] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6411'. [ 1286.242956][T24772] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6411'. [ 1286.392320][T24776] netlink: 'syz.9.6413': attribute type 12 has an invalid length. [ 1287.036875][T13856] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1287.256843][T13856] usb 9-1: Using ep0 maxpacket: 8 [ 1287.258874][T13856] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1287.258908][T13856] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1287.258927][T13856] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 55584, setting to 1024 [ 1287.258947][T13856] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1287.258966][T13856] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.258998][T13856] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1287.259015][T13856] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.493601][T13856] usb 9-1: GET_CAPABILITIES returned 0 [ 1287.493635][T13856] usbtmc 9-1:16.0: can't read capabilities [ 1287.727338][T11557] usb 9-1: USB disconnect, device number 42 [ 1288.276728][T13856] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1288.428862][T13856] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.428893][T13856] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1288.429130][T13856] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1288.429158][T13856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.444555][T13856] usb 10-1: config 0 descriptor?? [ 1288.892915][T13856] usb 10-1: string descriptor 0 read error: -71 [ 1288.910251][T13856] usb 10-1: USB disconnect, device number 16 [ 1290.115235][ T5769] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1290.278067][ T5769] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1290.278101][ T5769] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1290.278131][ T5769] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1290.283640][ T5769] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1290.283673][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.283697][ T5769] usb 8-1: Product: syz [ 1290.283713][ T5769] usb 8-1: Manufacturer: syz [ 1290.283730][ T5769] usb 8-1: SerialNumber: syz [ 1290.363432][ T5769] usb 8-1: config 0 descriptor?? [ 1290.374324][T24820] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1290.375952][T24820] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1290.383650][ T5769] usb 8-1: ucan: probing device on interface #0 [ 1290.821882][T24820] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6429'. [ 1290.844852][ T32] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1290.901991][T24826] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6432'. [ 1290.996521][ T32] usb 9-1: Using ep0 maxpacket: 32 [ 1291.000886][ T32] usb 9-1: config 51 has an invalid interface number: 93 but max is 0 [ 1291.000929][ T32] usb 9-1: config 51 has an invalid interface association descriptor of length 2, skipping [ 1291.000952][ T32] usb 9-1: config 51 has no interface number 0 [ 1291.000998][ T32] usb 9-1: config 51 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1291.001021][ T32] usb 9-1: config 51 interface 93 has no altsetting 0 [ 1291.036407][ T32] usb 9-1: New USB device found, idVendor=0af0, idProduct=8304, bcdDevice= 9.66 [ 1291.036441][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.036472][ T32] usb 9-1: Product: syz [ 1291.036515][ T32] usb 9-1: Manufacturer: syz [ 1291.036558][ T32] usb 9-1: SerialNumber: syz [ 1291.126535][T24832] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1291.144824][ T5769] ucan 8-1:0.0 can0: registered device [ 1291.247537][ T5769] ucan 8-1:0.0 can0: firmware string: JJþÁàAMö=+J_^üYµÀ3þ¿à~°(-mòƒó1’b€¿í”áX-µØÎ[½üÏð¨ [ 1291.472675][T13856] usb 8-1: USB disconnect, device number 37 [ 1291.708633][T24841] comedi comedi2: aio_aio12_8: I/O base address or length out of range [ 1292.404216][T11557] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1292.450990][T24863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1292.582691][T11557] usb 7-1: Using ep0 maxpacket: 32 [ 1292.593141][T11557] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.593179][T11557] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1292.593204][T11557] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1292.593232][T11557] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1292.593259][T11557] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1292.604889][T11557] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1292.604923][T11557] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1292.604945][T11557] usb 7-1: SerialNumber: syz [ 1292.692780][T24855] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1292.714253][T11557] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1292.756590][T11557] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1292.845645][T13856] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1293.030685][T13856] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 1293.031971][T13856] usb 8-1: config 1 has no interface number 0 [ 1293.047286][T13856] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1293.047326][T13856] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1293.047355][T13856] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.091794][T13856] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1293.091818][T13856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.091834][T13856] usb 8-1: Product: syz [ 1293.091845][T13856] usb 8-1: Manufacturer: syz [ 1293.091856][T13856] usb 8-1: SerialNumber: syz [ 1293.178302][T24857] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1293.411514][T24857] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1294.181069][T13856] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 1294.182419][T13856] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 1294.182446][T13856] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 1294.278749][T13856] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 1294.278932][T13856] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 1294.414935][ T32] hso 9-1:51.93: Not our interface [ 1294.431782][T13856] usb 8-1: USB disconnect, device number 38 [ 1294.512341][T13856] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem [ 1294.575550][ T32] usb 9-1: USB disconnect, device number 43 [ 1294.964691][T13856] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1295.278488][ T5725] usb 7-1: USB disconnect, device number 45 [ 1295.315502][T24901] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6446'. [ 1296.094866][ T32] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1296.118410][T24913] FAULT_INJECTION: forcing a failure. [ 1296.118410][T24913] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.118452][T24913] CPU: 1 UID: 0 PID: 24913 Comm: syz.7.6452 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1296.118494][T24913] Tainted: [L]=SOFTLOCKUP [ 1296.118503][T24913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1296.118517][T24913] Call Trace: [ 1296.118527][T24913] [ 1296.118537][T24913] dump_stack_lvl+0xe8/0x150 [ 1296.118572][T24913] should_fail_ex+0x46b/0x600 [ 1296.118615][T24913] should_failslab+0xa8/0x100 [ 1296.118641][T24913] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 1296.118683][T24913] ? scm_fp_dup+0x5e/0x3a0 [ 1296.118711][T24913] kmemdup_noprof+0x2b/0x70 [ 1296.118744][T24913] scm_fp_dup+0x5e/0x3a0 [ 1296.118766][T24913] ? unix_stream_read_actor+0x77/0xb0 [ 1296.118804][T24913] unix_stream_read_generic+0xae2/0x23a0 [ 1296.118875][T24913] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1296.118912][T24913] ? __lock_acquire+0x6b5/0x2d10 [ 1296.118959][T24913] unix_stream_recvmsg+0x16b/0x1d0 [ 1296.118988][T24913] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1296.119012][T24913] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1296.119051][T24913] ? __lock_acquire+0x6b5/0x2d10 [ 1296.119081][T24913] ? aa_sock_msg_perm+0x107/0x200 [ 1296.119107][T24913] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1296.119134][T24913] sock_recvmsg_nosec+0x10c/0x140 [ 1296.119165][T24913] ____sys_recvmsg+0x23d/0x4f0 [ 1296.119209][T24913] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1296.119260][T24913] ? import_iovec+0x73/0xa0 [ 1296.119294][T24913] ___sys_recvmsg+0x215/0x590 [ 1296.119333][T24913] ? __pfx____sys_recvmsg+0x10/0x10 [ 1296.119372][T24913] ? __fget_files+0x2a/0x420 [ 1296.119436][T24913] do_recvmmsg+0x33a/0x800 [ 1296.119487][T24913] ? __pfx_do_recvmmsg+0x10/0x10 [ 1296.119536][T24913] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1296.119581][T24913] __x64_sys_recvmmsg+0x198/0x250 [ 1296.119620][T24913] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1296.119666][T24913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.119692][T24913] do_syscall_64+0x15f/0xf80 [ 1296.119723][T24913] ? trace_irq_disable+0x3b/0x140 [ 1296.119759][T24913] ? clear_bhb_loop+0x40/0x90 [ 1296.119788][T24913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.119812][T24913] RIP: 0033:0x7f401002ce59 [ 1296.119833][T24913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.119854][T24913] RSP: 002b:00007f400e286028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1296.119879][T24913] RAX: ffffffffffffffda RBX: 00007f40102a5fa0 RCX: 00007f401002ce59 [ 1296.119896][T24913] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 1296.119910][T24913] RBP: 00007f400e286090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.119925][T24913] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1296.119938][T24913] R13: 00007f40102a6038 R14: 00007f40102a5fa0 R15: 00007ffe6c8e4bb8 [ 1296.119973][T24913] [ 1296.272821][ T32] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1296.272917][ T32] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1296.273013][ T32] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1296.496529][ T32] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1296.496564][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.496580][ T32] usb 7-1: Product: syz [ 1296.496591][ T32] usb 7-1: Manufacturer: syz [ 1296.496602][ T32] usb 7-1: SerialNumber: syz [ 1296.548179][ T32] usb 7-1: config 0 descriptor?? [ 1296.549094][T24909] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1296.549242][T24909] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1296.581076][ T32] usb 7-1: ucan: probing device on interface #0 [ 1296.980826][T24909] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6448'. [ 1297.068852][T13856] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1297.211740][T13856] usb 8-1: device descriptor read/64, error -71 [ 1297.323792][ T32] ucan 7-1:0.0 can0: registered device [ 1297.406717][ T32] ucan 7-1:0.0 can0: firmware string: unknown [ 1297.446209][ T32] usb 7-1: USB disconnect, device number 46 [ 1297.476506][T13856] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1297.602094][T13856] usb 8-1: device descriptor read/64, error -71 [ 1297.712467][T13856] usb usb8-port1: attempt power cycle [ 1298.091271][T13856] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1298.133985][T13856] usb 8-1: device descriptor read/8, error -71 [ 1298.190873][T24948] loop5: detected capacity change from 0 to 4119 [ 1298.280670][ T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x2, refcnt=3 [ 1298.291069][T18520] lo_rw_aio(loop5) starting read with raw_refcnt=0x2, refcnt=3 [ 1298.293546][T18520] lo_rw_aio(loop5) starting read with raw_refcnt=0x2, refcnt=3 [ 1298.371918][T13856] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1298.393630][T13856] usb 8-1: device descriptor read/8, error -71 [ 1298.431427][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x2, refcnt=3 [ 1298.449425][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x2, refcnt=3 [ 1298.455261][ T5961] buffer_io_error: 10 callbacks suppressed [ 1298.455552][ T5961] Buffer I/O error on dev loop5, logical block 514, async page read [ 1298.494441][ T9619] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1298.513873][T13856] usb usb8-port1: unable to enumerate USB device [ 1298.661035][ T9619] usb 7-1: Using ep0 maxpacket: 32 [ 1298.666050][ T9619] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1298.666085][ T9619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.666108][ T9619] usb 7-1: Product: syz [ 1298.666125][ T9619] usb 7-1: Manufacturer: syz [ 1298.666141][ T9619] usb 7-1: SerialNumber: syz [ 1298.711132][ T9619] usb 7-1: config 0 descriptor?? [ 1298.946824][T24946] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x1, refcnt=2 [ 1298.968514][ T9619] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 047 [ 1299.114739][ T32] usb 7-1: USB disconnect, device number 47 [ 1299.691248][T24968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6469'. [ 1299.817146][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.817783][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.981147][ T32] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1300.121792][T24978] block nbd1: server does not support multiple connections per device. [ 1300.150920][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 1300.156397][T24978] block nbd1: shutting down sockets [ 1300.179400][ T32] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1300.179431][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.179457][ T32] usb 7-1: Product: syz [ 1300.179468][ T32] usb 7-1: Manufacturer: syz [ 1300.179479][ T32] usb 7-1: SerialNumber: syz [ 1300.211305][T11557] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1300.243891][ T32] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1300.243919][ T32] r8152-cfgselector 7-1: config 0 descriptor?? [ 1300.375101][T11557] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1300.375132][T11557] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.400998][T11557] usb 8-1: config 0 descriptor?? [ 1300.408698][T11557] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1300.616610][T11557] gp8psk: usb in 128 operation failed. [ 1300.843613][T24975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.845287][T24975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.849317][T11557] gp8psk: FW Version = 4.197.100 (0x4c564) Build 2149/194/189 [ 1301.048623][T11557] gp8psk: usb in 149 operation failed. [ 1301.048646][T11557] gp8psk: failed to get FPGA version [ 1301.077794][T11557] gp8psk: usb in 138 operation failed. [ 1301.077819][T11557] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1301.077864][T11557] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1301.123729][T11557] usb 8-1: USB disconnect, device number 43 [ 1301.347312][T24980] openvswitch: netlink: Actions may not be safe on all matching packets [ 1301.392358][T24980] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6473'. [ 1301.393632][T24980] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6473'. [ 1301.395315][T24980] syzkaller1: entered promiscuous mode [ 1301.395333][T24980] syzkaller1: entered allmulticast mode [ 1301.787964][ T32] r8152-cfgselector 7-1: USB disconnect, device number 48 [ 1302.003414][T24982] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6474'. [ 1302.409262][ T32] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1302.559246][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 1302.562184][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.562221][ T32] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1302.562269][ T32] usb 7-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 1302.562295][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.568523][ T32] usb 7-1: config 0 descriptor?? [ 1302.867786][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6475'. [ 1302.997713][ T32] usbhid 7-1:0.0: can't add hid device: -71 [ 1302.997805][ T32] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1303.035872][ T32] usb 7-1: USB disconnect, device number 49 [ 1303.184798][T25009] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.6483' resets device [ 1303.313484][T25013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6484'. [ 1303.539749][ T9619] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1303.646079][T25008] XFS (nbd6): SB validate failed with error -5. [ 1303.816490][ T9619] usb 10-1: Using ep0 maxpacket: 16 [ 1303.911153][ T9619] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.911230][ T9619] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1303.911262][ T9619] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1303.911290][ T9619] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1303.911313][ T9619] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.911359][ T9619] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1303.911385][ T9619] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.932202][ T9619] usb 10-1: config 0 descriptor?? [ 1304.221521][ T9619] rc_core: IR keymap rc-hauppauge not found [ 1304.221544][ T9619] Registered IR keymap rc-empty [ 1304.221704][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.251511][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.280603][ T9619] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1304.284271][ T9619] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input164 [ 1304.332303][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.349919][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.380889][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.398199][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.418149][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.519195][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.538389][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.654366][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.673087][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.696030][ T9619] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1304.717221][ T9619] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1304.717248][ T9619] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1304.794504][ T9619] usb 10-1: USB disconnect, device number 17 [ 1304.830647][T25031] tipc: Started in network mode [ 1304.830671][T25031] tipc: Node identity 4, cluster identity 4711 [ 1304.830685][T25031] tipc: Node number set to 4 [ 1305.347692][ T9] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1305.487655][ T9] usb 8-1: device descriptor read/64, error -71 [ 1305.581988][T25038] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6490'. [ 1305.787846][ T9] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1305.933997][ T9] usb 8-1: device descriptor read/64, error -71 [ 1306.009200][T25044] dlm: no locking on control device [ 1306.042728][ T9] usb usb8-port1: attempt power cycle [ 1306.447385][ T9] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1306.481569][ T9] usb 8-1: device descriptor read/8, error -71 [ 1306.573640][T25050] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6494'. [ 1306.737037][ T9] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1306.762277][ T9] usb 8-1: device descriptor read/8, error -71 [ 1306.859667][ T5769] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1306.876994][ T9] usb usb8-port1: unable to enumerate USB device [ 1307.034070][ T5769] usb 7-1: config 0 has an invalid interface number: 97 but max is 0 [ 1307.034101][ T5769] usb 7-1: config 0 has no interface number 0 [ 1307.034135][ T5769] usb 7-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1307.034176][ T5769] usb 7-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1307.034205][ T5769] usb 7-1: config 0 interface 97 has no altsetting 0 [ 1307.084759][ T5769] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1307.084791][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.084814][ T5769] usb 7-1: Product: syz [ 1307.084830][ T5769] usb 7-1: Manufacturer: syz [ 1307.084847][ T5769] usb 7-1: SerialNumber: syz [ 1307.158510][ T5769] usb 7-1: config 0 descriptor?? [ 1307.606660][T25050] macvlan0: entered allmulticast mode [ 1307.736138][T25056] netlink: 6 bytes leftover after parsing attributes in process `syz.8.6496'. [ 1307.767574][T13856] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1307.806595][T15917] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1307.919388][T13856] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1307.919425][T13856] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1307.919454][T13856] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1307.923982][T13856] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1307.924017][T13856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.924042][T13856] usb 9-1: Product: syz [ 1307.924059][T13856] usb 9-1: Manufacturer: syz [ 1307.924075][T13856] usb 9-1: SerialNumber: syz [ 1307.998283][T15917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.998321][T15917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.010819][T15917] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1308.010854][T15917] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1308.010878][T15917] usb 8-1: Manufacturer: syz [ 1308.059475][T13856] usb 9-1: config 0 descriptor?? [ 1308.064762][T25054] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1308.066369][T25054] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1308.084905][T15917] usb 8-1: config 0 descriptor?? [ 1308.095194][T13856] usb 9-1: ucan: probing device on interface #0 [ 1308.529268][T25059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.531573][T25059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.743769][T13856] ucan 9-1:0.0: probe with driver ucan failed with error -22 [ 1308.942931][T11557] usb 9-1: USB disconnect, device number 44 [ 1309.154667][T15917] uclogic 0003:256C:006D.0031: failed retrieving string descriptor #100: -71 [ 1309.154750][T15917] uclogic 0003:256C:006D.0031: failed retrieving pen parameters: -71 [ 1309.154773][T15917] uclogic 0003:256C:006D.0031: failed probing pen v1 parameters: -71 [ 1309.154829][T15917] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 1309.173251][T15917] uclogic 0003:256C:006D.0031: probe with driver uclogic failed with error -71 [ 1309.217472][T15917] usb 8-1: USB disconnect, device number 48 [ 1309.940791][T25068] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6501'. [ 1309.947522][ T5769] usb 7-1: USB disconnect, device number 50 [ 1310.395234][ T5769] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1310.505101][T15917] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1310.559365][ T5769] usb 7-1: Using ep0 maxpacket: 16 [ 1310.564636][ T5769] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1310.564675][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.564697][ T5769] usb 7-1: Product: syz [ 1310.564718][ T5769] usb 7-1: Manufacturer: syz [ 1310.564729][ T5769] usb 7-1: SerialNumber: syz [ 1310.637594][ T5769] usb 7-1: config 0 descriptor?? [ 1310.640834][ T5769] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1310.655501][T13856] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1310.677541][T15917] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.680780][T15917] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1310.680818][T15917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.680841][T15917] usb 8-1: Product: syz [ 1310.680858][T15917] usb 8-1: Manufacturer: syz [ 1310.680875][T15917] usb 8-1: SerialNumber: syz [ 1310.752344][T15917] usb 8-1: config 0 descriptor?? [ 1310.771835][T15917] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 1310.839102][T13856] usb 9-1: Using ep0 maxpacket: 16 [ 1310.842879][T13856] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.842937][T13856] usb 9-1: config 1 interface 0 altsetting 244 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1310.842970][T13856] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1310.854136][T13856] usb 9-1: New USB device found, idVendor=0525, idProduct=98a1, bcdDevice= 0.40 [ 1310.854169][T13856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.854193][T13856] usb 9-1: Product: syz [ 1310.854210][T13856] usb 9-1: Manufacturer: syz [ 1310.854226][T13856] usb 9-1: SerialNumber: syz [ 1310.914834][ T5769] ssu100 7-1:0.0: probe with driver ssu100 failed with error -5 [ 1311.104696][T15917] usb 8-1: Direct firmware load for dvb-usb-digivox-02.fw failed with error -2 [ 1311.104729][T15917] usb 8-1: Falling back to sysfs fallback for: dvb-usb-digivox-02.fw [ 1311.137287][ T5769] usb 7-1: USB disconnect, device number 51 [ 1311.267674][T13856] cdc_ether 9-1:1.0: GUID doesn't match [ 1311.300312][T13856] usb 9-1: USB disconnect, device number 45 [ 1311.748348][T25085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6507'. [ 1311.908704][T25087] input: syz1 as /devices/virtual/input/input165 [ 1312.027891][T25089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.313765][T25093] FAULT_INJECTION: forcing a failure. [ 1312.313765][T25093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1312.313801][T25093] CPU: 1 UID: 0 PID: 25093 Comm: syz.6.6510 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1312.313828][T25093] Tainted: [L]=SOFTLOCKUP [ 1312.313835][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1312.313846][T25093] Call Trace: [ 1312.313853][T25093] [ 1312.313862][T25093] dump_stack_lvl+0xe8/0x150 [ 1312.313891][T25093] should_fail_ex+0x46b/0x600 [ 1312.313926][T25093] prepare_alloc_pages+0x22a/0x6b0 [ 1312.313957][T25093] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1312.313982][T25093] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1312.314009][T25093] ? __pfx_policy_nodemask+0x10/0x10 [ 1312.314029][T25093] ? filemap_get_entry+0x378/0x3f0 [ 1312.314050][T25093] ? do_raw_spin_lock+0x12b/0x2f0 [ 1312.314079][T25093] ? __pfx_filemap_get_entry+0x10/0x10 [ 1312.314100][T25093] alloc_pages_mpol+0xd1/0x380 [ 1312.314121][T25093] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1312.314144][T25093] shmem_get_folio_gfp+0x644/0x1a80 [ 1312.314195][T25093] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1312.314221][T25093] ? __lock_acquire+0x6b5/0x2d10 [ 1312.314250][T25093] shmem_fault+0x170/0x380 [ 1312.314274][T25093] __do_fault+0x138/0x2a0 [ 1312.314297][T25093] do_pte_missing+0x65b/0x2940 [ 1312.314324][T25093] ? handle_mm_fault+0xed/0x14d0 [ 1312.314359][T25093] handle_mm_fault+0xdc4/0x14d0 [ 1312.314391][T25093] ? handle_mm_fault+0xed/0x14d0 [ 1312.314423][T25093] ? __pfx_handle_mm_fault+0x10/0x10 [ 1312.314453][T25093] ? follow_page_pte+0xbe2/0xe60 [ 1312.314502][T25093] ? __pfx_follow_page_pte+0x10/0x10 [ 1312.314541][T25093] __get_user_pages+0x16d4/0x2620 [ 1312.314573][T25093] ? __gup_longterm_locked+0x108e/0x1630 [ 1312.314613][T25093] __gup_longterm_locked+0x1221/0x1630 [ 1312.314647][T25093] ? process_vm_rw+0x626/0xba0 [ 1312.314687][T25093] pin_user_pages_remote+0xdc/0x130 [ 1312.314719][T25093] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1312.314748][T25093] ? up_read+0x23/0x40 [ 1312.314846][T25093] ? mm_access+0x18d/0x2d0 [ 1312.314876][T25093] process_vm_rw+0x650/0xba0 [ 1312.314914][T25093] ? __pfx_process_vm_rw+0x10/0x10 [ 1312.314958][T25093] ? do_raw_spin_lock+0x12b/0x2f0 [ 1312.315003][T25093] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1312.315034][T25093] ? lockdep_hardirqs_on+0x7a/0x110 [ 1312.315085][T25093] ? ksys_write+0x248/0x270 [ 1312.315110][T25093] ? __pfx_ksys_write+0x10/0x10 [ 1312.315136][T25093] __x64_sys_process_vm_writev+0xe0/0x100 [ 1312.315170][T25093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.315194][T25093] do_syscall_64+0x15f/0xf80 [ 1312.315224][T25093] ? trace_irq_disable+0x3b/0x140 [ 1312.315257][T25093] ? clear_bhb_loop+0x40/0x90 [ 1312.315283][T25093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.315305][T25093] RIP: 0033:0x7fc1253ece59 [ 1312.315325][T25093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.315345][T25093] RSP: 002b:00007fc12363e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1312.315368][T25093] RAX: ffffffffffffffda RBX: 00007fc125665fa0 RCX: 00007fc1253ece59 [ 1312.315385][T25093] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000005f [ 1312.315398][T25093] RBP: 00007fc12363e090 R08: 000000000000023a R09: 0000000000000000 [ 1312.315412][T25093] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.315425][T25093] R13: 00007fc125666038 R14: 00007fc125665fa0 R15: 00007ffd10fa2a08 [ 1312.315457][T25093] [ 1313.693722][ T5606] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1313.823389][T13856] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1313.843382][ T5606] usb 7-1: Using ep0 maxpacket: 8 [ 1313.851579][ T5606] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.851643][ T5606] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1313.851670][ T5606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.893373][ T5606] usb 7-1: config 0 descriptor?? [ 1313.912163][ T5606] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1313.985766][T13856] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1313.985804][T13856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1314.020923][T13856] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1314.021020][T13856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.021043][T13856] usb 10-1: Product: syz [ 1314.021060][T13856] usb 10-1: Manufacturer: syz [ 1314.021078][T13856] usb 10-1: SerialNumber: syz [ 1314.070067][T13856] usb 10-1: config 0 descriptor?? [ 1314.127510][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.156471][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.320655][ T5606] gspca_vc032x: reg_w err -71 [ 1314.320813][ T5606] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1314.480455][T25118] syz.8.6519 (25118) used obsolete PPPIOCDETACH ioctl [ 1314.490158][ T5606] usb 7-1: USB disconnect, device number 52 [ 1314.630557][T13856] usb 10-1: USB disconnect, device number 18 [ 1314.789445][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.032790][ T5606] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1315.047223][ T38] audit: type=1326 audit(1779179562.546:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25126 comm="syz.8.6521" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102a5ce59 code=0x7fc00000 [ 1315.163116][ T5606] usb 7-1: device descriptor read/64, error -71 [ 1315.402887][ T5606] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1315.552513][ T5606] usb 7-1: device descriptor read/64, error -71 [ 1315.669997][ T5606] usb usb7-port1: attempt power cycle [ 1316.092445][ T5606] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1316.115163][ T5606] usb 7-1: device descriptor read/8, error -71 [ 1316.355081][ T5606] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1316.373550][ T5606] usb 7-1: device descriptor read/8, error -71 [ 1316.484316][ T5606] usb usb7-port1: unable to enumerate USB device [ 1316.932030][ T5769] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1317.097375][ T5769] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1317.097413][ T5769] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1317.097441][ T5769] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1317.147648][ T5769] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1317.147682][ T5769] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.147704][ T5769] usb 9-1: Product: syz [ 1317.147721][ T5769] usb 9-1: Manufacturer: syz [ 1317.147736][ T5769] usb 9-1: SerialNumber: syz [ 1317.180147][ T5769] usb 9-1: config 0 descriptor?? [ 1317.191277][T25152] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1317.199214][T25152] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1317.219079][ T5769] usb 9-1: ucan: probing device on interface #0 [ 1317.633498][T25152] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6528'. [ 1317.638406][ T5769] usb 9-1: ucan: failed to retrieve device info [ 1317.638430][ T5769] usb 9-1: ucan: probe failed; try to update the device firmware [ 1318.701818][T25170] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6533'. [ 1318.917319][T25172] dlm: no locking on control device [ 1319.208257][T25184] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6540'. [ 1319.433338][T25187] netlink: 'syz.9.6541': attribute type 4 has an invalid length. [ 1319.487893][T25188] netlink: 'syz.9.6541': attribute type 4 has an invalid length. [ 1319.565153][ T5769] usb 9-1: USB disconnect, device number 46 [ 1320.145172][T25196] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6544'. [ 1320.451097][ T32] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 1320.607640][T25201] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6546'. [ 1320.634013][ T32] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1320.634045][ T32] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1320.634066][ T32] usb 7-1: config 0 has no interface number 0 [ 1320.634111][ T32] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1320.634139][ T32] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1320.634166][ T32] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1320.634207][ T32] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1320.634232][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.731599][ T32] usb 7-1: config 0 descriptor?? [ 1321.134938][T25205] netlink: 6 bytes leftover after parsing attributes in process `syz.9.6547'. [ 1321.373667][ T32] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input166 [ 1321.419732][ T5606] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1321.449695][ T32] input: failed to attach handler kbd to device input166, error: -5 [ 1321.571644][ T5606] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1321.571680][ T5606] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1321.571708][ T5606] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1321.577219][ T5606] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1321.577257][ T5606] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.577272][ T5606] usb 10-1: Product: syz [ 1321.577284][ T5606] usb 10-1: Manufacturer: syz [ 1321.577295][ T5606] usb 10-1: SerialNumber: syz [ 1321.638552][ T5606] usb 10-1: config 0 descriptor?? [ 1321.650881][T25203] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1321.651018][T25203] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1321.675364][ T5606] usb 10-1: ucan: probing device on interface #0 [ 1321.864751][ T5748] usb 7-1: USB disconnect, device number 57 [ 1322.266206][ T5606] ucan 10-1:0.0: probe with driver ucan failed with error -71 [ 1322.290573][ T5606] usb 10-1: USB disconnect, device number 19 [ 1322.350873][ T32] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1322.360918][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 1322.512719][ T32] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1322.512766][ T32] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1322.512795][ T32] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1322.515362][ T32] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1322.515393][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.515414][ T32] usb 9-1: Product: syz [ 1322.515434][ T32] usb 9-1: Manufacturer: syz [ 1322.515446][ T32] usb 9-1: SerialNumber: syz [ 1322.585474][ T32] usb 9-1: config 0 descriptor?? [ 1322.590101][T25213] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1322.590378][T25213] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1322.613449][ T32] usb 9-1: ucan: probing device on interface #0 [ 1323.021017][T25213] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6550'. [ 1323.238811][ T5769] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1323.262165][ T32] ucan 9-1:0.0 can0: registered device [ 1323.388645][ T5769] usb 7-1: Using ep0 maxpacket: 32 [ 1323.396105][ T5769] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.396144][ T5769] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1323.405926][ T5769] usb 7-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40 [ 1323.405976][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.408525][ T5769] usb 7-1: Product: syz [ 1323.408546][ T5769] usb 7-1: Manufacturer: syz [ 1323.408562][ T5769] usb 7-1: SerialNumber: syz [ 1323.455123][ T32] ucan 9-1:0.0 can0: firmware string: JJþÁàAMö=+J_^üYµÀ3þ¿à~°(-mòƒó1’b€¿í”áX-µØÎ[½üÏð¨ [ 1323.645749][ T5748] usb 9-1: USB disconnect, device number 47 [ 1323.768463][ T32] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1323.936240][ T32] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1323.936274][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.936297][ T32] usb 10-1: Product: syz [ 1323.936313][ T32] usb 10-1: Manufacturer: syz [ 1323.936329][ T32] usb 10-1: SerialNumber: syz [ 1323.994614][ T32] usb 10-1: config 0 descriptor?? [ 1324.006627][ T32] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1324.351174][ T5769] usb 7-1: 0:2 : does not exist [ 1324.407153][ T5769] usb 7-1: unknown interface protocol 0x1, assuming v1 [ 1324.407182][ T5769] usb 7-1: cannot find UAC_HEADER [ 1324.543954][ T5769] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1324.558433][ T5769] usb 7-1: can't set first interface for hiFace device. [ 1324.558479][ T5769] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1324.567673][ T5769] usb 7-1: USB disconnect, device number 58 [ 1324.673388][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1325.167049][T25247] kernel read not supported for file /file0 (pid: 25247 comm: syz.8.6558) [ 1325.167312][ T38] audit: type=1800 audit(1779179572.661:7231): pid=25247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6558" name="file0" dev="mqueue" ino=110061 res=0 errno=0 [ 1325.213967][ T9] kernel read not supported for file /rfkill (pid: 9 comm: kworker/0:0) [ 1325.244026][T25247] binder: 25246:25247 ioctl c0306201 200000000000 returned -14 [ 1326.027306][ T9] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1326.187479][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1326.189715][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 1326.189749][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58117, setting to 1024 [ 1326.189775][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1326.189815][ T9] usb 9-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1326.189838][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.299408][ T9] usb 9-1: config 0 descriptor?? [ 1326.339924][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1326.439899][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1326.442380][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1326.471777][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1326.472925][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1326.937061][ T32] gspca_stk1135: reg_w 0x351 err -71 [ 1326.938108][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 1326.938123][ T32] gspca_stk1135: Sensor write failed [ 1326.938154][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 1326.938164][ T32] gspca_stk1135: Sensor write failed [ 1326.938194][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 1326.938204][ T32] gspca_stk1135: Sensor read failed [ 1326.938234][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 1326.938244][ T32] gspca_stk1135: Sensor read failed [ 1326.938252][ T32] gspca_stk1135: Detected sensor type unknown (0x0) [ 1326.938286][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 1326.938297][ T32] gspca_stk1135: Sensor read failed [ 1326.938325][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 1326.938336][ T32] gspca_stk1135: Sensor read failed [ 1326.938386][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 1326.938397][ T32] gspca_stk1135: Sensor write failed [ 1326.938428][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 1326.938439][ T32] gspca_stk1135: Sensor write failed [ 1326.938527][ T32] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 1327.190558][ T32] usb 10-1: USB disconnect, device number 20 [ 1327.202547][ T9] hid_parser_main: 30 callbacks suppressed [ 1327.202574][ T9] dragonrise 0003:0079:0006.0032: unknown main item tag 0x6 [ 1327.202672][ T9] dragonrise 0003:0079:0006.0032: unknown main item tag 0x1 [ 1327.202703][ T9] dragonrise 0003:0079:0006.0032: unknown main item tag 0x1 [ 1327.202731][ T9] dragonrise 0003:0079:0006.0032: item fetching failed at offset 39/41 [ 1327.203587][ T9] dragonrise 0003:0079:0006.0032: parse failed [ 1327.203662][ T9] dragonrise 0003:0079:0006.0032: probe with driver dragonrise failed with error -22 [ 1327.464873][T25279] trusted_key: encrypted_key: hex blob is missing [ 1327.948380][T25266] wg0 speed is unknown, defaulting to 1000 [ 1328.066258][T13856] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1328.220640][T13856] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1328.220676][T13856] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1328.220703][T13856] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1328.223439][T13856] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1328.223471][T13856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.223495][T13856] usb 10-1: Product: syz [ 1328.223511][T13856] usb 10-1: Manufacturer: syz [ 1328.223528][T13856] usb 10-1: SerialNumber: syz [ 1328.297203][T13856] usb 10-1: config 0 descriptor?? [ 1328.300083][T25288] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1328.300215][T25288] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1328.324782][T13856] usb 10-1: ucan: probing device on interface #0 [ 1328.416106][ T32] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1328.570195][ T32] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.570226][ T32] usb 7-1: config 0 has no interfaces? [ 1328.570571][ T32] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1328.570691][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.637681][ T32] usb 7-1: config 0 descriptor?? [ 1328.754278][ T9] usb 9-1: USB disconnect, device number 48 [ 1328.979210][T25266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.979706][T25266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.980127][T25266] bridge_slave_0: entered allmulticast mode [ 1329.012930][T25266] bridge_slave_0: entered promiscuous mode [ 1329.032626][T13856] ucan 10-1:0.0 can0: registered device [ 1329.033092][T25266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.034033][T25266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.034418][T25266] bridge_slave_1: entered allmulticast mode [ 1329.051127][T25266] bridge_slave_1: entered promiscuous mode [ 1329.210740][T13856] ucan 10-1:0.0 can0: firmware string: JJþÁàAMö=+J_^üYµÀ3þ¿à~°(-mòƒó1’b€¿í”áX-µØÎ[½üÏð¨ [ 1329.247237][ T4933] Bluetooth: hci2: command tx timeout [ 1329.312064][T25266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.330757][T25266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.429677][ T5725] usb 10-1: USB disconnect, device number 21 [ 1329.432434][T25266] team0: Port device team_slave_0 added [ 1329.443839][T25266] team0: Port device team_slave_1 added [ 1329.653856][T25266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.653876][T25266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.653909][T25266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.664250][T25266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.664309][T25266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.664389][T25266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.980938][T25266] hsr_slave_0: entered promiscuous mode [ 1329.983516][T25266] hsr_slave_1: entered promiscuous mode [ 1329.996623][T25266] debugfs: 'hsr0' already exists in 'hsr' [ 1329.996654][T25266] Cannot create hsr debugfs directory [ 1330.448046][T25328] CUSE: info not properly terminated [ 1330.865279][T13856] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1331.014816][T13856] usb 10-1: Using ep0 maxpacket: 32 [ 1331.017245][T13856] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1331.021297][T13856] usb 10-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1331.021327][T13856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.021349][T13856] usb 10-1: Product: syz [ 1331.021364][T13856] usb 10-1: Manufacturer: syz [ 1331.021380][T13856] usb 10-1: SerialNumber: syz [ 1331.111935][T13856] snd-ua101 10-1:1.1: sample format descriptor not found [ 1331.111957][T13856] snd-ua101 10-1:1.0: invalid num_altsetting [ 1331.272891][ T5748] usb 7-1: USB disconnect, device number 59 [ 1331.303852][T25332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.321332][ T4933] Bluetooth: hci2: command tx timeout [ 1331.340187][T25332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.580478][T25357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.583613][T25357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.260827][T25367] input: syz1 as /devices/virtual/input/input167 [ 1332.867783][T25372] CIFS mount error: No usable UNC path provided in device string! [ 1332.867783][T25372] [ 1332.867807][T25372] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1333.189826][T25266] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.395705][ T4933] Bluetooth: hci2: command tx timeout [ 1333.866197][ T5769] usb 10-1: USB disconnect, device number 22 [ 1334.021118][T25380] netlink: 'syz.9.6582': attribute type 6 has an invalid length. [ 1334.825370][T25266] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.170197][ T38] audit: type=1326 audit(1779179582.666:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25400 comm="syz.6.6587" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1253ece59 code=0x0 [ 1335.472694][ T4933] Bluetooth: hci2: command tx timeout [ 1335.563882][T25409] Invalid logical block size (161) [ 1336.079615][T25266] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.296682][ T9] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1336.362332][ T32] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1336.496270][ T9] usb 10-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1336.496304][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.496325][ T9] usb 10-1: Product: syz [ 1336.496340][ T9] usb 10-1: Manufacturer: syz [ 1336.496355][ T9] usb 10-1: SerialNumber: syz [ 1336.521995][ T32] usb 7-1: device descriptor read/64, error -71 [ 1336.547583][ T9] usb 10-1: config 0 descriptor?? [ 1336.558578][ T9] hub 10-1:0.0: bad descriptor, ignoring hub [ 1336.558618][ T9] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1336.561620][ T9] f81232 10-1:0.0: f81534a converter detected [ 1336.620632][T25266] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.761957][ T32] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1336.777868][ T9] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1336.777898][ T9] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1336.824406][ T9] usb 10-1: USB disconnect, device number 23 [ 1336.829417][ T9] f81232 10-1:0.0: device disconnected [ 1336.891903][ T32] usb 7-1: device descriptor read/64, error -71 [ 1337.007913][ T32] usb usb7-port1: attempt power cycle [ 1337.341691][ T32] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1337.418783][ T32] usb 7-1: device descriptor read/8, error -71 [ 1337.671561][ T32] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1337.699414][ T32] usb 7-1: device descriptor read/8, error -71 [ 1337.802002][ T32] usb usb7-port1: unable to enumerate USB device [ 1337.886478][ T5725] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1338.033071][ T5725] usb 9-1: Using ep0 maxpacket: 8 [ 1338.059815][ T5725] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.059844][ T5725] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1338.084217][ T5725] usb 9-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1338.084250][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.084273][ T5725] usb 9-1: Product: syz [ 1338.084289][ T5725] usb 9-1: Manufacturer: syz [ 1338.084306][ T5725] usb 9-1: SerialNumber: syz [ 1338.688991][T25266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1338.719809][T25266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1338.732119][T25266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1338.781529][T25266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1338.783039][T25266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1338.828063][T25266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1338.845236][T25266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1338.928343][T25266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1339.858619][T25266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.199641][T25266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.274839][T24516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.275208][T24516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.363536][T24516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.369003][T24516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.442918][T25465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.443721][T25465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.817243][T25474] FAULT_INJECTION: forcing a failure. [ 1341.817243][T25474] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.817287][T25474] CPU: 0 UID: 0 PID: 25474 Comm: syz.8.6605 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1341.817317][T25474] Tainted: [L]=SOFTLOCKUP [ 1341.817326][T25474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1341.817342][T25474] Call Trace: [ 1341.817351][T25474] [ 1341.817362][T25474] dump_stack_lvl+0xe8/0x150 [ 1341.817398][T25474] should_fail_ex+0x46b/0x600 [ 1341.817440][T25474] should_failslab+0xa8/0x100 [ 1341.817466][T25474] kmem_cache_alloc_noprof+0x87/0x680 [ 1341.817503][T25474] ? vm_area_dup+0x2b/0x670 [ 1341.817534][T25474] vm_area_dup+0x2b/0x670 [ 1341.817575][T25474] dup_mmap+0x8ba/0x1d70 [ 1341.817625][T25474] ? __pfx_dup_mmap+0x10/0x10 [ 1341.817648][T25474] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1341.817688][T25474] ? copy_mm+0x130/0x4a0 [ 1341.817724][T25474] ? copy_mm+0x130/0x4a0 [ 1341.817779][T25474] copy_mm+0x13b/0x4a0 [ 1341.817817][T25474] copy_process+0x1f24/0x4450 [ 1341.817851][T25474] ? _parse_integer_limit+0x192/0x1e0 [ 1341.817905][T25474] ? copy_process+0xd87/0x4450 [ 1341.817953][T25474] ? __pfx_copy_process+0x10/0x10 [ 1341.817988][T25474] ? get_pid_task+0x20/0x1f0 [ 1341.818011][T25474] ? get_pid_task+0x20/0x1f0 [ 1341.818045][T25474] kernel_clone+0x2d7/0x940 [ 1341.818074][T25474] ? __pfx_kernel_clone+0x10/0x10 [ 1341.818095][T25474] ? do_raw_spin_lock+0x12b/0x2f0 [ 1341.818150][T25474] __x64_sys_clone+0x1b6/0x230 [ 1341.818178][T25474] ? __pfx___x64_sys_clone+0x10/0x10 [ 1341.818218][T25474] ? __pfx_ksys_write+0x10/0x10 [ 1341.818252][T25474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.818279][T25474] do_syscall_64+0x15f/0xf80 [ 1341.818311][T25474] ? trace_irq_disable+0x3b/0x140 [ 1341.818346][T25474] ? clear_bhb_loop+0x40/0x90 [ 1341.818375][T25474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.818400][T25474] RIP: 0033:0x7fd102a5ce59 [ 1341.818422][T25474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.818444][T25474] RSP: 002b:00007fd100c8cfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1341.818471][T25474] RAX: ffffffffffffffda RBX: 00007fd102cd6090 RCX: 00007fd102a5ce59 [ 1341.818490][T25474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1341.818504][T25474] RBP: 00007fd100c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.818519][T25474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.818534][T25474] R13: 00007fd102cd6128 R14: 00007fd102cd6090 R15: 00007ffdde6b4ca8 [ 1341.818578][T25474] [ 1342.443916][T25477] input: syz0 as /devices/virtual/input/input168 [ 1343.210063][ T5725] usb 9-1: unit 5 not found! [ 1343.210095][ T5725] usb 9-1: unit 16 not found! [ 1343.555380][T25266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.662133][T25487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.697995][T25487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.756067][T25487] trusted_key: encrypted_key: insufficient parameters specified [ 1344.499376][T25266] veth0_vlan: entered promiscuous mode [ 1344.555879][T25266] veth1_vlan: entered promiscuous mode [ 1344.862528][T25266] veth0_macvtap: entered promiscuous mode [ 1344.932659][T25266] veth1_macvtap: entered promiscuous mode [ 1345.079065][T25266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.154191][T25266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.243177][ T1459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.246148][ T1459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.247310][ T1459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.247358][ T1459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.516660][T11557] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1346.516692][T11557] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1346.517228][ C1] ------------[ cut here ]------------ [ 1346.517239][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 1346.517341][ C1] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd87/0x1090, CPU#1: ktimers/1/30 [ 1346.517384][ C1] Modules linked in: [ 1346.517403][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1346.517429][ C1] Tainted: [L]=SOFTLOCKUP [ 1346.517436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1346.517448][ C1] RIP: 0010:__queue_work+0xda4/0x1090 [ 1346.517477][ C1] Code: 81 c7 68 01 00 00 4c 8d 35 f9 a3 22 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 56 e1 a1 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 1346.517495][ C1] RSP: 0018:ffffc90000a4f998 EFLAGS: 00010046 [ 1346.517512][ C1] RAX: 1ffff1100ab50153 RBX: 0000000000000008 RCX: ffff88801ded1ec0 [ 1346.517527][ C1] RDX: ffff888058e41968 RSI: ffffffff8a281400 RDI: ffffffff8fb06280 [ 1346.517542][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1346.517554][ C1] R10: dffffc0000000000 R11: ffffffff818dc560 R12: dffffc0000000000 [ 1346.517570][ C1] R13: ffff888055a80a80 R14: ffffffff8fb06280 R15: ffff888058e41968 [ 1346.517584][ C1] FS: 0000000000000000(0000) GS:ffff888125dab000(0000) knlGS:0000000000000000 [ 1346.517599][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1346.517611][ C1] CR2: 0000556eb75e6048 CR3: 000000003fb88000 CR4: 00000000003526f0 [ 1346.517628][ C1] Call Trace: [ 1346.517636][ C1] [ 1346.517648][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1346.517684][ C1] call_timer_fn+0x192/0x5e0 [ 1346.517748][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1346.517778][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1346.517800][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1346.517833][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1346.517861][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1346.517892][ C1] __run_timer_base+0x764/0x9f0 [ 1346.517927][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1346.517953][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1346.517990][ C1] run_timer_softirq+0xb7/0x170 [ 1346.518013][ C1] handle_softirqs+0x1de/0x6d0 [ 1346.518051][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1346.518084][ C1] run_ktimerd+0x69/0x100 [ 1346.518104][ C1] smpboot_thread_fn+0x541/0xa50 [ 1346.518138][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1346.518177][ C1] kthread+0x389/0x470 [ 1346.518198][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1346.518227][ C1] ? __pfx_kthread+0x10/0x10 [ 1346.518259][ C1] ret_from_fork+0x514/0xb70 [ 1346.518286][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1346.518310][ C1] ? __switch_to+0xc79/0x1410 [ 1346.518334][ C1] ? __pfx_kthread+0x10/0x10 [ 1346.518360][ C1] ret_from_fork_asm+0x1a/0x30 [ 1346.518408][ C1] [ 1346.518428][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1346.518449][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1346.518482][ C1] Tainted: [L]=SOFTLOCKUP [ 1346.518491][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1346.518504][ C1] Call Trace: [ 1346.518513][ C1] [ 1346.518523][ C1] vpanic+0x56c/0xa60 [ 1346.518611][ C1] ? __pfx__printk+0x10/0x10 [ 1346.518636][ C1] ? __pfx_vpanic+0x10/0x10 [ 1346.518666][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1346.518693][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1346.518728][ C1] panic+0xc5/0xd0 [ 1346.518761][ C1] ? __pfx_panic+0x10/0x10 [ 1346.518805][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1346.518841][ C1] __warn+0x315/0x4c0 [ 1346.518873][ C1] ? __queue_work+0xd87/0x1090 [ 1346.518907][ C1] ? __queue_work+0xd87/0x1090 [ 1346.518960][ C1] __report_bug+0x339/0x540 [ 1346.519051][ C1] ? call_timer_fn+0x192/0x5e0 [ 1346.519077][ C1] ? __run_timer_base+0x764/0x9f0 [ 1346.519099][ C1] ? run_timer_softirq+0xb7/0x170 [ 1346.519129][ C1] ? __queue_work+0xd87/0x1090 [ 1346.519163][ C1] ? __pfx___report_bug+0x10/0x10 [ 1346.519195][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1346.519229][ C1] ? look_up_lock_class+0x57/0x110 [ 1346.519274][ C1] ? register_lock_class+0x31/0x2e0 [ 1346.519308][ C1] report_bug_entry+0x19a/0x290 [ 1346.519342][ C1] ? __queue_work+0xda4/0x1090 [ 1346.519374][ C1] ? __queue_work+0xda9/0x1090 [ 1346.519405][ C1] handle_bug+0xce/0x200 [ 1346.519428][ C1] exc_invalid_op+0x1a/0x50 [ 1346.519451][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1346.519475][ C1] RIP: 0010:__queue_work+0xda4/0x1090 [ 1346.519512][ C1] Code: 81 c7 68 01 00 00 4c 8d 35 f9 a3 22 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 56 e1 a1 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 1346.519534][ C1] RSP: 0018:ffffc90000a4f998 EFLAGS: 00010046 [ 1346.519556][ C1] RAX: 1ffff1100ab50153 RBX: 0000000000000008 RCX: ffff88801ded1ec0 [ 1346.519574][ C1] RDX: ffff888058e41968 RSI: ffffffff8a281400 RDI: ffffffff8fb06280 [ 1346.519593][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1346.519608][ C1] R10: dffffc0000000000 R11: ffffffff818dc560 R12: dffffc0000000000 [ 1346.519627][ C1] R13: ffff888055a80a80 R14: ffffffff8fb06280 R15: ffff888058e41968 [ 1346.519651][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1346.519692][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1346.519726][ C1] ? __queue_work+0xd53/0x1090 [ 1346.519765][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1346.519808][ C1] call_timer_fn+0x192/0x5e0 [ 1346.519836][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1346.519869][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1346.519896][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1346.519933][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1346.519966][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1346.520004][ C1] __run_timer_base+0x764/0x9f0 [ 1346.520045][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1346.520076][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1346.520118][ C1] run_timer_softirq+0xb7/0x170 [ 1346.520144][ C1] handle_softirqs+0x1de/0x6d0 [ 1346.520182][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1346.520208][ C1] run_ktimerd+0x69/0x100 [ 1346.520225][ C1] smpboot_thread_fn+0x541/0xa50 [ 1346.520263][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1346.520297][ C1] kthread+0x389/0x470 [ 1346.520316][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1346.520342][ C1] ? __pfx_kthread+0x10/0x10 [ 1346.520363][ C1] ret_from_fork+0x514/0xb70 [ 1346.520387][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1346.520410][ C1] ? __switch_to+0xc79/0x1410 [ 1346.520430][ C1] ? __pfx_kthread+0x10/0x10 [ 1346.520450][ C1] ret_from_fork_asm+0x1a/0x30 [ 1346.520490][ C1] [ 1346.523987][ C1] Kernel Offset: disabled