Extracting prog: 5m54.505888067s
Minimizing prog: 58m58.410918583s
Simplifying prog options: 0s
Extracting C: 2m12.452234486s
Simplifying C: 29m41.309932691s


extracting reproducer from 59 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range-ioctl$vim2m_VIDIOC_S_FMT
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x3, @pix_mp={0xff, 0x5, 0x32315241, 0x9, 0x1, [{0x4, 0x3}, {0xc0, 0x2}, {0xc, 0x4}, {0x5, 0x10000401}, {0x2, 0x7}, {0x2a, 0xc}, {0x6, 0xfffffff7}, {0x7, 0xf}], 0x4, 0x0, 0x4, 0x1, 0x6}})

program did not crash
single: failed to extract reproducer
bisect: bisecting 59 programs with base timeout 30s
testing program (duration=44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 21, 30, 14, 8, 27, 27, 2, 17, 3, 30, 21, 20, 20, 10, 30, 10, 29, 24, 4, 4, 25, 30, 6, 4, 19, 6, 6, 10, 14, 3, 21, 2, 12, 12, 5, 17, 11, 3, 8, 28, 5, 13, 8, 19, 9, 6, 15, 10, 4, 3, 10, 30, 13, 16, 13, 5, 12, 12]
detailed listing:
executing program 0:
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f800000000020103000000000000000002000010ac000a80500002800c00028005000100110000000c000280050001001100000006000340000200002c00018014000300ff01000000000000000000000000000114000400fc01000000000000000000000000000108000140000000015000028006000340000100000c00028005000100060000000c00028005000100110000000600034000000000060003400002000006000340000100000600034000461000000038000a8004000280300005000000018014000300fc00000000000000000000000000000014000400fe80000000000000000000000000002a00"/248], 0xf8}, 0x1, 0x0, 0x0, 0x40810}, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) (async, rerun: 64)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1) (async, rerun: 64)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x5, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8002c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x7, 0x40005, 0x491, 0x9, 0x200026, 0x7f, 0x2, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="ce6bc6f2", @ANYRES16=0x0, @ANYBLOB="010000000000fedbdf25100000000800090000000000"], 0x1c}}, 0x0) (async)
arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffe) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0) (async, rerun: 32)
r8 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32)
getsockopt$MRT6(r8, 0x29, 0xce, 0x0, 0x0) (async)
r9 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r9, &(0x7f0000002c00)={0x2020}, 0x2020) (async)
r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000001080)={0xf0f028, 0x6}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fff}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x4}}, 0xf0}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
close(r4) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]})
ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) (async)
socket(0x2b, 0x6, 0x4a33) (async)
write$cgroup_type(r6, &(0x7f0000000280), 0x9) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a0007215000008009f000d000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'gre0\x00', 0x200})
ioctl$XFS_IOC_INUMBERS(r6, 0x80405880, &(0x7f00000000c0)={{0x8, 0x3, 0xfffffffc, 0xf8800000, 0x3ff}, [{0x1ff, 0x4, 0x80}, {0x7, 0x1, 0xe, 0x7}]})
executing program 0:
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0xb8d, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x270, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa4, 0x6, "b95ea9516f494e9561f620a8850ccae08c58b3aaf8d6a5c1fd9a2c10dd2139882bd1c077ea9ecd01f68ae2e40aed1c1b3cde82c941ef2256aa1e40f01f628b06cd7315ca8013ba5cc5fba0939f883bf47a2fe9d5d04b748abe42c8b0d9be4de84bbc5f459529dd4a6140d39ebbfbe2b82baaa35d0a64a1001407513bfb7f3688b1d7306dc8c3fc025e534c9a025f46378ddd49b362f4c8441450937dad798903"}, @NFTA_TABLE_USERDATA={0xab, 0x6, "713263428f1056cd15d741eade9373700e6fcf36415392ec49b55f6d09a0cf8fb3a88be766c31da664168a2cc7a858973f493f558b907749c9dd9c82792d81ca73cd23a942ed8350704d3e78dcfe7e12752342f32ccb48b74da78012c11daaacb6298d4a13b2ea7f5f356578218d320ca1bf639d60d4b9242709580a2c673694474a0bf642e817f97537c27c033fe4f19d00f8339f7a3fbcb04abd3ab2ea6cdbba273d80f9b345"}, @NFTA_TABLE_USERDATA={0xf2, 0x6, "b2b8d9f0b3ef5d2ea8c79fcf9ec762fb1cccca32754210962b7f97e6af570f1216196a979fe580347f9c083e28b2e6a9a8ff74b30b254dd0b0e4736d1f804b84d7830d07a8d284103ce3eb91de99eeb5751fc28500b2256a9f6d94d57ad7b84588e6df591ab2262ba0070f05024daf33cf4094b67f1fac4f8acbd527f42d703146bd0c965798846cd43a21a9243a4f8739420d9b1d7fafba3ff3a680ddc35bebdec1b940be1a96a7780223b75874d584dd8915ebc1bfc186af45446b85e6e79135327afd261fa7b6c968a6e1762bb7da7fb1e1fd8e922c339156cb28d286a646559048c680e974bae976d067668c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x8c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x83c4b5e}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x49965120}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x8}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0x6a, 0xc, "23d2471f2cb86e220d5833baa9605813d4cf549b07ba1b2c86137cac5761f6342e481b5fe3f29be4b30bc8fef3d89c444f7e565e2e9a2c284342d7a19f5d6b848a50f31c824e2bed748ed965a1360848f4ecf9e42103125472f9faa3d98f86b620e9da06e58c"}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x29ebf558}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2a99913a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0xa}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELRULE={0x218, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_USERDATA={0x53, 0x7, 0x1, 0x0, "64110357105405cc96d818517858a2f36a69a90ecfa979cbf58494dbb3516ad88888a27804cd529d1f4820eed14ac1cd732d7f329e6af9b6fe7ed7a46c5cc50e537f5918a002d4629724dc112c0536"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xfc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x33, 0x7, 0x1, 0x0, "165165d15992d96790176b0db9158eebf3b29b0c83e36cf51b3f8899fc584e6266d4ffbddb755c0504e783c2e20487"}, @NFTA_RULE_USERDATA={0x8a, 0x7, 0x1, 0x0, "fea4744f0824b9185a011bb612421752099b38be554f294e10e53ac5c6b289d6c63ecc8724283f3d3c0b653fa8dd24aa331ff9d9b19cf57850c77eef158f8d63253a4eacc1c77dca7c09a1148caadd88b3cd2b17a56ec57b6e978ac1e3dde68c6ab2f4dfded295b3528cfdbb55fbebe8e8223329a6c1a5cc0e34cef06039b04a203da661d706"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x690}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000840)={<r3=>0x0, 0x6}, &(0x7f0000000880)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000008c0)={r3, 0x1, 0x7ff, 0x8}, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
faccessat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xc0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000a40)={0x7, 0x6, 0x80, 0x4, 0x0, "c197c38d8e415aed5c826e300ca404e5abddb4"})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x2}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000bc0)={r3, 0x80000001}, &(0x7f0000000c00)=0x8)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000c40))
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000c80)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}})
r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2201, 0x0)
ppoll(&(0x7f0000000d40)=[{r4}, {r5, 0x8104}, {r7, 0x4}, {r8, 0x8000}], 0x4, &(0x7f0000000d80)={0x77359400}, &(0x7f0000000dc0)={[0x2ad52a79]}, 0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r7)
sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x108, r10, 0x910, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x331}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb865}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcce}]}, 0x108}, 0x1, 0x0, 0x0, 0x48090}, 0x95)
r11 = socket$pppoe(0x18, 0x1, 0x0)
recvmsg(r11, &(0x7f0000002200)={&(0x7f0000001040)=@nl, 0x80, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/152, 0x98}, {&(0x7f0000001180)=""/4, 0x4}], 0x2, &(0x7f0000001200)=""/4096, 0x1000}, 0x40012122)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000002240)=<r12=>0x0)
connect(r2, &(0x7f0000002280)=@nfc_llcp={0x27, r12, 0x0, 0x0, 0xa0, 0x7f, "35639cbcda17bfe62dc9e5998e27c2dc746ebc685f1b07921d382c9633492af761565ba9df4b4ea2c2b76ae90d1d929b02244663c242bed8d38e3bdcc9b4ba", 0x38}, 0x80)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
lremovexattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') (async)
lremovexattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00')
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9)
executing program 0:
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private1={0xfc, 0x1, '\x00', 0x5}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x92006e})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="14043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x98, 0x0, 0x0, 0x0, 0x6})
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'freezer'}]}, 0x9)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x14})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x8, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x7, 0x10000000003aa, 0x4, 0x9, 0x7, 0x40000000009, 0x40000000080a8c, 0x9], 0x2, 0x40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000040000701feffffff02000000017c00000c00018006b4d24b9a0a00000800028004"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a80016002000034004", 0x39}], 0x1}, 0x0)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x88)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRES64], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000340)=@riscv64_smstateen_csr={0x0, &(0x7f0000000300)=0x4})
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$getsig(0x4202, r9, 0xfffffffffffffffe, 0x0)
r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r10, 0xc02c5638, &(0x7f0000000580)={0xfffffc00, 0x0, 0x8})
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r7, @ANYRES8=r7, @ANYRES64=r9, @ANYRES64=r7], 0xfe33)
executing program 32:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x14})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x8, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x7, 0x10000000003aa, 0x4, 0x9, 0x7, 0x40000000009, 0x40000000080a8c, 0x9], 0x2, 0x40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000040000701feffffff02000000017c00000c00018006b4d24b9a0a00000800028004"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a80016002000034004", 0x39}], 0x1}, 0x0)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x88)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRES64], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000340)=@riscv64_smstateen_csr={0x0, &(0x7f0000000300)=0x4})
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$getsig(0x4202, r9, 0xfffffffffffffffe, 0x0)
r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r10, 0xc02c5638, &(0x7f0000000580)={0xfffffc00, 0x0, 0x8})
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r7, @ANYRES8=r7, @ANYRES64=r9, @ANYRES64=r7], 0xfe33)
executing program 4:
r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @loopback}}}, 0x108)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
r5 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2)
syz_emit_vhci(&(0x7f0000001e80)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x92, 0x8}, {0x7, 0x0, 0x1ff, 0xfffe}}]}}, 0x15)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r6, 0x2282, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000080)=@fd={0x8, 0x1, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, "00edbb42"}})
r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000004e0000004e2267e8c7c0754fff57c05ce9280d3a3c355c2eb174df09b8647a15e0373a9492732f3219fcd4ea3333765c3519d93bf16cee56957fd1e479756c036170a0b49baa5f9d89853ced7529a45ff033db0626227e7d1f878e7227e1ba27ef9b81c14c8f16d5b36e04000000b5f03839ae07db20eb61dad08953089923b761be6ccfb603b9b98b56d002288201214bd4ba56e0ed0ee663ed2d345040140fe63cd813163b07057801bd478c620a7bd208f260179abaea6cce4cf99dc58879730dab9e8f562fe6929586d049f65675c2d0ab52c911147be8"])
executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000203010100a6a4e7bad5759eb2b5735e0400000000000000020000050900020000008000"], 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x8050)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
r3 = userfaultfd(0x80801)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x28041, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x3, 0x6, @local}, 0x10)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r7, 0x2, {0x2, 0x0, 0x2}}, 0x18)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6})
mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e34, 0x69bcb654, @rand_addr=' \x01\x00', 0x2000009}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50)
listen(r0, 0x9)
accept$inet6(r0, 0x0, 0x0)
r8 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x1, 0x7, 0x8, 0x4}, 0x10)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0/../file0\x00', &(0x7f0000000240)={0xfbecfe669b8be321, 0x86, 0x23}, 0x18)
executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380))
sendmmsg(r2, &(0x7f0000003540)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000600)="c954d6121254be9cee804308c5cf78984d66c74f67eb7a4c824ce3902080f4147d3fb69a49467dc9ef960999fc3407eac2858104d6a9ce94fbc94fc8ac550e8f65efb68cff557204877a7f739c24970e5c533270a2361a4248f6dfd255689d028d40dd556b53a1f43d11aa83de11774525e37b6684f62132de0d8ee0114fb79fa9490c0962914fad92621e133daa60d5aeef3c3d9a8982be69beac7616f590f53a90d21eae2db2f10151e8f916cc57c35600a6e1b0118abd7d87e50c33dd9ee29718dadae8608f18a60da0cc42987372fe172acdd2e9a1bc36677a10f8464e499fd3e64e3dc53c2ea271", 0xea}, {&(0x7f0000000700)="52865b026a35cbf415eb5766f354309aa5618f3884808e14c6681c4e0dbef11b23048aeeeb8abf874e00d688722bd2f8ae84c9df71363c950506ec4cf31291b6bd373d118de06575fa90f50eb837bc91fbc85a4a5c17a28abcff294f82c066264fed2413f1a16e00edcff393843f7bec497a771e5e", 0x75}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="1a4fe64a8ec79267429b83ab4eb69d4d691d93ba6b86a1cbad7078953eccd42dce18cd04483aedb0988a067a19aa55aadd519d12e4e8", 0x36}, {&(0x7f0000002080)="c1e2a24c3231818fd4a7657a8a0a2fb2e320ff62747e1db44a2887dfbbb597bd041932df1db335f5862686cd2b73502517db475192fc2d01a5d648889cbbd743a774916e3efb2e9797a370b3a828ce1948e5fa33f95ddeff1dc265", 0x5b}, {&(0x7f0000002100)="eea9798daf2ac7b789c5369e5d02da0893b5381837e2c76af8f5c0da4f90aab679a20acec2fa36b87f30f0382bf22c958911c49d4cd21212f894633dc637770c22fe100ba38114c318b3e087db6918013e1a3f284ea6049c3e1c97ba8af604bdd07b126be08b8985905fec02b7d6c6676da3513edf0dd7b3c22a5668447f", 0x7e}], 0x6, &(0x7f0000002200)}}, {{&(0x7f0000002240)=@x25, 0x80, &(0x7f0000002580)=[{&(0x7f00000022c0)="68489f", 0x3}, {&(0x7f0000002300)="90e3772e79c581b62306d8d24b7778c4181a2c0d211c6e36eac10d15c469a346af8a64d254d48aea95a7f943bf2e3aff14f57f74ec02ec543e14329bf9d83c4584b4979599286ac0410f0fee07d25e072b176bee7eb3800ac8c3e9183cf9ddee66190336e307cada2153a9", 0x6b}, {&(0x7f0000002380)="a95a55421643186f42f808537f45f78586b4133134f201f4dbc7085106357b54e2b0fcef2ba0a801fd1a0f5469ab03d20bc16d1ff309807771e1172cbab0a500ff125458e2c278e0172f8c88c63f1638d925ec786d5e2f64866c48fb51a8cae8ab579fad1b2251b9ea4111aefbc8174b2df3403e0dc3c345bd98402b17812137a276f32630072dbe12c9044107b6df12165bf2efb49df080fbdc1320d0bd3e7106db925ddabf8ef5876723d883a986dd58", 0xb1}, {&(0x7f0000002440)="a3eee2c62e89e5ab77a74880dc9b9cb96c59c7840ba53a7bf1870b51957c9b98a1ce2b89505572d1ce9e219ba4eab6fc49d6616e5539d90f145828f483f79131928498d35d5d5c65d6cd00d09638b049bc4f6915895aaec9b8235348e15c3e754278b7978cf64231db5f00ad1c43b82c641310b429d14e2fd8d360efa408c7d7377c32a52fffc0e59cf148bfa94e68e2b061487ba50978bb9c6d58cecf195a3a5216bbd6be164d4fed17489526839e7a289825e7ee4ca3e6595482d27b608fb7e4fde9bcb2df01ecfe8b73cdc4d0", 0xce}, {&(0x7f0000002540)='\a', 0x1}], 0x5, &(0x7f0000002600)=[{0x50, 0x112, 0x0, "9172021a3fb6a72d42073f2deb35156cfe9235b2b498afbc9bfc39d63faf211bbaab80c42a34a4fedd6279ad43add3e001af2e7767568e76e762"}], 0x50}}, {{&(0x7f0000002680)=@nfc={0x27, r7, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002700)="281bccb8621ad7d0b388407310ee53b95d248d76fa6f4fa23b4c407ef7245d09455c631d146f69f85583bec2d89802a9ae01f16dec10c709145533e70cfe78137f52160a06d578dfcf", 0x49}, {&(0x7f0000002780)="fc0395e91508a509dfc9503972", 0xd}, {&(0x7f00000027c0)="987bd1085756dab5ff6470f46efe3f09250ecb2a9ba5cdb2a70ae0c700e28e42046d401b0e6b7d10e4d7d777191b78398cbabfeb32f24f677cacecd04c04bf1eb33082bdabed84cfd2aa5905fbd8bd2191b2b4b0c650b53dabc27916f1f1948e24ae7801cecbe3786e4428c11dd474ef37a6ee119210fba4b7e4b2cdd610cf1a356d4661dabcb3c0609ba9e3a119581df6b7cff08ba5b60b2365f439e5002a78946ee51bf939f2d3d077476de602087257e27d04c1f1b148c65f6df5e2d74050ba8e798ae46c19a8298ba312698353ab2f0393a7ebad9a70d7aa171458089520cdc00b7c4f9120ef97f76842260d40ed", 0xf0}], 0x3, &(0x7f0000002900)=[{0x50, 0x10e, 0x300000, "dad390dc2121de6ef355bfb6838bbacec257995485a3de2560df2f12b7a9215d72374063344e551322b77911675e5c8358959a83b657c43cfea192aba75b"}], 0x50}}, {{&(0x7f0000002980)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002a00)="4320f8dd5c0685d8626c8eb239654e1e9661278e8069dc380b38f027a8388d4784be4761802e44014b998ca8ecff82773a1d889119999a5b456000b74e89ae2743ad1d68074283adc6b8ccaab9e46c7edb4df18d6605bb09580194719d6af5938027ecc1a2b9bb19434d8876b53ea28460646e2443251be2f2d2dbe2a845001dc75486f089bb58dc73b3c9de27f4c367eacdb1da30f7e2218374bfe60605263fd7674f036c352bbb03569d9a5d083e6b4ba46c59ddfd7db9f3600f90047eeff583e5c2929431b56a971c4ebe95910cf70282df2bcc9df6b7a3b74e8e5835b2d07981ba601ce54155a13a65db2bcccf444e6b5bfb6b15ed9a", 0xf8}, {&(0x7f0000002b00)="b5dd71e36fb557b060a5041ec0d9208fff008032eae9db9bcae5b45c608e62d0ffa6a8648d27bc6ff3b91b0eaaeab242d0efa81b1c8a892c877c8e99c1122f716320061bfab1c7d8487d4c8ceac2c10dec879b8d6d46f6dd9f25b330087d996225afb5bd2a9f6cffa63e2d56704604c40d888e5b8a22a5d665c371849f92b292b038d3121774970b5d36d5361786aab78eaf7e55cf37fdc2cd51", 0x9a}, {&(0x7f0000002bc0)="9cd44e73c1c90e1c85e185", 0xb}, {&(0x7f0000002c00)="9c982ca6d9b420ec0550b76bd6341f656f1d8fd3cee408440a47dea286ea5e9eee2f01bac07d85e7552f453d733b1c799dce12c1a8f1d1fe1560a3318673d2b74a90287a6165a3b13d47f14642c6dc6b7762443932cd1d52d90f328900305e5850ea8f7992641c9280b842f33284f08125409e4814e5bfb704bda5b79ef3633a3a003eb3c2b02eb8600eaf852ea6331c4f5cfffdd5fa4a010f7a790de1c2210044f1864e2d12f6ccae76a77c83c75e981ccdb071891b396794d18d3e", 0xbc}, {&(0x7f0000002cc0)="ab8c92740b4b9c8bfed4548bc7fb7f0f1b6561a8362c6c4516d6e048690657930772d0391e5b7eafba4a4d34fc2924f7d0307b78866106185ea6997d5465c90fd5113ec3697e08572e47e96a776eec8686c5f59ac017771e16808678a42d78eeda7fb26b174a8422abc96aac4dc7c90f7981e102dc9c68c385041d83cb2efcf674561181dca0cfe69566ff2e540cb76ab4d9cd05e861686ac9f014af404aaefc07277ab9e1d4", 0xa6}, {&(0x7f0000002d80)="be24b39fe2dd2edc11444b9f0997e20b87049d0485c7b5a6ebbd5cec07a976cbaf074084e26b9059f2deb88d421be5e189d9906ae64b8c7571f19765d900c619465ee5d4094cd70e9a055020040b83d93b63ce58dc28cb7c58f6ee40", 0x5c}], 0x6, &(0x7f0000002e80)=[{0x108, 0x10c, 0x49, "450af144f08cfc10fbbbb49b1dc55014eb071b156132606974f183e62dc98500aa827b84cbb5fc140c44a67084bbf33d8573e9a1a6cbec905bf48b7d3fde8fd7268f2ebe1559e756691dac1adcf60cf95ece9f0679a0a22b4e09f0e9727a1164fdc8825735c23d02b7aafd9e4591078cb96b4ce718553b1b469880606e80f3e5d04f6199f4b1ebe0b3d5d773064d0674de9c8154701aa880857569146b25b74e87c5ddd3e1a49cc73a89407c1d0c12fe0b1d8e7e383bcc421040a2405274fe7e04ddd8a78b2c5239c6f7b522dbea1b5819f2e5cc22287a20d230c2b603d7b52bc933f6529f2878e8e50567a528f92a7ee284209e"}], 0x108}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002fc0)="cdaaf1bdf73e02253041a129f6344b1c6df42a034acfb7f539aaa4fe3c823fa2eed0eb7ac54de9e5511d25dbac6e4a3613832b1f4fd42ebc784833425c7897d3a33e8c526b65c6a1ad503577592b64969b360ad1529a22c21a2c9269e4af52e92dc87f3d9f4325cb14b6dc59e80c31a69df85c42b330bf7c783da283f7392bdba2cecfc1098eeebf83ab8db2d3908010a85672ac445c64d8a790e1de1b634fa05b5d38fce7c78c55ba97d4f6924dadfe6344931e90cf980ce8889d4b50e98e0399bafdff0eef9b73e0148256bf98700c36179663f6da1ed4c46d0e8b5a", 0xdd}], 0x1, &(0x7f0000003100)=[{0x98, 0x110, 0x8, "2dcade7d90970059095310c4dc17cac33344b66c44ca8879672c25082e83dbc8927395ae19e446ac9bfcf1a8697a17b6adc6e708bbd711d2db1a337e8ea6688a2e6442dd112b27e9ac6a6384c08077970d211e306f6fd8393f52839610b554c09f1f978341abd6503d19a2b22482341e869e4225c698a514070ab98f7ae06a0785"}, {0xf8, 0x3a, 0x5, "3dc35cfdb58ccbc1e1435db23b0143f29e98047ed24b2689c3fe8e02d861297679422e850c8de73401836beb9296bce9c8358581fcba375445f546952c5b34377721e1579ee7d5bea4828e971b631e4ada4e07948ca2df4b058bc75ae85bf96abe710531f16da5988a49c62a806db81ff96c0e7b1df168b7021dce9f3bd7cdc966b75e30d49598f095cc185cdd2cebf7ad8b16a10b3f5050c86b50e716f79f68f24a3fc37e08e5e8932c1ec21e53272843e23071ccd989b10261d5caf79efd43ad9f61d72a41323bf809da5e1e3c4c93dc6ca586df3c361b48af52f4f9d744e402ec1192226a90dd"}, {0xf8, 0x10c, 0x8, "6f9fa113b0a18df47d8ddebeac09f511b98259d871c4521d3b709b5e065095ab0d931038b7ea11b5711a2b8334864f1630d72111d879f529c530af2996a0d0a5a7c5204397b9879ca62e05bf2925ce78886faec43a75f3881b12a9e2388e20835387f496441872d4420b0f5906a242147ae2375a71a054947987de93e8ab3d4ff215d948df51dce6ad9ed1114f973b5dbbaed77b2a649fc9a9245ad3acc45bb3655c931929b6806464244565ca3747971a1a3ac53d4f5fb807c4c82b7af6278bbb4cfa959f49de6e4bf3868b61b383e928aed336d532a0061b5728a65c351b680ae204f51fb0cc"}], 0x288}}, {{&(0x7f00000033c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des-generic)\x00'}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003440)="24f2a2601337cb5c26fd4c1386c8d92595003ef67307f06c048388ac13ff264d68fbb95d64064f68f8f22b989c7944b1bd1a4ed67d44241d06c28a101523a4a13257e85a818daa5a7e07ca96056bf07741a85bbaa000156ec9cb49c552dac64bbe85bd801f41ba361078b89fafe28ff5f8510ac77ed35cf31eca75517c810814bf58255bd0877e0c534ca43a46924c2e5ee4359fe39651e8080a62ee6cd4fea2c17de0d548d13f358dfb17ccc1deb8690ecf6f5ae55ed5808e", 0xb9}], 0x1}}], 0x6, 0x4001)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f00000002c0)=[0x2, 0xc6b, 0xfcc1, 0x994, 0xdee, 0x0, 0x7, 0x7])
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1, 0x1})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$kcm(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x202000)
socket(0x2, 0x2, 0x1)
write$P9_RREADLINK(r0, &(0x7f0000000400)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x58)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0)
executing program 33:
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$kcm(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x202000)
socket(0x2, 0x2, 0x1)
write$P9_RREADLINK(r0, &(0x7f0000000400)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x58)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0)
executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000000)={0x0, 0x0}) (async)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x2e4ca021, @loopback, 0x1}}, 0x0, 0x0, 0x31, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) (async)
sendto$inet6(r0, &(0x7f00000019c0)='z', 0x1, 0x39165445502e75, 0x0, 0x0) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
fcntl$lock(r0, 0x24, &(0x7f0000000340)={0x2, 0x0, 0x8000000000000000, 0xb})
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="19f8c9171d06dc8e1003253429612691f5dd5dd2e53db10369743eeb08f6957f65013dfbc57cf7006d5cceb87f503fe2ffd7ae01acd6d61f363a6b72c496c11cf0adc4a1e372ca2058b2a4530f4450a8f10f02f5e129668e8944cd1cf4b28a68b4bb15d830e9f714ba9e31e53810bec6a58bf836d6a845f1af6d744cdff71436849115cf92ff58de32fd2ba5a608000000000000fb18a043634961d903ab60e56db2193bc4356266bf", 0xa9}, {&(0x7f0000000840)="0f780590573eb90eac64876e2ece341ba416ae61526f0badaa298e29c41e122c7c88b181f9da31a548de364badd3313e03d3fa524c26ed326db0313f98ca68bfb942564b9eae04723efd5fc2e9fef73c411ed353d26eb5f87e734bd46bdd471eb8a6b7aaae7825f747e4c8ab02f156c4b84bf300372f232d5130201cb905faccece498eebbad34513c748efb9a8c8f3463570670b32edf46fda46d96daaec51815401bab7ffb653e3e4a27934a1d23be2e25483f2303498cc9da42837e3ca70c4844c64c035628c76bf48ccb61b21d4169e240b91e313a3dd21faec69b8687dc621996edf3cc", 0xea}, {&(0x7f0000000600)="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", 0xa2}, {&(0x7f0000000340)="b05a0bcd64dbd9a18c513140cc23a8cbd4038915e5898187f515efbf542450ae58de10df5738b15b8a7542647e51f571ae189c8cf72d7dd506b20008c54b7a13bb0d0d86408cc9fa5796243aac0b1ca1941d1817e3ec8ff45171783e91725d5da2788a26bb7a60beec8d4f476e1f5f51b007a59e9cec362bb3d0be73f9e844902309b9d239824fdad1cd19002d826bae1716f4658adda27bad6f2c0323b908249f084b200fd03138b15f6e87367d113008d878f41fbf44f1aa172b00f1f84bd2c33d23874308e8b850d215b4e7519b6fb06f06b77be00962de6e28678fd2fca0bee44b244b9070e25fec6d8e2d9c", 0xffffffffffffff12}, {&(0x7f0000000440)="6a7b07a9f0b9fdc6534f3dd41345b5fdb9e0cc6199f30b9a688b702f505d70394f09b9b21713de13cb4e9002b622a00816215d68b7f8368074883b93bf0198cc1085c88905b0d753d15a0b0f80424b3566648f8c2f5ca00257e321247e5175e0a8f1a675fc3afd4c940ab2364698abd5f7751f88971b6f3b4f15e5d56c212275b7b8a5d23b75c5fc2bd877dab93c8210df2ceddec0ef80b77caa01f77724eb9d6c4e801f3cd977a23dc2a5cc8f3589ef81f9341fa90fdcb8808edac9bf3f8f0001", 0xc1}], 0x5}, 0x816)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x5}, 0x1c)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="1201100187010340b804020240000102030109021b000101fbb00c0904"], 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
inotify_init1(0x800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r4)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES32=r3])
socket$netlink(0x10, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x11, r6, 0x1, 0xf8, 0x6, @multicast}, 0x14)
syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0246632b047fc9"], 0x78}, 0x1, 0x7}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7, 0x6576, 0x1})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r8, 0x100000000)
executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000300)="0f01d82e673e64360f01d1c4e27934ce0f01bce3810000000f0f16b436f30f09c744240034b963bbc744240207000000c7442406000000000f011424df490a0fc71966baf80cb80e563b80ef66bafc0cec", 0x51}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000080)=[{0x9, 0x4, 0x8, {0x7, 0x4}, 0x3ff, 0x2}, {0x10000, 0xe, 0x7, {0x3, 0x2c36}, 0xf, 0x4, 0x5}, {0x2, 0x0, 0x5, {0x7fffffffffffffff, 0x9}, 0x8000000000000000, 0x7, 0x6}, {0x8, 0x98, 0x2, {0x9, 0x8}, 0xff, 0xc00, 0x5}, {0x6, 0xfffffffffffffff8, 0x1, {0x3, 0x7fffffffffffffff}, 0x7, 0x0, 0x5}], 0x5, 0x40, 0xd13f, 0xffffffffffffda76}, {&(0x7f0000000240)=[{0x4, 0x7}, {0x0, 0x2}, {0x200, 0x80000000}, {0x4, 0x1}, {0x8, 0xfffffffffffffff8}], 0x5, 0x10, 0xaf, 0x9}, {&(0x7f00000002c0)=[0x8, 0xfffffffffffffff3, 0xc210], 0x3, 0x8, 0x9b99, 0xffff}, {&(0x7f0000000380)=[{0x5, 0x100000000, 0x6, 0x3, 0x7}, {0x9, 0x6, 0xffffffffffff6391, 0xe83, 0x8}, {0x5, 0x3, 0x5, 0x8, 0xaa8c}, {0x9, 0x7a4d, 0x1, 0xa, 0x5}, {0xf, 0x1, 0x6, 0xd, 0xfb4}, {0x2, 0x9, 0x80000001, 0xffffffff00000001, 0x2}], 0x6, 0x28, 0x2, 0x200}, {&(0x7f0000000480)=[0x5, 0x401, 0x4], 0x3, 0x8, 0x100, 0xfffffffffffffffd}})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r4 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x484101, 0x88)
syz_usb_connect$cdc_ncm(0x6, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900710000020d00000524060001082400a9b30d000300ff0005001407240a050905580c240c00000040a90cf700030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000280)={'\x00', 0x7fe, 0x2, 0x8})
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x100000000, 0xb0000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x3b9ac9ff, 0x0, 0x8, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0xf})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$IOMMU_VFIO_IOAS$CLEAR(r8, 0x3b88, &(0x7f00000000c0)={0xc})
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000300)={0x2, &(0x7f0000000100)=[{0x5f35, 0x0, 0x0, 0x9}, {0x2, 0x0, 0xdd, 0x6717}]}, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f5000000", @ANYRES16=r5, @ANYBLOB="080028bd7000ffdbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="42ff9900cdcd00007a00000005007400010000000800a4000300000006003600ffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x100)
executing program 2:
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r3, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
flistxattr(0xffffffffffffffff, &(0x7f0000000200)=""/13, 0xd)
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000180)={0x28, 0x7, 0x0, r3, 0x1004, 0x19fffffffffe, 0x3ffb})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0xa, &(0x7f00000006c0)=[{0x8, '\x00', @st={0x4, [{0x1, @svalue=0xfff}, {0x1, @svalue=0x7}, {0x3, @uvalue=0x8}, {0x2, @uvalue=0x1}]}, 0x2}]})
fsopen(&(0x7f0000000040)='afs\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) (async)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r3, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) (async)
flistxattr(0xffffffffffffffff, &(0x7f0000000200)=""/13, 0xd) (async)
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000180)={0x28, 0x7, 0x0, r3, 0x1004, 0x19fffffffffe, 0x3ffb}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0xa, &(0x7f00000006c0)=[{0x8, '\x00', @st={0x4, [{0x1, @svalue=0xfff}, {0x1, @svalue=0x7}, {0x3, @uvalue=0x8}, {0x2, @uvalue=0x1}]}, 0x2}]}) (async)
executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
executing program 34:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000340)={0x3, r2, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000001880)={0x3, r2, 0xfff, 0x3ff, 0x2, 0x944})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x58}, 0x1, 0x0, 0x0, 0x48891}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001f"], 0xc4}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000190c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)
mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f, r6})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff})
r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0)
sendfile(r8, r9, 0x0, 0x4)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1a, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000280)={&(0x7f0000000340)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x40)
sendmsg$inet_sctp(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="05", 0x19fff}], 0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="300000000000000084000000010000000200ffff03000000ffffff7f00"/44, @ANYRES32=0x0], 0x30}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
recvmmsg(r3, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10040, 0x0)
r4 = fsopen(&(0x7f00000002c0)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x86)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000600)="0f790cbaf80c66b8a4e76d8066efbafc0c66b8ee00000066ef0f20d86635080000000f22d8baa100b80000efbaa00066b851f7228266ef660f7c0966b9fc0100000f323664650f01c266b9990a000066b88600000066ba000000000f30b886078ec0", 0x62}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x41000, 0x0, {}, 0x1}})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f0000001780)=@svm={0x1, 0x1, 0x1080, {0xe000}, {"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"}})
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05002abd70000000000006000000080003000de36d7db11a27a5f33b39967ad6607cb0458c1886e12bbba2523f6b64f37d6f526ed51c02378819c233feb0bbe495a5036f695b1d", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20040080}, 0x24040815)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2e, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x44811)
executing program 6:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x6, 0x1, &(0x7f0000000080)={0x12, "1ad94edca0380b6187e953449f6c12f206b2855cd8c82b1b9950cf5e1dee9300"}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
executing program 6:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'bridge0\x00', {0x4}, 0xfe01})
executing program 6:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'})
mkdirat$cgroup(r0, 0x0, 0x1ff)
sendfile(r1, r1, 0x0, 0x9)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000dc0), r5)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000ff54770228116436070980218d5277bb517ca1b76ef638222864cb92b0b0366ba04fe4e11516f9512a1b6fe6c116732337b9fa190cc41e2b938f984c1f4afd9af745c5e6a37c773e8098922628a84ef0f30fe34c695138d30dcc0cbf6dadf3720ce43ee7c00e8dbe735c275eb0471728bc92a1b6f27dfdd7a27160e22385006be6272dd13c1735a30b2fb162563aacd53d093135a4e3ce5f85ad4b4fee1ba7705d0553f1325d46846048e072e7ff0a80fa52205fa2432cad810374242368f9ff7194503430c7b8265cd22cd9cc457cdca8e2", @ANYRES16=r6, @ANYBLOB="01052bbd7000ffdbdf25020000000800010002000000"], 0x3e}, 0x1, 0x0, 0x0, 0x860}, 0x0)
executing program 6:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x6, 0x1, &(0x7f0000000080)={0x12, "1ad94edca0380b6187e953449f6c12f206b2855cd8c82b1b9950cf5e1dee9300"}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
executing program 35:
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x6, 0x1, &(0x7f0000000080)={0x12, "1ad94edca0380b6187e953449f6c12f206b2855cd8c82b1b9950cf5e1dee9300"}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060003b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000011f4525860108ea10000000000000000000000000000000002004000000000000000fdffffffffffffff5000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x600}, 0x4000)
executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x80)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e)
syz_open_procfs(0x0, 0x0)
syz_usb_connect(0x3, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="120110008fcb2040c71b00309a690102030109024b0001020da007090424010002020509052406000105240009000d240f0102000000060006100906241a07001e0524010207052406000005010000000d240f"], 0x0)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x6})
executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_mmap={0x3ff, 0xd, 0x4, 0x4, 0x4d, {}, {0x3, 0xc, 0x8, 0x8, 0x2, 0xf9}, 0x9, 0x1, {&(0x7f00000001c0)=[{0xfa, 0x5, {0x800}}, {0x1, 0x80000001, {0x7}, 0x4}]}, 0x80000001, 0x0, r0})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x3, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000001c0)={0x1})
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
setresuid(0x0, 0xee01, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close_range(r2, 0xffffffffffffffff, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf25070000000c000600000000ffffffff00c78dc9177f312aa353c1d540060f8065d846c7de7cfe114781081f3343d5f6ec56dc0a240014e637d0d51d66beade2c46e009e75bdb6b390d8dc5d2ea3648294d62963dd1a337faeacd7dd1597f729b75839d08562be286469dacafa16081f8bb1f460806ff39dfda61283"], 0x20}, 0x1, 0x0, 0x0, 0x4010800}, 0x24004800)
executing program 3:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x41, 0x4)
executing program 3:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x88, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x200, 0xa, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \b('], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x4)
acct(&(0x7f0000000040)='./file0\x00')
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
executing program 36:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x88, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x200, 0xa, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \b('], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x4)
acct(&(0x7f0000000040)='./file0\x00')
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000f2c0000000b0a05010000000000000000070000000900020073797a32000000000900010073797a30"], 0xc0}}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0xff, 0x5, 0x32315241, 0x9, 0x1, [{0x4, 0x3}, {0xbd, 0x2}, {0xc, 0x4}, {0x5, 0x10000401}, {0x2, 0x7}, {0x2a, 0xc}, {0x55712242, 0xfffffff7}, {0x7, 0xf}], 0x4, 0x0, 0x4, 0x0, 0x6}})
executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r4 = fanotify_init(0x81, 0x40000)
fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0)
read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x805, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ebe2d00000000000109022400010000000009040000010300000009210000fc0122070009058103"], 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x21, 0x7, {0x7, 0xc, "8763000000"}}, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240))
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4)
sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x515e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, 0x0}}], 0x1, 0x24000000)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x6})
executing program 8:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06006220"], 0x9)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
executing program 8:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x64984a65, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r4=>0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r4, r5, 0x3, 0x8, 0x6, 0x1, {0x8000ac7c, 0x0, 0x7, 0x67, 0x203, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x13, "fe1d080034130000000000000085aa000000090000000000000004b427180010"}})
executing program 8:
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbe125090000000800010001000000050008000000000005000700170000000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff)
mkdir(0x0, 0x1ff)
mkdir(0x0, 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
symlink(0x0, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000001780)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x4eb84b3d5f309c6c)
r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000001ac0)={0x34, &(0x7f0000001880)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000580)={[{}]})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040006"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xf8, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x37}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x4}, {0x63, 0x6}], "963dddaf3b390ae3"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x9, 0x6}, {0x7, 0x6}, {0x3, 0x2}, {0x4, 0x3}, {0x6, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x8, 0x3}, {0x4, 0x1}, {0x31, 0x4}, {0x6, 0x5}, {0x2, 0x7}, {0x4, 0x1}, {0x8, 0x5}, {0x6, 0x2}, {0x9, 0x2}, {0x7, 0x1}, {0x83, 0x2}, {0xa, 0xfe}, {0x6}, {0x6, 0x1}], "6e1a776a11deb85a"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "752ba6994b13c1ad"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "668b99330caf7e55"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7, 0x1}, {0xf, 0x3}, {0x7, 0x6}, {0x7, 0x2}], "17d490994cf776c5"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x12, 0x2}, {0x3, 0x3}, {0x60}, {0x9, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0xdb, 0x3}, {0xfb, 0x5}, {0x10, 0x5}, {0x7}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x2}], "eb119851ddc30a59"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x6, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x84, 0x7}, {0x8}, {0xd1, 0x1}, {0x5, 0x2}, {0x5e, 0x2}, {0x20, 0x4}, {0x43, 0x9}, {0x6, 0x6}, {0x1a, 0x2}, {0x5, 0x5}, {0x2, 0x2}, {0x3, 0x4}, {0xa, 0x4}, {0x8, 0x7}, {0xf, 0x7}], "5862133abb4846c8"}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x4040010)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r10, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0xb5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040084)
executing program 1:
socket$key(0xf, 0x3, 0x2)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0])
executing program 8:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400580, 0x10, 0x24}, 0x18) (async)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x5, @mcast2, 0x101}}, 0x0, 0x0, 0x29, 0x0, "e529ae66192a8fae64103056dd0abf8779d1a5d478d3a8e570fa738385e98fe9cf8efdd997b08215bdafdc218a2d755ade1bd350cbe314f29c263752ea6874b0834f569e00fc70edf9fa2a3dc7718f50"}, 0xd8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c007705060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
executing program 8:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
getsockopt(0xffffffffffffffff, 0x114, 0x2717, 0x0, 0x0)
syz_usb_connect(0x3, 0xd53, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0xba, 0x8, 0xdc, 0x20, 0x11ff, 0xc993, 0xdc90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd41, 0x4, 0x5, 0x8, 0x20, 0x6, "", [{{0x9, 0x4, 0x25, 0x6, 0x10, 0xff, 0x5d, 0x1, 0x9d, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "4d84126b2e"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81d7, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x8000, 0x20}}, @hid_hid={0x9, 0x21, 0x6, 0x30, 0x1, {0x22, 0x228}}], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0x3, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0xa4f4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x58, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x7, 0x10, 0x0, [@generic={0xfd, 0x4, "0c0ff3d98c0231cc5b2028649006a6cf46883bf588f1a4fdab388f09d0259851ada5814a3bf3e1e602ce60332f04ada9687dd13b62630b44e9d0f11bdce35afd1504e0c0866357dfe7c404e29fe1532dee20b0ebe2dd604f41374bce71c5558be1bf2c52ed2f84017e22797dd787d89b6c279f7dfee5157133499dab042588d1b43fdce61c41ce2fa8b419b8df7e904f7bc9668a52435a9d15fb7cbacf0e62babc5aa241f4da0069d3d3e45bff86e4c2492f69a1cf0ac49c78a3f15196566d3e7199484a42c59de5373017e2d6c2e208c86e297024378116c56869f02139860f2ba3fd6b650bacc9df89f83b8924efa2fc15387a98f65581bfc773"}, @generic={0xb9, 0x33, "ceae9d3c9b181b841612fb53f68d9d804ba14dc6a810fb12f4708fcc89d7e1f7ffbbfb1b2aa8d3159792822f207aeec24ef3a1ebc0eedaf51eb9dbcc991e50ae5f4291efe07224c9361176a7a50e7eb8f54620ddf1042d3ca4b9d481651cbb92c1ed66955949254cd9ccf588965d0060cef26b15a80ba4bdef75adba4cf3e175a0f0f4e88f168fb8710358ceb046e7d6ddd14c034a1e75de75ca3ee27a90aad617b6e42ea97a3b564ce47ba9bbb43e4c402abf9a3167b0"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xc, 0xf7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xc95}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xef, 0xf, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x74, 0x6f, 0x7, [@generic={0xf8, 0xe, "aa0388c9911fdd43cd77ecbc32a0c34da62d4488ec45c3bc3b924c2dc7181c76ec97b9ad7d37c5db9c3dbd4575df6cd212c13dddfde0487c5c17858008d0a231fedad19b3156765991dc96d9cb5907b762f8c23527534cc777db939b11e4acfb9f6698c1bfafad538b55c0ade68f946e5c50d72905e66930279cb4d4246b534528dcdeca3f0fd40c65b14d3ddccf95ca94de265df76391271127a6f3f92b3d1d6fe1cc22ed91fb01fa1d5cb8e05b83b385eb52c5342cba9171199209e0c7644f85ec1e9d6483cc59853a26008477e671939f9d530cd5730b6c1f98d7a7b65881c17a05d2ece988ba00e82c0f60d86b9fac9f69eadd75"}]}}, {{0x9, 0x5, 0x6, 0xd, 0x200, 0x3, 0x40, 0xcf}}, {{0x9, 0x5, 0x6, 0x0, 0x410, 0x3, 0x6, 0x4, [@generic={0xb7, 0x31, "0237f11d20c029c43d1c16653387fa4fb598f32508115805c71634bfeb4111a511b88aba79585bdee29da0b181c8fa7a8167f5b029ee11c48f9b3fb255737580caad02b14588abd13655b7e0b022a0c2ea961b88ab097f1752dff2a7b6ca98a94bc7dc830546be9d6ff1dc1976d99227f7c3d5145e5c0209aa63d634ccc86677858a83198ed22d485cffb434091711d00c7d5786bb097abf15043ee798a739458575aa6fe75816537350cea99bfff9792f59a2fc50"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x17, 0xf0, 0xfe, [@generic={0xd4, 0x3, "060b37abb1fbcbacf9ca64609ff7ff4944b99c0a1593e54c7704361d36879cbee7fd1d4621ceca15d72cfd2968fdf238426d519c20a88abbe41a60e3dc20432df079e699524c99444b8ad36f52386fd8bd2e2e76523305d816a7783def3e0d6f59ee3a087266cb0ea4d7179bcadbf37d516dde008c1724dc27adae49bc46fb6c1cf24d7e816e3fa76b9ea76a824a65a98ef7c37ce99d077e4c1c44676e378679b68c313264358507ef1393fdd0819d8be2d9cfabf66d9d6c58310b19e55655ee9fa147ec65e1667122a72b500e3f9a3271c2"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xff, 0x6d, 0x5d}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}]}}, {{0x9, 0x5, 0xf8c50849b9181d56, 0x10, 0x8, 0x5c, 0xe0, 0x55}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7, 0x20, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x8, 0x7, 0x8}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xe, 0x7, 0x1}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x4, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2e4b013d31a4d71d, 0x1, 0x8001}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x0, 0x9, 0xb}}]}}, {{0x9, 0x4, 0xb, 0xfc, 0xd, 0x68, 0x6b, 0x17, 0xf, [], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0xb, 0x9, 0x7, [@generic={0xa, 0x23, "816fc7c7631449d7"}, @generic={0x62, 0x21, "503b0b4109642b2064434536b9c4acaa7a893922c7d55158888b29e0165ff645c8c3c5ff38b8d60df6e35fc0c0e2e5eb067711afcac1471afeba6ab7dfa33a007b69fa388ad08c06a22f44dc528ed6eed5c88006045414b3d789df53e0ce0854"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x2, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x31, 0xb}]}}, {{0x9, 0x5, 0x9, 0xc, 0x208, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x0, 0x5, 0x7, [@generic={0xc3, 0x10, "4fe4ec3cfff9df82ce4904a1021cc7708ee8e1e96e8f645816ccb5106805bc1f29cb40f0b05a2cf2181c1e1be9c6ec934d719c21815e5a7a6c12148bb16ad448e139b1d668a796db3e4a3be245b15bdaf3b8d5e612084b90731fb662166d9b60b8492190b90f35d6d2a88e668bacd8806d538b4247db5cf8434b9c50e4a7c3428c20ffa942d3c7e9838840b0c7e5af04bb69e215ddd50c8918b5e85115786b46b8e0e98bebf93c3fab63b45f787ed37339fedb3b8a0de318dd712088cd2a0ac6e2"}]}}, {{0x9, 0x5, 0xb, 0xc6520121ca96984f, 0x4fc65db9b4c87882, 0xfc, 0x48, 0x5}}, {{0x9, 0x5, 0x0, 0x1e, 0x3ff, 0xa, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x3, 0x61, 0xf2, [@generic={0x84, 0xe, "31707dfa1313df15c1a70bf722276f9c4d1bc8c5069f9d061f8af140ab11bd515ddc49ba8038fb5bdf7d1312c62704e4e2ec9cc38b2bf4e430991918df482b38565209a77652179833e5846d2cb3afdaec8c05521f376118e0bdcce2480093acd1b57bcc18add624f00b43826dc8f44f78e6afb219735c78ffde6ef03f06ee4e6ca9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0xbd, 0x5, [@generic={0xd7, 0x1, "049636bd28d03728eeea25380b4f950db8926e39286b378d251d00f5391fa5dfb854f91ebb5b97da71f3e1ebf72b7e8e9eff5077926e2aded385bf19bc6fdb2e22f61e0d078ca4dcd17a6f96c91d9a79a59227650b09007d9dffb50205987d88eed4f6e2ae2d85c1ecc52aa4eec75fb4f64ac9222f2cc1030bb8dcb43b8521d649b53834c90e17cba4c4a5c8f7b071139ff898f8de1d8323cdc5b62988dff7f41f0808c58eb1ee86c56d51b32ab522b5632af9e583358faf302fd143d283914ed287fd57cbb3c6cfdafdc7fb4bbbec9804073e0da9"}, @generic={0xcd, 0x1, "359710680f1871b7a5307ac628d555a50cdb51990d26bc348b4c356cabdc2f81c9175111bbfa31401c1893cf6855ced0f023d06f75b7be8a52dbfd0b107ad187bf706d1a72eee8d08782de5b2dd8769bcc73cf65513eef640583616048312beeacb8a9f3baf704082368ca5386d66aa5906f348cd427d39081b7a27d6b9904614510c7248be57bb78002c5ff2bb8644e164e9990d75e7f3fdc3d421773655da2ac39dfb4f6fe7981decade33866e116673a8ef228081f4fa7a3f88499fd8b9a70c72181e971abf687a6b9f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x20, 0xd7, 0x80, [@generic={0xa0, 0x1, "eb674582030a19d881731a13e4efd11d7133f1bc8494a61c5d08da35b41655dd4b5819046477e6f69341822ccafce6941c7beeb0830433e51ec4508bf9c9f6c001fb011f8f89c1cf896d355e70b1de732c3ab8155fd2a3a13669dca2aea4f846da62ad6a469242d19bf50e45634dcb0cd07050d153b94d5405de0007001110f0c582954829b9d344e6ccb9aa5d2273cbc3914fa4c7a9a68ca3a4a453f652"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xb2, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffff}, @generic={0x16, 0x3, "89819e561102b836a1d6428617ab45fc25c968f7"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x3, 0x5, 0x1, [@generic={0xb4, 0x21, "a8f682598dfde1a01f30539acfafdd7e4a6acb84f78fc9b56a110f40a7626cd38691b92da8355ee611e6caf3ea3c5347466c384e7f60118e01fe2340333462b76296d41d479b7ebd59c7b5e55f63be9785b9f04a09b6e5b13ae3603076de8b430a04123abf0d075f4b1a529bc1586aa6f19a1b21b4e7d8338ca4dc1e8925f831345fca1f5222ccebf6c3b260bc883c9ab59da9cd2e92e882821ba27fc5b5b607742c64c4646c3a487c95956acd6855ba77bc"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x10, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb0, 0x1}]}}]}}, {{0x9, 0x4, 0x21, 0xba, 0xb, 0x5f, 0xa0, 0xe3, 0x35, [@hid_hid={0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x682}}], [{{0x9, 0x5, 0xa, 0x1, 0x400, 0x7, 0x9, 0x5d}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x3, 0x9, 0x8, [@generic={0x70, 0x9, "262819a3f667f5d6933c941d40b8288f9d595f78507eca81b7ecab291d641807480454213d28e0516e44bc82c05893151224c7ec15533b228c11a9cf130d5aaca1bf223a977a742366eb1fe416da09bcaa479df6e6dc27ac9f044ac9bc1f0bc3d02dc97d4badd8ac8c1dd5682c4e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xc, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x6}]}}, {{0x9, 0x5, 0x4, 0x3, 0x0, 0x4, 0x40, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xd, 0x0, 0x8a, [@generic={0xf, 0xd, "1e23042e59dadb6d24fd96d25e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x32, 0xfc, 0x8, [@generic={0x1a, 0xe, "ee846a4543436806d5ff3318616ce47819d70653457d5c15"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6, 0x12, 0x2}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x81, 0xff, 0x5a, [@generic={0x48, 0x7c04f5abfe5979c0, "4da4d4f1a5e9acb9fe3313711b48cb6e1105829c3b9df7ad15ef968f0e2be8d71b5e22b4f1f4a4fd672c453ccbdb27f08c88acc939943b052bf74ffad620c18e1c3cf43ea8f9"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xd, 0x3}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x46, 0xf, 0x4d, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x6}, @generic={0xae, 0x5, "0223c316d0280b2f5b2d4d1c86f1b9813adc3ed1db40a1e02651b679d35b5a61faea8413d42e00a07a3d39abf5f06d909e838e43c736dc1fe038702383e4351303556dc36f1349fde51cf7f025f79739bba6426240128dc562b363e693ff2b5bd5e8050a24bf9cf78272306fff0bc5725b1255b5ba0328ae919ced86a3a0da5bc0102093942b3110456d696775f9c3c8431b2c005004697a746fe509114f079969f7c2cd1af82f65100c2ac4"}]}}]}}, {{0x9, 0x4, 0xe5, 0x7, 0x0, 0x95, 0x39, 0x96, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2800, 0x41}, [@selector_unit={0xb, 0x24, 0x5, 0x3, 0x0, "1399ee926b12"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x2, 0x2, [0x3, 0x4], 0x81}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0xa, 0x3, 0x4, 0x8, 0x2], 0x40}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x9a, "1061"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0xd3, "c7279e19"}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x4c}, [@mixer_unit={0x8, 0x24, 0x4, 0x3, 0x1, "ef2ef4"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x6, 0x3, "9ad3b6c4"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x6, "d8561578"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x400, 0x1, 0x0, 0x8, 0x7, 0x4}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x4, 0x55, "2249e70e372f"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x4, 0x3, [0x4, 0xa, 0x4], 0x3}]}]}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x201, 0x8, 0x3c, 0x5, 0x10, 0x2}, 0x5, &(0x7f0000001b00)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x42b}}, {0x3e, &(0x7f0000001b80)=@string={0x3e, 0x3, "d63f21365c7b61af2ec32c6ecf41da75e52ac2ddef25c8e600db5cc31b7aeefdecb0d08d40a7295777167faa6f563cd096f5c97fcae1ca6d8598f041"}}]})
syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x74, 0x31, 0xe3, 0x10, 0x67b, 0x27a1, 0xc460, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x40, 0x0, 0x6, "", [{{0x9, 0x4, 0xdc, 0x8, 0x0, 0xf8, 0xb0, 0x25, 0x4}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x1, 0xf456, 0x80000001, 0x101, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0xff, 0x5, 0x32315241, 0x9, 0x1, [{0x4, 0x3}, {0xbd, 0x2}, {0xc, 0x4}, {0x5, 0x10000401}, {0x2, 0x7}, {0x2a, 0xc}, {0x55712242, 0xfffffff7}, {0x7, 0xf}], 0x4, 0x0, 0x4, 0x0, 0x6}})
executing program 7:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x2010, r0, 0xffffa000) (async)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (async, rerun: 64)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000000040)=[{0xfffffffffffffffc}, {0x1000, 0x0, 0x4}], 0x2, 0x37, 0x0, 0x2, 0x0, 0x2}) (rerun: 64)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0}) (async, rerun: 64)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64)
recvmmsg(r6, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/207, 0xcf}], 0x2}, 0x7fffffff}], 0x1, 0x2022, 0x0) (async, rerun: 64)
recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) (rerun: 64)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc4be, 0x7c}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, r4, 0x5, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x53}}}}}, 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00000000009215a00000008fbdab00000000000000", @ANYRES32=r5, @ANYBLOB="08000c00640000000a0034000202020202020000"], 0x30}}, 0x40000) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$BTRFS_IOC_ENCODED_WRITE(r7, 0x40809440, &(0x7f0000000280)={&(0x7f0000000240)=[{&(0x7f0000000180)="c8cc6c500bdc6b14fe059569886c7d9e2a1ea0b8e6e98e7082dadc4cc4ab4d2992efcfcec27438e4c61fa1cdc630e6845e8adca8be202467692aec329a7a410386c05bd81d57d12bb894c7e00e34617dc556e05ef9182242fefac7d718091fdfa0099deb6b9391f121f7ee1c0f36ee94fb3e8c1fd0746eef539e7572f868f209c4cde0794c30e54d", 0x88}], 0x1, 0xd, 0x0, 0xffff, 0xe, 0x1ff, 0x2, 0x80})
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x60, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x398, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19f}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf5e}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc96}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000}]}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa, 0x3, "b45617e36f91"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "4299a6a10cd6e3c39364b41765d1ce9266ff356897fe9b73b17a5c06c55a954a64"}}, @TIPC_NLA_NODE_ID={0xe0, 0x3, "4769007f715aaec1b7526297eca58ef4f7c35b5f2cfb25176cc5eb6f5895dad42a15f1bfb0e031c91e0040c3a34eb2c0a1f900bc8dfea0c78ee606015e16664626fc4f6a85e3589aba290f3c9f503283003d2ca2817831f3fe73339eab46dfcb99be35f8450d762f88c3340f80aee68b393a10d0031ea502f4cd3b8ab0d3244414ca83b7c363ad3889edb2e5405241fc8c1cf39eda2cd594cd031e77f934e76347f4ace51de102667fb817e687d793f8bb9169aaf6e0a646e169c50b9e41e2dbd2d3224388f0b4021c48181838042f5c5b01ac71847d00ba59987e31"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4f62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x793}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1969ae9}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcc3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7fff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7c5}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x200440d8}, 0x20000000)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c8b00000e120900030020000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db2203a4000175730d16a4683f1aea4edab57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0)
executing program 7:
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xf000, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x1, 0x88}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x31, 0x8, {0x8, 0xd, "e75bcf47a88a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0xd, 0x17, {0x17, 0x10, "38495a1306dee7d5281d4b5be81b349fc430d6e2c5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x16, 0xd9, "dd50061c99701a664b69677604d5a11f3508a82b17197dcbf2ebcc933759a310647b3142cdd5c144ab92baa2dd5f2fec3dffbc1eced6529bceb00e1967a3f4a026cda3a717f5a464564cb8b789d7c07a8c5fe0a4ff5eed16ba25424d8c2c321b8ae7a49f54de322c883165339d87bd9680e1680f29420054547261c5baa9f6802f9bbc4bf5ee29bfad65598feaa8d4b77b2d67f3d9786b1c4e1f359e07bbc8ed56b51488b6bf3fa62ab2317763a7f0a35e245b3da58ae54a68de04153af6325ff949706d6737e07d88b3854eed8f75e2903b3fce8ced802c1f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x1, 0x38, 0x7, 0x4, 0x5, 0x3, 0x6, 0x200, 0x3, 0x2, 0x100, 0x3}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0)
pwrite64(r0, &(0x7f0000001d00)="aca9016c36cb8d5931b9fcad60813b1a297e03df18f34a5bfccf7eb98a7a9164a0ea527b977a9998c9ab414213ca683dd253bf27c237505c012d6751e54184ef", 0x40, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r1) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0x7) (async)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x46, 0x1, 0x2}, {0x61}, {0x81}, {0x6, 0x6, 0xfd}]}) (async)
mount$tmpfs(0x0, 0x0, 0x0, 0x800, 0x0) (async)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) (async)
futimesat(r3, 0x0, &(0x7f0000000140))
executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060003b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000011f4525860108ea10000000000000000000000000000000002004000000000000000fdffffffffffffff5000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0xffffffffffffff80}, 0x4000)
executing program 8:
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0) (async)
r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)={0x20, 0x5, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_GET_FPEXC(0xb, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x2f, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc018)
executing program 5:
syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0)
syz_usb_connect$uac2(0x3, 0xa9, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xfb, 0x4, 0x5, 0x20, 0x3}, 0xd6, &(0x7f0000000340)={0x5, 0xf, 0xd6, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x0, 0x7}, @generic={0xca, 0x10, 0x2, "d6d4d58c55bbb78b5345266d5c5804b29921c086c17ec16e2b0f0bce638b7e5fd039c3c8e3a3f9447fab0938d77e10404ad263c03472ca664a72e1839db57d8422403e7c5721d0b2522f271f201802890c7888c5c781753c95aad5b80a0dc80cfb72f872800b04a27bc0343f81c42a3c61f789e3a9c43709c5aba80f9429acb998c166afe096ecf5fce32982c1cf95097785ca939d07d5eaa3e6dba346b9838fb1e3bbfb2453245570fa6691fd4be52009b3ebaa6915ab440c6cd7abe14c9c44004ba1c14ae87f"}]}, 0x1, [{0x7f, &(0x7f0000000440)=@string={0x7f, 0x3, "ec4352f50f0fce6b5be2da87c126a09438798a2f9a4e61008cbd27cf450566a25522c73ad3c680caa905cfe7fafa8e141e47e21ef2f289e4479e37da53f20e582c2ef50ab32c42fe99de024af2782100cbfb264372e1fe75888f7fb585cc6616a8c8760626153eeaba9b4af55dd7e003c5d0d384c04c3b8edad94bef7b"}}]})
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7a, r2})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x200100, 0x0)
ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000240))
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x6d, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0xa, {0x9, 0x21, 0x0, 0xf, 0x1, {0x22, 0xed5}}, {{{0x9, 0x5, 0x81, 0x3, 0xd01e2cedc93b68a, 0x80, 0x8, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x6, 0x80, 0xf}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x76, 0x40, 0x0, 0x10}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}})
executing program 5:
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r1, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0)
r8 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0)
ioctl$CEC_DQEVENT(r8, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r8, 0xc0506107, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
r9 = syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580)
ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000140)=[@acquire, @increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0xfffffffffffffdfc, 0x0, &(0x7f0000000ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0xa, 0x2, 0x17}, @fda={0x66646185, 0x4, 0x2, 0x2b}}, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
executing program 7:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
r2 = syz_open_dev$mtd(&(0x7f0000000100), 0xae, 0x135241)
ioctl$MEMWRITEOOB(r2, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x100000000)
executing program 7:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0xc00, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x4006, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x7f0, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x6, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x0, 0x8, 0x4, 0x5, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0xe, 0x0, 0x800, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x6, 0x80a2ed, 0x2, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x9, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x40000)
socket$kcm(0x23, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0)
executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000002200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x4000) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020603020000000000000000070000000c000780080006400000000005000100060005000500020000000073797a31003a69702c706f72d785742c6e657400"/81], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x400000000008, 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async)
read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x70bd28, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056)
executing program 7:
socket$key(0xf, 0x3, 0x2)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4ca034ed3d386fe959a94601a4007f1f2060b59359747635b076db7697ba5ad45af0423dbb9966113fa5eb59118cac394c2e2b17ebec1b7ce18ede120b1f56956b12a95de708e780ba7a1ac3a9e31267a2c195acfcb3b20c2f5d20de288846045211da53649a6d8b23008449b763fe6a58243cde95093a9755e5725307af09c997520f159f4ec7d1e687a0cf5148721062ecc6b080f65a550730da9257f1515a10830e29b85de3138a77ee8d2f0cb129c971417d7bbcd982d684b697364084c5764bafb4e2211a82e8c962eefb1f000ac8f5f2567b580931676943cea9b95977d842c247a98672b5c73594eb51f927ee5ec2b0c45eda29fb83a092880e542c60113ca653923aa0c16e2e1604e5f437876cb7fa7d1498584f8800ff80804d41c7b89e9cba341fed8d260a6abd0fc242ba6b3d624c91c468e269069d0a121f0951c3765f18693a2c547d9bc924058d0ecece5c7802126d293d3033d6bbf83d4b8b0144d27cbb985dba465d75b62a93bf7a438cce59f", @ANYRES64=r0])
executing program 5:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x3, @pix_mp={0xff, 0x5, 0x32315241, 0x9, 0x1, [{0x4, 0x3}, {0xc0, 0x2}, {0xc, 0x4}, {0x5, 0x10000401}, {0x2, 0x7}, {0x2a, 0xc}, {0x6, 0xfffffff7}, {0x7, 0xf}], 0x4, 0x0, 0x4, 0x1, 0x6}})
executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x3c7c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x60}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c54, 0x3, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x24c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "75187fd0e2a7ca1d92e2addfea98e11ddda6c831ae3b8eb879598de2c38ef35d481fc47003fa6dfdb6c6b0aa903e2d3cb5c511bbf6dd02f076af57b51516a00bd4336094d200596ef00e9021c4853b64c107b1306b3dcb74b197b689ab746e9063d79d253dccce086b67db6caf16b03c91d7760eef9546583f5071ab59ef164a928c964977e0ee803d7d890f194976db8328be3f97d3fd407ce421186023ea2378cd85d1b77868718be81d21513b7a427052684c279e6d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x94, 0x1, "c3718fbdbf64c0357d772536cfbdbcf5385809b4a399388ff8eee2fc59c969892297800d34367e0b91b15853da1de867e184a09b6150dce826e8cc75b4976ae1213b47c92bd5c14cd277b003228792cfcb379b2c63bc51079781840d7a967d466f87c95818f96eec85e16eb55a1128d5439e116e0fb726c0e4df3afab07a1f07787bf2ad1436022605bde379dd80e723"}, @NFTA_DATA_VALUE={0xf, 0x1, "99a690f86a36dabf88e245"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x5f, 0x1, "8c0d851e4872e1836e8a6da317dde50b251b52152be196bd271a4ea5bec72441bd5e31638fcc0988acfb633c22d03c7c2e67a61d0a16db9c15319bb1ffb0e3485070f52303623099ef2c41e11d614d742e81165190b3ab34150961"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x11d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xabaf}, @NFTA_SET_ELEM_KEY={0x84, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "609ad85235a842b1db8cc92baaa063959fe14f9c2bf3329daa830904a4aafdabe8"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x128, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "1df639faebfff6190fddc669dc4d9ecd95b6bdf147c26a6ba6546a7b886ea45d3023c05b923f91c40161b78f1570eb2472d79f20ee84921dc1ebdcdc825994885e8073d229ac3bbdfbfb9a0ce5fb7940e370a04fa2eaeec5f1bb638c3c3555fa983afd545da0914dcdc90540779f1cff09adc73decf73f4b2f585728ff8cf0f012fd7d1452fee26f"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x30, 0x1, "b6da808695c57c78cc5ec5184ce807a483fcbfeb60279732a95591f9c487892b58343343331f1cb34b7e4740"}]}]}, {0x130c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xca, 0x6, 0x1, 0x0, "bcec2e9aa03f8e8552b5cb89096a23711e28b2023bb447dbb57f4273ace51415e7571f0c7d5489d581645798a2f902ff0994957c951663c55c602516b401c9231e9738403ed29f57ab522ebbfa5b4f19fbbb83991622f08bbd7df6ff92cff2cffca9e389f831c3f85c30c3bb68c8bc3064f9b7d7e1f4246f2535b6962ac4e2547b530e1eca6238b19585462f65f859e3b3dbeddbc70ce8b35d0427aca50e9afeafc4421d72ae750f691ba7b0015f05130d74756b5766fe40b107e103e4c5b80b7546a465d98b"}, @NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x34, 0x1, "452cea598885020c53d68df406ca70c5f37463b07e0df715f36336b4c56fab7fccb7393e8e226fe8263b579e7a25ce25"}]}, @NFTA_SET_ELEM_KEY={0x102c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "74abfd41cd411b529c41235606ad79d9c6f94a23f1a4c6515e2f9fe8fca567dbac8bb32376c6dd3432e99e39e67d390f2e89ee3efa4b5e7ec437acb149b806e76daf64b977a493b4890785e72ca98b432865017e52cec3116f71196b11f3d640fa008ebb8cf9df0a87795d649df8bfd685069d95f9ba18bb200de9d22bf370a37dde8d1a1472b8d86fd865fa0f8a31cdac91224261cf11bc8c4e6f3131d72a530897a8630481fa5c19f18fc541b582ad0b9a6a52b76875ff2d25862530f04734f41f550f3efaf1d14cd10172ed89e97f8a5c3c3f9e2f85ddf23b8c6ac7c45f4bd4986ca4fc8b38f6fa9aabef74ad724647108bf032f57b12528874de8db9c6eee03debfa75e3f40aca971779dbf44fe6c8cebaa515840aa095fec4f4115a8965158aad080aad55fb5099b0d97bdf2337f8e2ddc901307ed7912559f8177803674bf50ab43359205485543369eb0234ec5d26504da095fda0b8c35be6e2bf2f6455018676d13678964c6dfa2aa82fb433597d37c6136e75fd1fb7f5b72d8efd97c3874ca117c2ff0ef426728dc32b0900fbb901a8d8489768c5b50c0c87491e015395cd8d4016de5dbe435e99e4533af2a1845203eb62b646fe8433386c1d7f05b08a7234dfb50c8cea6d8188c5d6c54237160304d0ba39067adf18ce73563cc4caebc9e7e235861db6faa8803f9f79e8d56d3ab5edc21ee2555be3078e6edd20d5d3bc0bb2d41f79edd2abcb2712e9a3267cce6fdcdd151e5a3a259b4f4e0936b7b106ebea416f64291b00d048e7e77e6be0fb73fb7f1006795e91c6ccdf15d7fd678e5d96b96abc65b395411e52cfa2e271c32ffc2478e0acb47c60d07a4ca8985b671e8fbbe799e2dc1a61935b99f55da024781b9887d7c5eb55f6cf0f0a60be0da1ae8cf1a2a7e6bef1dc34669d2c20b1c646ed7540c445a1d7bc46c91277af5f72784d6bfd20704a9d38b5128c476655131f5b03284eced8af6f8dbb9435f23040dffcca6c3ebf5be9d1302bf3040c4d1f6ceff7712d9ad340ad7b35794221c43118768893a8dfe0d92758a524e956ed2d2ab7f3f1126c262bda576af282807ed03f37e81e37d4e52125bc101ce9bb3f26747428d44d9f74f7dcbc6e46ddc27b8c0c6aceae62ef5cac122539ce9492f4f1a51b6f1f619fb585c794a833bb16d784f7fe34760ba0254d06733f255de88858c05312ccbc44da9123fbe441afdfcd6b3913f02e4277c42d58541f61157653007da29a5c7d98a6d12bbb1dc0af800aa82f257194d87176c5d1d5f24702439cd7a3de0bc833cd40b6085438cee9212b65f99f0dcac618790bc3be7ab6709d00ad120d4a0cb5e3cb307ff8e577e248edcce556d49a75bbc902589f42eeeeb32af7534d71c88cf6b512165f2ec2b68b58ef362eee0566530c6104d8843675fc226d09600df1585eebec607077a6787e247a6d419551b056cbc0102e925c9407d381bca2ee2e1cbc081d8d433c16cc732d74052a81b4beba21fcbdb281b17ef4c5805cc7a3d42941072b206962fd987f5cdcd3daa28dd65c4836c5660e910828518c72b91c16cc66832cdc745160fa30a5940a95728bb98ef0a6b836e587672cad3d4716280f897d9c5f7da75e5619c67d3febbf11fe859898761912a39b2c907b7da4af35770e36023c92b0ebc9456ad1f96e5c48c72ee66381d45b23dab05ae55a621d18ee767a95d9db3d0b234ecc051e3dcef5e4ef92fd2dc4db92dad4826d65e77dddac5f6111bfd168a9a2adfb54d88445f019af4ae791477cfd5ae368529fdcac6eb24b082bc9a7ceebfce5d46e9aba755d2d61a2fb24a273fdbf0dcd9243d6716ae41f88063a4ecbc3c74fc447b27e870f2cee78a5d94db83740231a939963fd9caf4e92fbce78f32cc4d24325ddf6e55a4cb40a1a2f83c58e4c5486ad8793c7cbb5fafd87238e3059901287f990c45ad854ebb187a9e9ed913a1b3a561a083369bf2a2e86cc62277dc24ae3b9baa715c58afee52aaf85b675f2e80eb7225a5ade739e3a1e600bc2455eb20314727cd8254117338408afd1d548b2cdc2924d8028050c0977867db99cd3ba7ec61e6d534c5b653ba8ee2efb9f209aa1cc82c0d72a727c956328e9e29c415bdf2b9c8a5911b61dd626e295c3aface54ad2f7b68f0e24e7ef01f0e67f4ae67c0ece4b3eea7734cbc413ee8821845b99e58281a8058113112cd37a1d87eadf07fa997799ab0be09fe88a5eda90bab17a7abb9b00ef4f9b23a38abb387c7bedcc7c09c9c8510302025bf3ffa7fd29a1c0f5b12f3e04d6b2aa9ff77b9ffb6c06cb78011bc929187b0bc5bd9851208ded97e509b633b289f510f3ce15ec25035eae49ae5c448ae7287a4b2b437fe4d9fbb60f6316814aeaefcb06104a19e8b40e7245ea8bfdfce8b5cfe771e4c619534e870390872c98eff1a79b60607d0032d0795762cd28c00ce294fcaf30bc624004ff68bb0d359662d6d8029a26958c51b9e617e0b741d2d6af0b140c7d3a8c7ec8d2d65dd04bc0d01fec2012b893808df417b7444054ff563c0b4a71d64c0a5afb416168316957d8eeaf619eef2c9345d3279e04c04f9de971a50e599856af62bf62756081f477576b41b1a85cc6843268accf523fe0f009fee50b35d23735d65e561e1be67636044f0a2e249bcd93f90e762f8f6ca49b323855a5c499ef9dba79d35dbbd88c330d370412000b6414e8ddb2de97873d42de776db5cd1cce2365277841e3125ae03936bb751aa337aca8ab3fdced59fbdc979ef9e635940fa73408941fcc7d52c9b1e2b2570aff1520a965d6819454e105eddba22f45494d0e3b4d0acf716a00927f37101ac9125839258be7b9226223fa2060bc02b220dc0b7f3ac79e3a3b12204575ea2a75183f7feb31cce649d9a87001e8537128c18a69c840c2da4a91c17c04634582d0ee8fe9dd1479077fd684b5b23e29584fccebcbb4df75f420c598791066070836437bf2f1bd9e8d11ebda062d754167933e20763018b37fc709cfef14f0eee7fb1b51821c526d25695ad0ed6bcf141e1cadbd52ef92f4f9b0387126ae43652920e120da7dc2746cd455839813ad208e70da9c1fc563576e7a98778ddd021bf8700598491132a4820bab635ee33c92ae74c2a0604e69a1f00b2c5ed28f413ef061d5907badff80963a95a66a44bda870ef5b20a20e414bdf37c7076afbfecf7144326f516de997b92cb6f5e8bafa833b5e48f63135dc9a4bcfa4ad0eeaec67cd4dcb089019f17fb1293738fbd5155c5c0f3b3193ce72345c6d76729861a983b3d1a6c2bc39419824a77251cd5e9860f5b38d51d0eddd7c3415b56de78c8b41c47ee5593c849bf656ac62976e291b7b148571cff9bbc394fc5d5dabab261a95542027beae6a47d0f7c01b08252b1f3a5fbd4725ab7d5eb4d656d3b2a9dc1b30b20d494102251631f9b900d55b975351bec177918399df37d5edc9cddb04555ec9eb375ecf877232a9ae5b88818cc30d50caa83b6fa86850c06881e267adee6ab7494255996fc498315cafc7900ae5e7038951724af5805c3c6ec7c9b4a249cfa87c5470097fc020e3677509e5e269b49c8d1255d579e52b7acb87972e1f756f9dde95f49fdd74b888a4ca8144ade3d29c615c723c98ae104c2e7b00eade886d665c245cdbf8a4f4c9b14f7c607404d9c8fd1fb5fd0a4411098fa804d1046fb329070bc7775bd5969f9739af8d48488ef3e45bf0d8774b3a3191bf82dde31345f02cc5f1ba2a87aaded506cead937a8bbd16aa9087ee2d211a8881980d8971a20b4e4c3103c0f66533addb8865e70574807ff814f5e19a0b52be5279e6c19e5c88013c698241386d49c0c7d0fb5046bdf2070bad8ee73bf1fab27d4a9d727aaa086b1c2a58c2158dba1a396f4d37c20c87640794442b63be4969ced576d36f0e07e5aa2bf00d6aec3192f160dd61c3d840821873366cd62f9a7bdf02e7e7fd6125a2265c67071d6836252fe57b6ab124e4607ff642087e65c3b4039d1086ecd43471f2d81f3c19444be1d5e545a786f85cc27cc66a1d44832c91b8ba775e43751efb6d7022e7a1fd3ec08490bfcb87ab1271fd3cfc53f620654445479a7aaf15dbbeedeb0acaf7fd6368caba58f3406f552c5e58bf2d5fe41855479f2f57172e5d64d867cac98652c98dda4ef7a6e96656999f1d1ee03d2b7be81ac215f028c9f266d8359990d8f0b7b455c0a3013db2e2fad1362546d535cba66c73f715e59add19c6b918d6b732b115baa376bdadd9675091c8a8b676ece48dcde24c6968751ad0a509b95b5d5c78493f296dca252ecf7e762ec5d0453fdafb5fcc6432bf8cc377e1e7fba89f7fdef503608eabf54d2ccedd9605d058ddd1b807979269d5696e26b5186507a0afc1737c93a8f56def5e86e43ccea09855b212aa89888e772e74b13286452b3d27eba19b9e9ce013df03315042e908131cc9c557b3b0353b2589a8669c19710b7fc530c58af47d4c4b7738302a84b8da432cdf69b498e060a6cc79883a516322299567d1a7133431e02b7c19d6710edb90e17192ab53665a126d61601678f477dcc3b498a80a5d7f1cae4e57b1ade5ca0982773733a4b6472ddfa8ec8c61acf0b40ad274190671a1a2b088aa4ea845f8d2bb33aec82ce75fb827b48294889e1baa99bf1632ca51dde9f413e59aea5467af1acac325eb0c26ad300ce8f96ffe3d8effa2cb5a1cabefb294ce246fcf369a99325b3fa1d30955fdb948f835581b5e12f80a2855ce55765ccd75bbfa44c9c6ea199049f266180475d409b1d44a388ccae7a47387ea4b66b7b18d2468f21c5bd8a2cba48286994238812a8eb84a07704942f8aad21d625a1f85089ea9a498d6cf34c8ced610e05181bd691150669dfd262501c5af5c1fd9bd68493ff35795e74eba4e22490656a94fdb99ed3bbe130c195166025277da116c846b9e5c696e15dc2108fc3222ba725ada9b39617ba4e32e724c318f26e4269c593d00abb9c09008095271a4711e9fff0689f074172e97c25f9581a56e164eb551c7d1a175c6ca9792b3822b23f31bd04fcd487f2bc2441f63708b662728be09a802430d3f453309356b15c3700146cdcb5b883c4686694cafedffb55e80e3bd4e4b11a0ebce0742a0c5ed74bf37ca902c737f7456a1253e3358b9b6bc8b46d4f44a3777a58f7767c54771d8baaad82a2e92742011929b39cda62c332d7be76e065fc09389a2e44102498f3d3cf2cbc9463b2103b145479842b05c76cc7ecfb007a2a6dff0fef3af39cf8b4d3ed34e4e6e9acf851e94bcd3ef55edbe2a1936ad812cdbd743d12fd5dfa819b387b2ff9b14ea07b8ce75eeda0de693f0b06f05e9930bc6be1956e80f0ddc00ca70878bf216e178520fdbe92670dbf985d8a2fecb7b205f6183f3bf7934f241d40cc928bc17b2dd4995eca28d4c2b5b8d88a20fc91ea67ff564f6ccc6969ba4301d6e559eb1948ea4b92ff93ddbaa851c3412a4f75676a930813f59247f5db52c9dbd390a71d0e0993f0779a002b6f8b8c69c20bfa3120e69c9bd504009f67ea5c2e33977e0dc43a676e21e770991a18e83a95c6cf852024356ab2bcd940d47ff3c8379a0b7ff9418aee7b5dd4c2b9f5e92b24f983e023565cc772f60288ba3c28ed0f4a4b9b976f0187dc9db54ac577598a58b00db9303c2a27a6d5f9e94d873586c52b7d70fe526deb41b71ce8a7b3615e2d285a4b293ac50a44522a3dbbda4d102f0c352a45c2c5c167d0d10d38b5cea4944f33b56d4cfe7f72aa474932500dc82f2da64685c1e75900d10"}, @NFTA_DATA_VALUE={0x21, 0x1, "35ac27b60f47b8aac9c496485e7d47fbfcea655807fa9a48243e12c82a"}]}, @NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "4a3803904d4ff73ad411ab8046ebc15e1902b8ba01032442ec738ad14371555f0a9f0c5385e21babe16d6f8ceb913a2c0ddcb4b1945da5ce81ece27923ea83eba9eb54e31e541290ca7728c8808f49cabff8dbbb94c3a57f1f40c8ebc8a080e7b62a56a339a05e955d427c0cbd778b06f2b663b9e242604ed5a4e8eff0301b808fe48e23c584122070cfba9250b315543db33b05cac706ef3fdb591798a26ec9c3f51ebb5dc7b829e0ab19c0c6b644"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x228, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x22, 0x1, "9236aafbd60fed6aa88b3daf8c07420297eb37af126bbdbaab8b150ce1f6"}, @NFTA_DATA_VALUE={0x5a, 0x1, "c57a13231f9d7608c8a3b2e5e7c7fe693a882434c1cd9e72b1118923e4773970c06163b82ab299cb62e08861562d0c9bf166fbb51ce58e1a2740495733bf5a37880443884c84c43296a6fe9f07ed1fc45308bc7cddc8"}, @NFTA_DATA_VALUE={0x84, 0x1, "0b48484cc9048969df9359acb151557ea141495bbc5a6a7979ea1bf62b83bc22f9661376c2e05916456bb1dce99bcaf42b1b633511b96fbc38734592cd7d6dd10369aed2d6a9bc6cca0882eb671e540b163476352fffae3d345efd2bdcbf8202c929b368ce0b11dd10383452587238ce8f6806a6707de5969473776523eb474e"}, @NFTA_DATA_VALUE={0xb3, 0x1, "aa8b1305f528ff1dffc22e716eefb4852d2317d0414cf745b20cc62e33962d5966baa511e41d077b3e5537e63a7a21dabe1fd3fb4fb6502ceeebe877144e60745d35e0421489330f2a8bdc9e793c95024dd743fcf50b21c2ea276daab2efb79d476825a9d11f54544d250be454b7dc56862f6ac6a8aeb68250eaf3ea0c73d7e3d233a5a6489cdf5fcab85cc6dc0cf24923ca31cb5bf92c990780d5447be9ba51b7adf585a8928232757285b24855d6"}, @NFTA_DATA_VALUE={0x60, 0x1, "e2f86a2bae824ee0e747322a3e76cbc4f9a721bb210c093476d9c5e997c6e1a0245930e14929d2923eed59e05957f424b370ce58bf8a9c2805f1f0acc4d57531b79e83c2ff856c042770a0b57d49237e5359888f1268ed478e54a4c1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x5c, 0x6, 0x1, 0x0, "1263c48212a45ac45a7458f3f43ab5b316854d21985a3a1a31f07aa6cde1ce7152686737b1f25446fcfb1894014318f9ad6883ae3095379c6e56014e7dcb97bedab5fa5eade2e06d50b507d39384a0cfd3cb89a832dfead0"}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa, 0x1, "8360580368a2"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x52, 0x6, 0x1, 0x0, "d2594372ea4f362cf051259e13eae64a07f23086521b536977ed1ae8a216e1df5ceef18fb54bd1c759937c17c01d3810118ce38105ad541cf9d99a261c9958695c69456adadc70abb7b66096d926"}]}, {0x1150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "fe8ef8694afb0a0f68b8c9733e4ec36e43d1cd8b962085c002b8d421d9f7ab5c2e30764ed579a585c6a5cca3c8c56f8bb0463b871ec12efd04d858bc2f54da8508d2d45cf4f00f4da11d981e9d405450afc640b4bb5931f8d615cd4c09d8f45f4daad2cc9fbb2d444a72d6b880c4dc67095fd1970a971e2c7c65a3f52420f0958d8797c627e04904c92b721d75d9e1fd1ea815ea17c33654ae4f1f3fb7cd21fe8e456248479e2d60948619baeb7e2f84c7075ce7a05005c8dfec056d82ac9f76046ef4eafb9c4806278c694a857f17fa3cfbcfe9480c1dd3b9b5885d6d8de8669cb18d99e321a8d76d83a55fdd366623ab2d650af238c3b35e691d4aabc86b4252899ccb17247ccc2cb5358b183077acfa02b5690a00785333e70c23fbce612b5b8b5f213058fc84da48ee9d109c5d5b439889316d0a611234c655f658b4fd53fd09b3e1a1c40d789841d398142dea62d702a0ead06fe650b1f2709e93199fe918b1aeb6ae6956f3a5f9d1c5353795b7e7e6f91e4e0cb190c5f6f5e91c4446ef0c63242b0b628b12673118ba7a724288efc8a1c9b7a18617e5989cc486dd1193ef72ef11e630573897c749cda83a7c5294c5e2d09e48ecaa2b2c44f36fe5dddc66a774ac9da724984c7fbcd8380c55d156ee3f4e04949fcaca8f80f2418fb3b49c4f2fc0ecf61424561a0d8bc6105551bcf2af07fb11ead3f6fad51c0e8cb9f296d97cfe62c591072649b954779c1a91e1667482151e17ac537ed189f5901e92949c18964867ee6ae2e932ddea5562dd431ba8983241e4df05dff542b90a75f7816031e19bca74a67c0fa3c6a20f6a5dead62f2c98987b91f685d740103cbbe8f0d06ceae5da7f4f097b65afed5687e2bbe63d44d7342959ac7a1babbde194c3e75e35cf98f49178359199bdae8cd0f73547ea42ed3a5f8feac0ee470e54f74b5bc42496b9c7ee28347db73a05db2ec15a3026aa6a17292d4d651353a59c9ac9fc6692818ccc8d371d02e5c4b84b4de63c373f7e44bcd4a1fdf074e0f929a1e258edb5662f4e9968f63cadf6cb228dd15db13a4783234bc3737659c559e70ee3971f3bf6a529727f5910b5c19a3e1180f9f3c11c4f678d70f32cb63c0016121effd5506f1f5e253e39bdc856090c8a5a8d648660a3663ba81f6b46a06bd3bcff8ed0b48bb9da185163ab3ed279202d2124e66a241a5e7ed2109a594e8e0d52bde786a146501565a8472b11f07088e8b6eba63977eb5e2eb236159e617e4e82e36e1b076d9dd3b804a29a172c481a3cd85c7190a2dafa07c63f8b88f172abe0cd00e9298b07fab2f8d1bd580375f9b7ce4efbaff405a017a01aa41c4a53a4c5477208e7d514c10bce271f2b488a3a5382b0f685e18e3e5d532e13ec0109ff3a594960634be0d0ce3bd316aaef523cb291aafab76c07b6657e01920134d4ddb67d444cc32177db5be28bbc4302ffd539a3a97aefda3f92d39eab9d0424a6771b77286da05ec473ffdaf0af04ee4855e7690d3e245404be28f0ceb9af0ae6bcc127aabc247257b88a91c22df70cb0c02478f23dd7b09da3ad0f4c39c74d5f3212c4faa0e5cce9ab66a41bcaefd0eaa99f33235b09b76568c1b92618b506808e1a7d52033d81ded9c8119b69f389b7e02bc5ff16b33aae81b3bee397ddd036bd12be388e532b6c4ea083d5e2512a01dd09caa33015c124828ba87da8fe683f30e1a79fbae695cf85ef211b805409a1db87812daf4cbe093e1bb84842cae82a1ffe3be0e5c51ed520b792e5c7d09a8ed9f670a134a25085405fb9fbc15eb9434a870e56cf907134f6df9afcb8cd060f029e10ad6bf72e38a008a9489e0fe89e9a9f35093cfb7ca6cdc9f0a19062bc70f35e57af67ece41a9915fdca6490fe18e9384057c3a453a29d271f2c7baf7a2d738e1ed8e403a896a27bfd081cf250f4bfa3bc972d347dd91023071f01fa628b70b30cb7bbbd3433771c59d1d106f0e7fdc89e0974cb28158ba7fb76ef6ebe130be9a7e1d863e0e71982e87ce20a5e5c73dfba96b4a26c15c7d31769226a56f164df37a5a3b26d8aea21b11e2f31e037549bf150457666d6892bd2d48e996ff028e6cd4dd831d2f4fd382636b9e2d25723bef59c351ce992c242bd525f6e120366f75aac70879f18dce6f61e6db943466ea6f759cabfaa4b3838317753c4d3b2fa19d50a05c396114b96fa3f180220abd54a101894400bef446f30c873e79a23f11c4f2b8f1d8aba0320f7038d926bbbaa4da8b812b2cdb5e9d4e8147553e33aca7ae33b0e30ac0a081c28b12eaf8357e3f1d26b9c057b83f18506b94c1ef2262d624d3687077310adaecea42426a1daa6e8db79571a82a833510c09d5c04e45cf67d5dd2dc9cfe73e7b75b525fa557bd4339364064bbb9871ab441573efbb1f81ecd1f86d643f10c3d61f50316fca890329d9d88a6f9c19f08f3c7b0d001c89d687bf4c59fddcce984352ea8a9519fd0ba539d08b5a10abbd0ed48f2a4299b383e9be0c4f6fcb6b458026543030a5d016252fe8009cf4eeb960bbd97097bb2150384a276f8ce42cd7e0b6da76bc040494a2b890f09b931b016db17b9322a4fb335677c065534a490afcb772925c11b9212dfd34f1adf3aa719605bfd4282044b21beedc5b63380d15a3d0aa722e972dc2d8d0b2cb7f64a2eaa218e17f35bf86f6f49e3d62ca3e1b8c9acda5c934bc8cc5636c893203ae40da9e4f5e07e0969438fe9743663c351bbd311b7199d4d9377e0fbe9982816c6d0f5da8f065a027c909f30b7868afe15d146fb36007c3e37ac23d83ff2ceb3e4f34caf6214b94fa3a3c0fe09495bea313354a600e81fde71a51759033188213677594b9425949a825e6b38712346b422a2ea58bb699899e0c923e7f72aebc85923e5cea48bf872109af4dcad39b6d27df0f6a7fea0b50cf0fbc4289909ed5626e58a9b54573e5ad2ceb61f090c1c28f905427a46a5d657ac8ba29f2addc4fe50c8cc84f17e1a56078b07cda6dbc91c5d09068b57279186f8feaaa75b89c05af7046461a246f46e0924697e2d6766290b038e4e131e39fe094d0060d337e6eb9838abc62418c6358aea9148ffba6bcbeb261d2a2dcf0729c41e1e0b6aaf633f11ef0a64590c57c0ea3b1614bccc92f8b748a380fd6a0e9f80bbadc5ea87ee332d3e21a29ff7ff9ea11dd10730b07a0fbebfe026f1a48ec6fa122178938af1867d764425336cfcf43b6812753befce76952e2eb49df3cafc47d587a178d5eef03b3d572bafea554a81ff86436edd7eecd48685ead1bb789102533892555423886176e4ce58cea27daa6977b8ee38d7aa4fbb1aa943fda8de2b8d125327bebd26e4c9f28b7ceadf619feb17835421da8bb2b8cb21d80488675769ee065da0ab1807f314b4225093539c0c835d1e44580328651fc2190e1734a7534ff28d371097d911dea607553889b14ea48c67286c8b7c480422ff59e9e1d79dba64981a89a662f496691760511b74e5cd0bd120d2e4106c1c050b8be5ca9d07c8213164c2dd17617a2198e0b5f6feeff5919c072bcffbf6eb0c0f2343b86af744999a60fb5e1d6894d6176fade80a7a0b95aef74e433240980b4ec0aa807c1c63fc1d53f695579af8bdbae806478ce7064f2803d3f4d172389d3c2c288cf6b5d7c6363d9153d01135f7ff8b0b2c44c34131ebb14e64bbc61cf5b668ad2412c1c28afa665a1e21a8f6becee8882b3c96b593766e62dfc9cf22ade51584c02ab3c31ebe4ffa23af98876fadc076a9025c469b3004731908fe9b0364d76d944f50251c56fb9a8ee8a30064294758e9f36d72590e996019ad2b9c155bddbce50563dddf5a3c26cd4438dd05a109afe17cef5b51406126e6af698fed90b8f74a0a1f9d1885917bc9e874ddce5bffe9feff0685f588a78dcde0a5bf9d4fd2eecf340f50c8c972e2c40897cd0f24c568dea2fc404454062cd6842a82b2a52e99720628856645022660224ca4e117968194cb923110c8a04cbdedfb1bf617b97786f33aacf0c7064701330324c8952bcac99ad7bd1876b04d5013c048379c7e41f53e764be4bcdd37bbeb0ffb5062b36ce88c3536fe6ac8ecff3c505d94b299d4d000b4383e69555eae1d20fad2984a6006cfb10731ec2d2cdeba3573592b166178fc3aee9bef639ce49ffdcce3d2175507fdc71913453ea5ea3a034c4461c225847715b09a17bbc054d39fa709002b4f4cc01cf7320124b7d9761f5aa50a2971075b5af5a901eb792ed9b42da23e240c83468d7cab6cdda4943f0846e6cc632491524ef9033ca94f66efbf4bb6e2885ca00de88bc7f135fe6f1c0ccacc690eb7406c6d50d85eedac9fdb1a93aa22f64a0e67d324669717f636cc4e51b07d0d612e9c93b372858b8d641f582ca4e6cdb07676f8cc48f7f2d632f81e0f23fbe8e425c0ef715779720e5ab8b8a66fa74a665c7f3a1beadc0b1079fc731b3a110d33d904f0214452615e448a350e187cb8d161b7170350424d5a301045ce26fec0d756bc97774d6f7d710cfff02d72e43632a64c4d7cca5d2dd858babce3835c8f3b77c9b0520389af4cc78330b21b3cf9fd522b2ca926f87a8b9a24064d9c1e84fb79f0832ba5720b4867720d7f086570c2836391e635bd7504722d74c79279abc85be36ba9c3a6f75c9d473f6c603e254d27fec497f7acacb2ec928bc497849f6d5213dbc7d5f427f342a7e9026bd618e0242fc7ce913985d45c095b0824532a40442df4fbba0802e1debbaa0cada0570c503522994c1a13496e09cee56c77d58cf485d7b185cbeab6dedac52d23f964b797120133c55da64892853b7b4b8e30bc7c7504a050fd027b42b6a16422c0a2920f7b3600e9f4af1f3c4f962b15c1f44fc49c6407da66894e8d33351e6352b98a723e79bffdfdaccd84cd4827b9f1362b711c882239a794e9b368a60d4636c967c7acf0becccc66ae7917d0c564a511d9fe16536b128c572898bb1ed8d5d67e8bbb2b07b517c29eea029ce566aa1ec6f9bebe523dc5a94a69a46ffa5899b9dea3c6230c7efef24ce196908383de3253b9b44daf6eafa37cf1968c3984d4c2d3dc2d6f0b0dd90abc016951f28e1c8547203b7f1570c08ca2a4be00370d46586fad86d19a905887aca720d70280d900d4e85e9f3e35c5e5697a392d5585d7e4c4758aed019fb2bbba49c2eb95819622a0a523f472e982a30a4623ad28d59e41c83f244f996b3778f33937810861d12031d13e932eb8966582033e846c4b11d3727ab6bd68ad0fcd3cbc46ab42690a4c36df5b61afc129700c07864d63a7cf0467829aab3872fe34b81ee63673e02e536aa26cb7de45012e2abb28ae15e9321d7673811529b3bd5fd68738de8945c7a6bdd54852a245249543abd9f2ba584ad0517d45fc2b2c8af371a31451537db518f5466d76750ff89e3f1464c742aeb0d82fa5d4e0e6d6572a3f07259cc9c5a359ce4ddca09aa08fe443137366d10ae39d47ca83cd655b3e459124d222c7c986e210bb90e28b5e475fe439ee504372bf0e5e0cd7233725d27298461cc4f1fd0a6752268966a4e793eabf0cf1abfdf157af12d4d4fbb314231887564f8ea54d28b8821c6d193b43634a6ac1f4e18db602282c8206512c6ad2a9bef01d0d79d8c2e76076f09e7efe68ea841b870bc866526f03ddf16c95652edfb89e9cb1b8bf260fb0d407af5b897000affad5879aa6b0c0f57a1da2c8c849a04d56faced93bbb366d4b1ff51cf42a369e63ba7dececa871312003b212a032d162d879121a7459710bc299de2e64c42"}, @NFTA_DATA_VALUE={0xee, 0x1, "9a47e80cce36e3541dc6f3ca82c458cb743c2a22dcc385c0952be42c7b23465afac21e58968d465b2732ece55a058cd8b19ba970688e60b3af488af3584cc8b61835585d6ee9d617a5094318aca61d421a512b8124a8681e6d94f642ec24649c6cfee437f9594748de24fec285ef42a0a769ecf4e43ea7c8390c5cd3566768bfb95886618fdf7b983db1fe18ba9076266c6e7108b213486f2403c23f81d728341cd976cfb53f22e31ba233447071c8d5e99031437c2644628182915dc4bb5874700fe4ed513910a82f26339e78bede97bc6e292240d3c5b5f2dcbb38beb6719eb1f3da123f878921cc16"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x27c}]}]}]}], {0x14}}, 0x3cf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x20004005)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e1f, @remote}, {0x304, @remote}, 0x68, {0x2, 0x4e20, @rand_addr=0x64010100}, 'pim6reg\x00'})
recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x30020, 0x0)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda39, 0x10, 0x2, 0x27e}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000000), 0x0, 0x0, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range-ioctl$vim2m_VIDIOC_S_FMT
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x3, @pix_mp={0xff, 0x5, 0x32315241, 0x9, 0x1, [{0x4, 0x3}, {0xc0, 0x2}, {0xc, 0x4}, {0x5, 0x10000401}, {0x2, 0x7}, {0x2a, 0xc}, {0x6, 0xfffffff7}, {0x7, 0xf}], 0x4, 0x0, 0x4, 0x1, 0x6}})

program crashed: possible deadlock in tasklet_action_common
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program crashed: possible deadlock in tasklet_action_common
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-syz_open_dev$vim2m-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program crashed: possible deadlock in tasklet_action_common
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program crashed: possible deadlock in tasklet_action_common
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m34.415364508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
simplifying C reproducer
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program did not crash
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program did not crash
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program did not crash
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program crashed: possible deadlock in tasklet_action_common
testing compiled C program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
program did not crash
testing program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program crashed: possible deadlock in tasklet_action_common
validation run: crashed=true
testing program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program crashed: possible deadlock in tasklet_action_common
validation run: crashed=true
testing program (duration=2m34.415364508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hidp-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_open_dev$tty1-ioctl$TCXONC-ioctl$sock_bt_hidp_HIDPCONNADD-ioctl$sock_bt_hidp_HIDPCONNDEL-ioctl$vim2m_VIDIOC_REQBUFS-syz_usb_connect-close_range
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program crashed: possible deadlock in tasklet_action_common
validation run: crashed=true
reproducing took 1h41m17.27825236s
repro crashed as (corrupted=false):
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
syz.2.50/6022 is trying to acquire lock:
ffff8880b86241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
ffff8880b86241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_lock_callback kernel/softirq.c:881 [inline]
ffff8880b86241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 kernel/softirq.c:931

but task is already holding lock:
ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: class_spinlock_irqsave_constructor include/linux/spinlock.h:620 [inline]
ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xab/0x310 drivers/input/input.c:419

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (&dev->event_lock#2){+.+.}-{3:3}:
       rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
       spin_lock include/linux/spinlock_rt.h:45 [inline]
       class_spinlock_irqsave_constructor include/linux/spinlock.h:620 [inline]
       input_inject_event+0xab/0x310 drivers/input/input.c:419
       led_trigger_event+0x13b/0x220 drivers/leds/led-triggers.c:420
       kbd_propagate_led_state drivers/tty/vt/keyboard.c:1124 [inline]
       kbd_bh+0x1b4/0x2c0 drivers/tty/vt/keyboard.c:1303
       tasklet_action_common+0x31c/0x600 kernel/softirq.c:942
       handle_softirqs+0x1d9/0x6c0 kernel/softirq.c:626
       __do_softirq kernel/softirq.c:660 [inline]
       run_ktimerd+0x69/0x100 kernel/softirq.c:1155
       smpboot_thread_fn+0x57c/0xa80 kernel/smpboot.c:160
       kthread+0x388/0x470 kernel/kthread.c:436
       ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

-> #0 (tasklet_sync_callback.cb_lock){+...}-{3:3}:
       check_prev_add kernel/locking/lockdep.c:3181 [inline]
       check_prevs_add kernel/locking/lockdep.c:3300 [inline]
       validate_chain kernel/locking/lockdep.c:3924 [inline]
       __lock_acquire+0x15ff/0x2e40 kernel/locking/lockdep.c:5254
       lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5906
       rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
       spin_lock include/linux/spinlock_rt.h:45 [inline]
       tasklet_lock_callback kernel/softirq.c:881 [inline]
       tasklet_action_common+0xc5/0x600 kernel/softirq.c:931
       handle_softirqs+0x1d9/0x6c0 kernel/softirq.c:626
       __do_softirq kernel/softirq.c:660 [inline]
       __local_bh_enable_ip+0x170/0x2b0 kernel/softirq.c:302
       local_bh_enable include/linux/bottom_half.h:33 [inline]
       __alloc_skb+0x1ad/0x7a0 net/core/skbuff.c:699
       alloc_skb include/linux/skbuff.h:1384 [inline]
       hidp_send_message+0xb5/0x230 net/bluetooth/hidp/core.c:108
       hidp_send_intr_message net/bluetooth/hidp/core.c:140 [inline]
       hidp_input_event+0x2a4/0x380 net/bluetooth/hidp/core.c:172
       input_event_dispose+0x80/0x6b0 drivers/input/input.c:322
       input_inject_event+0x1fa/0x310 drivers/input/input.c:424
       kbd_led_trigger_activate+0xbc/0x100 drivers/tty/vt/keyboard.c:1080
       led_trigger_set+0x52b/0x940 drivers/leds/led-triggers.c:220
       led_match_default_trigger drivers/leds/led-triggers.c:277 [inline]
       led_trigger_set_default+0x269/0x2a0 drivers/leds/led-triggers.c:300
       led_classdev_register_ext+0x761/0x990 drivers/leds/led-class.c:596
       led_classdev_register include/linux/leds.h:274 [inline]
       input_leds_connect+0x4de/0x750 drivers/input/input-leds.c:145
       input_attach_handler drivers/input/input.c:1011 [inline]
       input_register_device+0xd08/0x1150 drivers/input/input.c:2398
       hidp_session_dev_add net/bluetooth/hidp/core.c:871 [inline]
       hidp_session_probe+0x1a5/0x8b0 net/bluetooth/hidp/core.c:1149
       l2cap_register_user+0xbd/0x1d0 net/bluetooth/l2cap_core.c:1754
       hidp_connection_add+0x1582/0x1a10 net/bluetooth/hidp/core.c:1421
       do_hidp_sock_ioctl net/bluetooth/hidp/sock.c:78 [inline]
       hidp_sock_ioctl+0x403/0x650 net/bluetooth/hidp/sock.c:125
       sock_do_ioctl+0x101/0x320 net/socket.c:1340
       sock_ioctl+0x57d/0x7f0 net/socket.c:1461
       vfs_ioctl fs/ioctl.c:51 [inline]
       __do_sys_ioctl fs/ioctl.c:597 [inline]
       __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
       do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
       do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
       entry_SYSCALL_64_after_hwframe+0x77/0x7f

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&dev->event_lock#2);
                               lock(tasklet_sync_callback.cb_lock);
                               lock(&dev->event_lock#2);
  lock(tasklet_sync_callback.cb_lock);

 *** DEADLOCK ***

locks held by syz.2.50/6022: 10, last CPU#0:
 #0: ffff88802a6afb70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_register_user+0x34/0x1d0 net/bluetooth/l2cap_core.c:1741
 #1: ffffffff8f973720 (hidp_session_sem){++++}-{4:4}, at: hidp_session_probe+0x98/0x8b0 net/bluetooth/hidp/core.c:1139
 #2: ffffffff8f236758 (input_mutex){+.+.}-{4:4}, at: class_mutex_intr_constructor include/linux/mutex.h:255 [inline]
 #2: ffffffff8f236758 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa7f/0x1150 drivers/input/input.c:2394
 #3: ffff88803c562860 (&led_cdev->led_access){+.+.}-{4:4}, at: led_classdev_register_ext+0x45e/0x990 drivers/leds/led-class.c:554
 #4: ffffffff8ebefde0 (triggers_list_lock){++++}-{4:4}, at: led_trigger_set_default+0x7b/0x2a0 drivers/leds/led-triggers.c:297
 #5: ffff88803c562788 (&led_cdev->trigger_lock){+.+.}-{4:4}, at: led_trigger_set_default+0x8b/0x2a0 drivers/leds/led-triggers.c:298
 #6: ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
 #6: ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: class_spinlock_irqsave_constructor include/linux/spinlock.h:620 [inline]
 #6: ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xab/0x310 drivers/input/input.c:419
 #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline]
 #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57
 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb7/0x310 drivers/input/input.c:420
 #9: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163

stack backtrace:
CPU: 0 UID: 0 PID: 6022 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_circular_bug+0x2e2/0x300 kernel/locking/lockdep.c:2059
 check_noncircular+0x12f/0x150 kernel/locking/lockdep.c:2191
 check_prev_add kernel/locking/lockdep.c:3181 [inline]
 check_prevs_add kernel/locking/lockdep.c:3300 [inline]
 validate_chain kernel/locking/lockdep.c:3924 [inline]
 __lock_acquire+0x15ff/0x2e40 kernel/locking/lockdep.c:5254
 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5906
 rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
 spin_lock include/linux/spinlock_rt.h:45 [inline]
 tasklet_lock_callback kernel/softirq.c:881 [inline]
 tasklet_action_common+0xc5/0x600 kernel/softirq.c:931
 handle_softirqs+0x1d9/0x6c0 kernel/softirq.c:626
 __do_softirq kernel/softirq.c:660 [inline]
 __local_bh_enable_ip+0x170/0x2b0 kernel/softirq.c:302
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 __alloc_skb+0x1ad/0x7a0 net/core/skbuff.c:699
 alloc_skb include/linux/skbuff.h:1384 [inline]
 hidp_send_message+0xb5/0x230 net/bluetooth/hidp/core.c:108
 hidp_send_intr_message net/bluetooth/hidp/core.c:140 [inline]
 hidp_input_event+0x2a4/0x380 net/bluetooth/hidp/core.c:172
 input_event_dispose+0x80/0x6b0 drivers/input/input.c:322
 input_inject_event+0x1fa/0x310 drivers/input/input.c:424
 kbd_led_trigger_activate+0xbc/0x100 drivers/tty/vt/keyboard.c:1080
 led_trigger_set+0x52b/0x940 drivers/leds/led-triggers.c:220
 led_match_default_trigger drivers/leds/led-triggers.c:277 [inline]
 led_trigger_set_default+0x269/0x2a0 drivers/leds/led-triggers.c:300
 led_classdev_register_ext+0x761/0x990 drivers/leds/led-class.c:596
 led_classdev_register include/linux/leds.h:274 [inline]
 input_leds_connect+0x4de/0x750 drivers/input/input-leds.c:145
 input_attach_handler drivers/input/input.c:1011 [inline]
 input_register_device+0xd08/0x1150 drivers/input/input.c:2398
 hidp_session_dev_add net/bluetooth/hidp/core.c:871 [inline]
 hidp_session_probe+0x1a5/0x8b0 net/bluetooth/hidp/core.c:1149
 l2cap_register_user+0xbd/0x1d0 net/bluetooth/l2cap_core.c:1754
 hidp_connection_add+0x1582/0x1a10 net/bluetooth/hidp/core.c:1421
 do_hidp_sock_ioctl net/bluetooth/hidp/sock.c:78 [inline]
 hidp_sock_ioctl+0x403/0x650 net/bluetooth/hidp/sock.c:125
 sock_do_ioctl+0x101/0x320 net/socket.c:1340
 sock_ioctl+0x57d/0x7f0 net/socket.c:1461
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f272c33de99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffff0d71338 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f272c5c5fa0 RCX: 00007f272c33de99
RDX: 0000200000000200 RSI: 00000000400448c8 RDI: 0000000000000004
RBP: 00007f272c3d3eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f272c5c5fac R14: 00007f272c5c5fa0 R15: 00007f272c5c5fa0
 </TASK>
raw-gadget.1 gadget.0: ignoring, device is not running

final repro crashed as (corrupted=false):
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
syz.2.50/6022 is trying to acquire lock:
ffff8880b86241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
ffff8880b86241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_lock_callback kernel/softirq.c:881 [inline]
ffff8880b86241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 kernel/softirq.c:931

but task is already holding lock:
ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: class_spinlock_irqsave_constructor include/linux/spinlock.h:620 [inline]
ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xab/0x310 drivers/input/input.c:419

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (&dev->event_lock#2){+.+.}-{3:3}:
       rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
       spin_lock include/linux/spinlock_rt.h:45 [inline]
       class_spinlock_irqsave_constructor include/linux/spinlock.h:620 [inline]
       input_inject_event+0xab/0x310 drivers/input/input.c:419
       led_trigger_event+0x13b/0x220 drivers/leds/led-triggers.c:420
       kbd_propagate_led_state drivers/tty/vt/keyboard.c:1124 [inline]
       kbd_bh+0x1b4/0x2c0 drivers/tty/vt/keyboard.c:1303
       tasklet_action_common+0x31c/0x600 kernel/softirq.c:942
       handle_softirqs+0x1d9/0x6c0 kernel/softirq.c:626
       __do_softirq kernel/softirq.c:660 [inline]
       run_ktimerd+0x69/0x100 kernel/softirq.c:1155
       smpboot_thread_fn+0x57c/0xa80 kernel/smpboot.c:160
       kthread+0x388/0x470 kernel/kthread.c:436
       ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

-> #0 (tasklet_sync_callback.cb_lock){+...}-{3:3}:
       check_prev_add kernel/locking/lockdep.c:3181 [inline]
       check_prevs_add kernel/locking/lockdep.c:3300 [inline]
       validate_chain kernel/locking/lockdep.c:3924 [inline]
       __lock_acquire+0x15ff/0x2e40 kernel/locking/lockdep.c:5254
       lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5906
       rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
       spin_lock include/linux/spinlock_rt.h:45 [inline]
       tasklet_lock_callback kernel/softirq.c:881 [inline]
       tasklet_action_common+0xc5/0x600 kernel/softirq.c:931
       handle_softirqs+0x1d9/0x6c0 kernel/softirq.c:626
       __do_softirq kernel/softirq.c:660 [inline]
       __local_bh_enable_ip+0x170/0x2b0 kernel/softirq.c:302
       local_bh_enable include/linux/bottom_half.h:33 [inline]
       __alloc_skb+0x1ad/0x7a0 net/core/skbuff.c:699
       alloc_skb include/linux/skbuff.h:1384 [inline]
       hidp_send_message+0xb5/0x230 net/bluetooth/hidp/core.c:108
       hidp_send_intr_message net/bluetooth/hidp/core.c:140 [inline]
       hidp_input_event+0x2a4/0x380 net/bluetooth/hidp/core.c:172
       input_event_dispose+0x80/0x6b0 drivers/input/input.c:322
       input_inject_event+0x1fa/0x310 drivers/input/input.c:424
       kbd_led_trigger_activate+0xbc/0x100 drivers/tty/vt/keyboard.c:1080
       led_trigger_set+0x52b/0x940 drivers/leds/led-triggers.c:220
       led_match_default_trigger drivers/leds/led-triggers.c:277 [inline]
       led_trigger_set_default+0x269/0x2a0 drivers/leds/led-triggers.c:300
       led_classdev_register_ext+0x761/0x990 drivers/leds/led-class.c:596
       led_classdev_register include/linux/leds.h:274 [inline]
       input_leds_connect+0x4de/0x750 drivers/input/input-leds.c:145
       input_attach_handler drivers/input/input.c:1011 [inline]
       input_register_device+0xd08/0x1150 drivers/input/input.c:2398
       hidp_session_dev_add net/bluetooth/hidp/core.c:871 [inline]
       hidp_session_probe+0x1a5/0x8b0 net/bluetooth/hidp/core.c:1149
       l2cap_register_user+0xbd/0x1d0 net/bluetooth/l2cap_core.c:1754
       hidp_connection_add+0x1582/0x1a10 net/bluetooth/hidp/core.c:1421
       do_hidp_sock_ioctl net/bluetooth/hidp/sock.c:78 [inline]
       hidp_sock_ioctl+0x403/0x650 net/bluetooth/hidp/sock.c:125
       sock_do_ioctl+0x101/0x320 net/socket.c:1340
       sock_ioctl+0x57d/0x7f0 net/socket.c:1461
       vfs_ioctl fs/ioctl.c:51 [inline]
       __do_sys_ioctl fs/ioctl.c:597 [inline]
       __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
       do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
       do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
       entry_SYSCALL_64_after_hwframe+0x77/0x7f

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&dev->event_lock#2);
                               lock(tasklet_sync_callback.cb_lock);
                               lock(&dev->event_lock#2);
  lock(tasklet_sync_callback.cb_lock);

 *** DEADLOCK ***

locks held by syz.2.50/6022: 10, last CPU#0:
 #0: ffff88802a6afb70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_register_user+0x34/0x1d0 net/bluetooth/l2cap_core.c:1741
 #1: ffffffff8f973720 (hidp_session_sem){++++}-{4:4}, at: hidp_session_probe+0x98/0x8b0 net/bluetooth/hidp/core.c:1139
 #2: ffffffff8f236758 (input_mutex){+.+.}-{4:4}, at: class_mutex_intr_constructor include/linux/mutex.h:255 [inline]
 #2: ffffffff8f236758 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa7f/0x1150 drivers/input/input.c:2394
 #3: ffff88803c562860 (&led_cdev->led_access){+.+.}-{4:4}, at: led_classdev_register_ext+0x45e/0x990 drivers/leds/led-class.c:554
 #4: ffffffff8ebefde0 (triggers_list_lock){++++}-{4:4}, at: led_trigger_set_default+0x7b/0x2a0 drivers/leds/led-triggers.c:297
 #5: ffff88803c562788 (&led_cdev->trigger_lock){+.+.}-{4:4}, at: led_trigger_set_default+0x8b/0x2a0 drivers/leds/led-triggers.c:298
 #6: ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
 #6: ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: class_spinlock_irqsave_constructor include/linux/spinlock.h:620 [inline]
 #6: ffff88802bcbc270 (&dev->event_lock#2){+.+.}-{3:3}, at: input_inject_event+0xab/0x310 drivers/input/input.c:419
 #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline]
 #7: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 kernel/locking/spinlock_rt.c:57
 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
 #8: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb7/0x310 drivers/input/input.c:420
 #9: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163

stack backtrace:
CPU: 0 UID: 0 PID: 6022 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_circular_bug+0x2e2/0x300 kernel/locking/lockdep.c:2059
 check_noncircular+0x12f/0x150 kernel/locking/lockdep.c:2191
 check_prev_add kernel/locking/lockdep.c:3181 [inline]
 check_prevs_add kernel/locking/lockdep.c:3300 [inline]
 validate_chain kernel/locking/lockdep.c:3924 [inline]
 __lock_acquire+0x15ff/0x2e40 kernel/locking/lockdep.c:5254
 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5906
 rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
 spin_lock include/linux/spinlock_rt.h:45 [inline]
 tasklet_lock_callback kernel/softirq.c:881 [inline]
 tasklet_action_common+0xc5/0x600 kernel/softirq.c:931
 handle_softirqs+0x1d9/0x6c0 kernel/softirq.c:626
 __do_softirq kernel/softirq.c:660 [inline]
 __local_bh_enable_ip+0x170/0x2b0 kernel/softirq.c:302
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 __alloc_skb+0x1ad/0x7a0 net/core/skbuff.c:699
 alloc_skb include/linux/skbuff.h:1384 [inline]
 hidp_send_message+0xb5/0x230 net/bluetooth/hidp/core.c:108
 hidp_send_intr_message net/bluetooth/hidp/core.c:140 [inline]
 hidp_input_event+0x2a4/0x380 net/bluetooth/hidp/core.c:172
 input_event_dispose+0x80/0x6b0 drivers/input/input.c:322
 input_inject_event+0x1fa/0x310 drivers/input/input.c:424
 kbd_led_trigger_activate+0xbc/0x100 drivers/tty/vt/keyboard.c:1080
 led_trigger_set+0x52b/0x940 drivers/leds/led-triggers.c:220
 led_match_default_trigger drivers/leds/led-triggers.c:277 [inline]
 led_trigger_set_default+0x269/0x2a0 drivers/leds/led-triggers.c:300
 led_classdev_register_ext+0x761/0x990 drivers/leds/led-class.c:596
 led_classdev_register include/linux/leds.h:274 [inline]
 input_leds_connect+0x4de/0x750 drivers/input/input-leds.c:145
 input_attach_handler drivers/input/input.c:1011 [inline]
 input_register_device+0xd08/0x1150 drivers/input/input.c:2398
 hidp_session_dev_add net/bluetooth/hidp/core.c:871 [inline]
 hidp_session_probe+0x1a5/0x8b0 net/bluetooth/hidp/core.c:1149
 l2cap_register_user+0xbd/0x1d0 net/bluetooth/l2cap_core.c:1754
 hidp_connection_add+0x1582/0x1a10 net/bluetooth/hidp/core.c:1421
 do_hidp_sock_ioctl net/bluetooth/hidp/sock.c:78 [inline]
 hidp_sock_ioctl+0x403/0x650 net/bluetooth/hidp/sock.c:125
 sock_do_ioctl+0x101/0x320 net/socket.c:1340
 sock_ioctl+0x57d/0x7f0 net/socket.c:1461
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f272c33de99
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffff0d71338 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f272c5c5fa0 RCX: 00007f272c33de99
RDX: 0000200000000200 RSI: 00000000400448c8 RDI: 0000000000000004
RBP: 00007f272c3d3eaf R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f272c5c5fac R14: 00007f272c5c5fa0 R15: 00007f272c5c5fa0
 </TASK>
raw-gadget.1 gadget.0: ignoring, device is not running