last executing test programs: 1m41.796961271s ago: executing program 1 (id=2406): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x99}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r4 = epoll_create1(0x0) dup2(r0, 0xffffffffffffffff) epoll_wait(r4, &(0x7f0000000200)=[{}], 0x1, 0x254) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x163342) 1m41.747225367s ago: executing program 1 (id=2407): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x9, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0xa}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x2, 0x2c, 0x2, 0x0, 0x3}}, 0xffffffff}) 1m41.66956425s ago: executing program 1 (id=2408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80040, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000380)={0xa00}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]}) 1m41.657146885s ago: executing program 1 (id=2409): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x24, 0x74, {0x74, 0x11, "56e3297227ce6488d2dba06b158337170d80f745996461b2fd69ddb01b56a464aac222794985a5fef7122201524be265e3b0d4000bc5235f9c88178f336629985d87dbec2b7901bca7a0f1f5e8dbfc2dd0e67160dc3f630f2c23d0212c5cec7e8a9a5df2f4fc37dc99cc7e2373fc2b4ee384"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0xd4, "688a3ca74ed9641a3c4b9c91e77fac8893eff20b2dce145192ae5dd71659984f21898bf5eecece7df21cd481c1092e439f2e4b167ab89ea18abe3f8496c56bb424880f3ef00ec2f5ad9475ea04af817beb57743cc543c85de343a1c9b5560704dd1d78f041d98ab831765085a683a0dfbc84ec6271bcd3eefec830d7aa6f2b705c3ad88582c1c68a9754359d4a25cb23629025b38f677797b412bf9d9a2ed06e2f09efa66dd5cbe298914c781ddd82420a9c1c2c4a1f6c3f0f9e23d58bc3b6af45396b8aeb9b52b36a476dbf20d1de97f3b4a844"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0xffff, 0x8, 0x2, 0x2, 0x3, 0xf000, 0xb, 0x1, 0x9, 0xffff, 0x4b6}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0xfffffffc}, &(0x7f0000000540)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0x1}}) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000001c0)={r2}) umount2(&(0x7f0000000040)='./file0\x00', 0x7) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x802040, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x802040, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1m40.272154765s ago: executing program 1 (id=2413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) r2 = socket(0x1d, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0xffff, 0x1e5, 0x4, 0x8000000000000001}) r5 = fsmount(r4, 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000180)={0x69, "7ac442e4dea3eaf6961452fb09a8a550f953cef85da4b895caea77f8e4d9c7bc765fc3d7ef6feca4de7494912ed9b33f206cfce38e0f59496e8aa15efb087e4fba73ca9d62bf590d75e198fae9a2d3a42478d02f657b845003c8e17ca5f32ad7c915e562e70a65591d682df02dc47a04b5a4f608c70300dc1b899c15ef216e99"}) r6 = openat(r5, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020001"], 0x0) 1m39.639776477s ago: executing program 1 (id=2414): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d", 0x70, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea014", 0xaa}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m39.254810924s ago: executing program 32 (id=2414): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d", 0x70, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea014", 0xaa}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.874545772s ago: executing program 2 (id=2737): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503", @ANYBLOB="b678"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0x3, 0x7, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.731873442s ago: executing program 4 (id=2740): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) userfaultfd(0x1) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{0x9e, 0x2}, 'port1\x00', 0x80, 0x3, 0xae4, 0x5, 0x8, 0x7, 0xc951, 0x0, 0x3, 0xfd}) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x5, 0x0, 0x2000}) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x12000000000011) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xeea, 0x1}, 0xe) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000100)) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x1, {0x1, @pix={0x0, 0x0, 0x30324c4a, 0x3, 0x2, 0x2, 0x2, 0x6}}, 0xfffffe00}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {0x800}, 0x0, [0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x415e, 0x0, 0x0, 0x200006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0xdd9b, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x10, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x2, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r7, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd86) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000380)={0x59, 0xffffffff, 0x2, {0x1, @vbi={0x8496, 0xb9fc, 0x5, 0x34524742, [0x4, 0x3], [0x6, 0x5], 0x2}}, 0x8}) 9.530260591s ago: executing program 2 (id=2741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) (fail_nth: 5) 8.567532916s ago: executing program 2 (id=2743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x801}, 0x10) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f00000000c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4781, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1}}], 0x40000000000017f, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x2008251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xd, 0x8006, 0x2270, 0x7, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r7, 0x3}, 0x8) 8.344240289s ago: executing program 2 (id=2746): syz_usb_connect$midi(0x2, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003000000208205140140000102030109022e00010100500309040000020103200b09050f03400006c100052500017b09050e02180009"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x1, 0x2, 0x1, 0x10000, 0x2dcf0a80, 0x1, {0x3, 0x254, 0x8, 0x1, 0x100, 0x1, 0x3, 0x6, 0x5, 0x2000, 0x8, r3, 0x0, 0x1, 0x6}}, {0x3, 0x5, 0x2, 0x6, '.&'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) ptrace$setregs(0xd, 0xffffffffffffffff, 0x1, &(0x7f00000000c0)="d0ab92295c50874e040eda70cfe629f13e0d80e878937d11a95ba08d05fd5e4003c0c1d06e313f669c04c68386767d1a87b6431042c9f24e7b38044a62453b10f831ee2c883e1cb8d7396efa6d47ba7a13b0512a9b29d7b4ac4da8b37d9a4dca1dfc5c2bedc7f510578bf6c56ff76acbe720d0f95d4fc6af1bc2e4677a72c6ef5778cf97a8fd8f4708859e493b44e9d15aa2f36d6dc078a017188cab0328c450cb4bd08d41e880df5658a7f81db8e453ba048873b5292355d445a949a01dcdf3f88d8145f6837b1b5935e3e726df9ce7710851b8059335b6383aa02188") 8.12169733s ago: executing program 4 (id=2747): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f00000000c0)={0x40, 0x30, 0x62, {0x62, 0xa, "8a272cf3ccd0f7f5bb3435607e525f3207214f7673ea102a54e71794fe3bfa5734348f3d8c1c49b5ff6fc7675ce230ba784da6470e9a3cab130ded5b48514b3ad65fa558aa8fee0d72cdacbd1d5ac0bb42b7b4a98a210543fdc16e43f0694ea7"}}, &(0x7f0000000280)={0x0, 0x3, 0x96, @string={0x96, 0x3, "2cb1d3bba02e986b7d4a9bd448a42c13fd7ec8c230c656df331e256edae8b178edc6d9b4de88026e7aeafcadd5a55973eac3c8d10245687c0d6c57bbec0c775925121cf2743a100ff813582cb60a3e97f5c5e8a6d56ec60b96bca8597ff520e9acca77a27ced9e6060c66d142fe0feb308d3bda29b027cb02e6448c0a941e65a4c32761ae01d086847c5d0b247ed5077a59b2c53"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x20, 0x9, 0xb9, "21fb11841ebc4fe2b74cffea7d197c7e5f7a95e314ef1c9ba6a0cf8512543e41f05c84d58017ec13b33d363bcecd92e36640978ecc5ed8c2d480ce4149ba4b105d0a1a37df12ec930978211aa097286da2666eef3d8c286240b9341933e94155fc67675282e408f1aee2a9f880e75c70980a9007832a23df1db8046005103af2fc797779aa8c519b2577cfb30a4acbbc6d01adad92a3bb0fdb6e15cbab5a7f698bb9afb2c1cf1f69b554441ad534ea8ba3e40921540c704063"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0xfffffff9}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0xfff}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "50bab50f180339880f1bebe9859038abfce0eddc89a63d8cdd3eaf7798b2e87cf9e00aa6bb4a849d436784c83859d8"}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0xb, 0x1, &(0x7f0000000040)={0x19, "f51d2a4cc4949d9c3a1df608c310f6aa436bba5f2faa4926deff85d80fe447883b"}}) 7.725164351s ago: executing program 0 (id=2750): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x99}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r4 = epoll_create1(0x0) dup2(r0, 0xffffffffffffffff) epoll_wait(r4, &(0x7f0000000200)=[{}], 0x1, 0x254) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be0083000000000b09"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x163342) 5.827338448s ago: executing program 4 (id=2752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x1000000}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 5.826157789s ago: executing program 0 (id=2753): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x6f1}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x0, 0x8, 0x84}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/182) 5.647048072s ago: executing program 4 (id=2754): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc017", 0x6f1}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x0, 0x8, 0x84}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/182) (fail_nth: 2) 5.110988675s ago: executing program 2 (id=2755): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x6f1}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/182) 3.796225471s ago: executing program 3 (id=2757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x4001}]}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.795987386s ago: executing program 4 (id=2758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)="ac", 0x1}], 0x1}}], 0x1, 0x20040944) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000160000000000000500000a90000000060a010400000000000000000a0000010900010073797a310000000064000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e80ff0b379861c1b5d00000000000000000000000800024000000000080001004c454400100001800a000100696e6e65720000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) listen(r2, 0xfff) accept4$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000480)=0x1c, 0x80800) r4 = fanotify_init(0x8, 0x80000) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x100, 0x10000}, 0x10) write$binfmt_elf64(r4, 0x0, 0x18) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 3.318316309s ago: executing program 0 (id=2759): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x1070bd0c, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (fail_nth: 5) 2.833526016s ago: executing program 0 (id=2760): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file1\x00'}) (fail_nth: 5) 2.786151795s ago: executing program 3 (id=2761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) (fail_nth: 5) 2.395110879s ago: executing program 3 (id=2762): mount$cgroup(0x0, &(0x7f00000222c0)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000100)={[{@subsystem='rlimit'}]}) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x27, &(0x7f00000023c0), 0x2}, 0x20000040) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r1, &(0x7f0000000180)="cd390867811780e17c5b00e62ac7020090abdf", 0x13) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f046}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10006, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023400010d0190020904329e0201039e0809050806100006040802230725010305f804090507020002040266072a0101030300b8eb"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002540)=ANY=[@ANYBLOB="040100001000070026bd7000fedbdf25ff020000000000000000000000000001ffffffff000000000000000000000000ffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000002b000000fc0100000000bae4000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000000000e80a000000000000000000000a000240000000000000000014000e00fc010000000000000000000000000001000000"], 0x104}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000002200)=""/79) timer_delete(r3) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x21) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000012280)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000200)=0x8) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) (async) r10 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x2c, &(0x7f0000000380)="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", 0x108) 2.073012225s ago: executing program 0 (id=2763): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x181000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc01864d2, &(0x7f0000000140)={0x4000000, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e"], 0x0) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000300", 0x33a) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x3, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r8, 0x80487436, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) rt_sigqueueinfo(0x0, 0x3, &(0x7f0000000ac0)={0x28, 0x5c7, 0xfff}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539740f45f819e01177d3d458dd4992861ac00", "f4bd000000801900"}}) 1.00438412s ago: executing program 3 (id=2764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x406000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000040)) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x4000009f, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x1538cb71, 0x20, 0x10000000fffff}, 0x2f) kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef", 0xa6, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 830.430964ms ago: executing program 3 (id=2765): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x2, 0x4) 457.869515ms ago: executing program 3 (id=2766): prctl$PR_SET_SECUREBITS(0x1c, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, r1, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x0) lseek(r2, 0x0, 0x3) fchdir(r2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x2, 0x3, &(0x7f0000000180)}, &(0x7f0000000280)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, &(0x7f0000001240)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$NILFS_IOCTL_GET_CPINFO(r7, 0x80186e82, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x1, 0x0, 0x5, 0x0, 0x9688c99, 0x9, 0x1ff, 0x6}, {0x2, 0x0, 0x7, 0xffffffff, 0x0, 0xba, 0x0, 0x1}, {0x0, 0x0, 0x8, 0x7f, 0x5, 0x0, 0xffff, 0x8}], 0x3, 0x38, 0x0, 0x3ff}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) tkill(r5, 0xb) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x3f00000000000000) 341.310616ms ago: executing program 4 (id=2767): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000180)={0x0, 0x3, 0x3}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x18, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) rt_sigqueueinfo(0x0, 0xa, &(0x7f00000000c0)={0x4, 0x7fff, 0x80}) r4 = socket$rxrpc(0x21, 0x2, 0x2) syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x0, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x809, 0x3ff, 0x5, 0x6, 0x7, 0xff, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x400, 0xaaed, 0x4, 0x65], [0x9, 0xbb2d, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x9, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc0145b0e, &(0x7f0000000040)={0xffffc, 0x0, 0xfffffffe, 0x0, 0x3}) listen(r4, 0xe) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@isdn={0x22, 0x1, 0x2, 0x6, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a1b414b36d632fa2ddb3c0cc78866ca3c34ebb340775149eae4eb182c97c75"], 0x28}, 0x20000000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) fadvise64(r7, 0x7, 0x7, 0x5) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10c6400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd27, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000040), 0x0) 278.111814ms ago: executing program 0 (id=2768): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x600, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x40000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000140)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 2 (id=2769): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) read(r1, 0x0, 0x21) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x4, 0x0, 0x4, {0xa, 0x4e22, 0x9, @mcast1, 0x401}}}, 0x80, 0x0}, 0x8000) (async) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x4, 0x0, 0x4, {0xa, 0x4e22, 0x9, @mcast1, 0x401}}}, 0x80, 0x0}, 0x8000) signalfd(r2, &(0x7f00000001c0)={[0xfffffffffffffe01]}, 0x8) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000240)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000003c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f00000008c0)={[&(0x7f0000000500)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) kernel console output (not intermixed with test programs): __sys_sendmsg+0x10/0x10 [ 582.923865][T13068] ? __fget_files+0x2a/0x420 [ 582.923888][T13068] ? __fget_files+0x3a6/0x420 [ 582.923919][T13068] __x64_sys_sendmsg+0x1c3/0x2a0 [ 582.923956][T13068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.923997][T13068] ? __pfx_ksys_write+0x10/0x10 [ 582.924034][T13068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.924058][T13068] do_syscall_64+0x15f/0x560 [ 582.924089][T13068] ? trace_irq_disable+0x3b/0x140 [ 582.924114][T13068] ? clear_bhb_loop+0x40/0x90 [ 582.924143][T13068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.924166][T13068] RIP: 0033:0x7faae290ce59 [ 582.924186][T13068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.924205][T13068] RSP: 002b:00007faae0b66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.924228][T13068] RAX: ffffffffffffffda RBX: 00007faae2b85fa0 RCX: 00007faae290ce59 [ 582.924244][T13068] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 582.924271][T13068] RBP: 00007faae0b66090 R08: 0000000000000000 R09: 0000000000000000 [ 582.924284][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.924297][T13068] R13: 00007faae2b86038 R14: 00007faae2b85fa0 R15: 00007ffcd06284d8 [ 582.924330][T13068] [ 583.349982][T13074] FAULT_INJECTION: forcing a failure. [ 583.349982][T13074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 583.350025][T13074] CPU: 0 UID: 0 PID: 13074 Comm: syz.0.2609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.350066][T13074] Tainted: [L]=SOFTLOCKUP [ 583.350075][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.350089][T13074] Call Trace: [ 583.350098][T13074] [ 583.350108][T13074] dump_stack_lvl+0xe8/0x150 [ 583.350142][T13074] should_fail_ex+0x46b/0x600 [ 583.350177][T13074] prepare_alloc_pages+0x22a/0x6b0 [ 583.350325][T13074] __alloc_frozen_pages_noprof+0x12f/0x380 [ 583.350361][T13074] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 583.350393][T13074] ? __pfx_policy_nodemask+0x10/0x10 [ 583.350450][T13074] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.350490][T13074] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.350525][T13074] alloc_pages_mpol+0xd1/0x380 [ 583.350556][T13074] alloc_pages_noprof+0xd2/0x2f0 [ 583.350586][T13074] get_free_pages_noprof+0xf/0x80 [ 583.350613][T13074] __kasan_populate_vmalloc+0x38/0x1d0 [ 583.350669][T13074] ? rt_spin_unlock+0x160/0x200 [ 583.350697][T13074] alloc_vmap_area+0xd47/0x1480 [ 583.350736][T13074] ? __pfx_alloc_vmap_area+0x10/0x10 [ 583.350760][T13074] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 583.350789][T13074] ? __get_vm_area_node+0x13f/0x300 [ 583.350812][T13074] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.350841][T13074] __get_vm_area_node+0x1f8/0x300 [ 583.350870][T13074] __vmalloc_node_range_noprof+0x36a/0x1750 [ 583.350896][T13074] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.350929][T13074] ? __lock_acquire+0x6b5/0x2d10 [ 583.350980][T13074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 583.351007][T13074] ? __might_fault+0xaf/0x130 [ 583.351034][T13074] ? __might_fault+0xaf/0x130 [ 583.351066][T13074] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.351091][T13074] __vmalloc_noprof+0xd2/0x120 [ 583.351115][T13074] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.351146][T13074] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.351179][T13074] bpf_prog_alloc+0x3c/0x1a0 [ 583.351207][T13074] __get_filter+0xff/0x400 [ 583.351237][T13074] sk_attach_filter+0x24/0x140 [ 583.351278][T13074] sk_setsockopt+0x1d3e/0x2a90 [ 583.351317][T13074] ? __pfx_sk_setsockopt+0x10/0x10 [ 583.351350][T13074] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.351384][T13074] ? __fget_files+0x2a/0x420 [ 583.351416][T13074] ? aa_sock_opt_perm+0x104/0x1f0 [ 583.351443][T13074] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 583.351484][T13074] do_sock_setsockopt+0x11b/0x1b0 [ 583.351521][T13074] __x64_sys_setsockopt+0x143/0x1b0 [ 583.351555][T13074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.351580][T13074] do_syscall_64+0x15f/0x560 [ 583.351610][T13074] ? trace_irq_disable+0x3b/0x140 [ 583.351633][T13074] ? clear_bhb_loop+0x40/0x90 [ 583.351661][T13074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.351684][T13074] RIP: 0033:0x7faae290ce59 [ 583.351705][T13074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.351725][T13074] RSP: 002b:00007faae0b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 583.351749][T13074] RAX: ffffffffffffffda RBX: 00007faae2b85fa0 RCX: 00007faae290ce59 [ 583.351766][T13074] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 583.351809][T13074] RBP: 00007faae0b66090 R08: 0000000000000010 R09: 0000000000000000 [ 583.351825][T13074] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 583.351839][T13074] R13: 00007faae2b86038 R14: 00007faae2b85fa0 R15: 00007ffcd06284d8 [ 583.351874][T13074] [ 583.371254][T13074] syz.0.2609: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 583.743428][T13074] CPU: 1 UID: 0 PID: 13074 Comm: syz.0.2609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.743459][T13074] Tainted: [L]=SOFTLOCKUP [ 583.743467][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.743480][T13074] Call Trace: [ 583.743489][T13074] [ 583.743501][T13074] dump_stack_lvl+0xe8/0x150 [ 583.743533][T13074] warn_alloc+0x24c/0x270 [ 583.743557][T13074] ? kasan_quarantine_put+0xbb/0x1f0 [ 583.743582][T13074] ? __pfx_warn_alloc+0x10/0x10 [ 583.743608][T13074] ? __get_vm_area_node+0x211/0x300 [ 583.743646][T13074] ? __get_vm_area_node+0x13f/0x300 [ 583.743669][T13074] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.743711][T13074] ? __get_vm_area_node+0x211/0x300 [ 583.743739][T13074] __vmalloc_node_range_noprof+0x38f/0x1750 [ 583.743770][T13074] ? __lock_acquire+0x6b5/0x2d10 [ 583.743825][T13074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 583.743849][T13074] ? __might_fault+0xaf/0x130 [ 583.743874][T13074] ? __might_fault+0xaf/0x130 [ 583.743903][T13074] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.743925][T13074] __vmalloc_noprof+0xd2/0x120 [ 583.743946][T13074] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.743974][T13074] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 583.744005][T13074] bpf_prog_alloc+0x3c/0x1a0 [ 583.744031][T13074] __get_filter+0xff/0x400 [ 583.744059][T13074] sk_attach_filter+0x24/0x140 [ 583.744085][T13074] sk_setsockopt+0x1d3e/0x2a90 [ 583.744119][T13074] ? __pfx_sk_setsockopt+0x10/0x10 [ 583.744150][T13074] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.744183][T13074] ? __fget_files+0x2a/0x420 [ 583.744213][T13074] ? aa_sock_opt_perm+0x104/0x1f0 [ 583.744238][T13074] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 583.744269][T13074] do_sock_setsockopt+0x11b/0x1b0 [ 583.744302][T13074] __x64_sys_setsockopt+0x143/0x1b0 [ 583.744334][T13074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.744358][T13074] do_syscall_64+0x15f/0x560 [ 583.744387][T13074] ? trace_irq_disable+0x3b/0x140 [ 583.744409][T13074] ? clear_bhb_loop+0x40/0x90 [ 583.744435][T13074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.744457][T13074] RIP: 0033:0x7faae290ce59 [ 583.744476][T13074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.744494][T13074] RSP: 002b:00007faae0b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 583.744514][T13074] RAX: ffffffffffffffda RBX: 00007faae2b85fa0 RCX: 00007faae290ce59 [ 583.744529][T13074] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 583.744541][T13074] RBP: 00007faae0b66090 R08: 0000000000000010 R09: 0000000000000000 [ 583.744554][T13074] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 583.744567][T13074] R13: 00007faae2b86038 R14: 00007faae2b85fa0 R15: 00007ffcd06284d8 [ 583.744597][T13074] [ 583.746852][T13074] Mem-Info: [ 583.746866][T13074] active_anon:6315 inactive_anon:0 isolated_anon:0 [ 583.746866][T13074] active_file:0 inactive_file:57567 isolated_file:0 [ 583.746866][T13074] unevictable:768 dirty:116 writeback:0 [ 583.746866][T13074] slab_reclaimable:10200 slab_unreclaimable:97631 [ 583.746866][T13074] mapped:25685 shmem:1292 pagetables:1316 [ 583.746866][T13074] sec_pagetables:0 bounce:0 [ 583.746866][T13074] kernel_misc_reclaimable:0 [ 583.746866][T13074] free:1321765 free_pcp:4494 free_cma:0 [ 583.746931][T13074] Node 0 active_anon:25260kB inactive_anon:0kB active_file:0kB inactive_file:230060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102740kB dirty:464kB writeback:0kB shmem:3632kB kernel_stack:12860kB pagetables:5116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 583.746986][T13074] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 583.747039][T13074] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.747111][T13074] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 583.747153][T13074] Node 0 DMA32 free:1333808kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25260kB inactive_anon:0kB active_file:0kB inactive_file:230060kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2552244kB mlocked:0kB bounce:0kB free_pcp:17968kB local_pcp:6208kB free_cma:0kB [ 583.747221][T13074] lowmem_reserve[]: 0 0 0 0 0 [ 583.747260][T13074] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:868kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 583.747322][T13074] lowmem_reserve[]: 0 0 0 0 0 [ 583.747361][T13074] Node 1 Normal free:3937892kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 583.747427][T13074] lowmem_reserve[]: 0 0 0 0 0 [ 583.747464][T13074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 583.747801][T13074] Node 0 DMA32: 804*4kB (UM) 651*8kB (UME) 391*16kB (UM) 266*32kB (UME) 307*64kB (UME) 174*128kB (UME) 90*256kB (UME) 57*512kB (UME) 28*1024kB (ME) 6*2048kB (M) 287*4096kB (UM) = 1333848kB [ 583.748069][T13074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 583.748177][T13074] Node 1 Normal: 5*4kB (UM) 8*8kB (UM) 7*16kB (UM) 11*32kB (UM) 7*64kB (UM) 3*128kB (UM) 1*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3937892kB [ 583.748362][T13074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.748380][T13074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 583.748399][T13074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.748415][T13074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 583.748434][T13074] 58855 total pagecache pages [ 583.748450][T13074] 0 pages in swap cache [ 583.748459][T13074] Free swap = 124996kB [ 583.748468][T13074] Total swap = 124996kB [ 583.748481][T13074] 2097051 pages RAM [ 583.748490][T13074] 0 pages HighMem/MovableOnly [ 583.748499][T13074] 427159 pages reserved [ 583.748507][T13074] 0 pages cma reserved [ 584.081968][ T822] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 584.420800][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 584.472461][ T822] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 584.472494][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.472515][ T822] usb 4-1: Product: syz [ 584.472531][ T822] usb 4-1: Manufacturer: syz [ 584.472546][ T822] usb 4-1: SerialNumber: syz [ 584.479897][ T822] usb 4-1: config 0 descriptor?? [ 584.532301][ T822] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 584.679716][T13088] binder: 13086:13088 ioctl c0306201 200000000140 returned -22 [ 584.736277][ T822] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 584.736390][ T822] visor 4-1:0.0: probe with driver visor failed with error -5 [ 584.810696][T11028] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 584.824907][T13090] netlink: 'syz.4.2614': attribute type 2 has an invalid length. [ 584.953764][ T822] usb 4-1: USB disconnect, device number 86 [ 584.988998][T11028] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 584.989030][T11028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.019735][T11028] usb 1-1: config 0 descriptor?? [ 585.041698][T11028] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 585.560261][T13097] FAULT_INJECTION: forcing a failure. [ 585.560261][T13097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.560299][T13097] CPU: 1 UID: 0 PID: 13097 Comm: syz.2.2616 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.560326][T13097] Tainted: [L]=SOFTLOCKUP [ 585.560336][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.560348][T13097] Call Trace: [ 585.560355][T13097] [ 585.560363][T13097] dump_stack_lvl+0xe8/0x150 [ 585.560391][T13097] should_fail_ex+0x46b/0x600 [ 585.560422][T13097] _copy_from_iter+0x1d3/0x1670 [ 585.560458][T13097] ? trace_kmem_cache_alloc+0x29/0xe0 [ 585.560479][T13097] ? __alloc_skb+0x27d/0x7d0 [ 585.560504][T13097] ? __pfx__copy_from_iter+0x10/0x10 [ 585.560531][T13097] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 585.560551][T13097] ? __alloc_skb+0x27d/0x7d0 [ 585.560578][T13097] ? netlink_sendmsg+0x650/0xb40 [ 585.560605][T13097] ? skb_put+0x11b/0x210 [ 585.560631][T13097] netlink_sendmsg+0x6c0/0xb40 [ 585.560666][T13097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.560698][T13097] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 585.560721][T13097] ? irqentry_exit+0x218/0x760 [ 585.560744][T13097] ? trace_irq_disable+0x3b/0x140 [ 585.560761][T13097] ? aa_sock_msg_perm+0x122/0x200 [ 585.560777][T13097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.560802][T13097] sock_sendmsg_nosec+0x112/0x150 [ 585.560822][T13097] ____sys_sendmsg+0x55c/0x870 [ 585.560852][T13097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.560882][T13097] ? import_iovec+0x73/0xa0 [ 585.560902][T13097] ___sys_sendmsg+0x2a5/0x360 [ 585.560926][T13097] ? __lock_acquire+0x6b5/0x2d10 [ 585.560950][T13097] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.561002][T13097] ? __fget_files+0x2a/0x420 [ 585.561020][T13097] ? __fget_files+0x3a6/0x420 [ 585.561046][T13097] __x64_sys_sendmsg+0x1c3/0x2a0 [ 585.561073][T13097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.561105][T13097] ? __pfx_ksys_write+0x10/0x10 [ 585.561131][T13097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.561150][T13097] do_syscall_64+0x15f/0x560 [ 585.561186][T13097] ? trace_irq_disable+0x3b/0x140 [ 585.561205][T13097] ? clear_bhb_loop+0x40/0x90 [ 585.561227][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.561245][T13097] RIP: 0033:0x7f9db4d0ce59 [ 585.561263][T13097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.561279][T13097] RSP: 002b:00007f9db2f5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.561299][T13097] RAX: ffffffffffffffda RBX: 00007f9db4f85fa0 RCX: 00007f9db4d0ce59 [ 585.561313][T13097] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 585.561325][T13097] RBP: 00007f9db2f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 585.561355][T13097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.561367][T13097] R13: 00007f9db4f86038 R14: 00007f9db4f85fa0 R15: 00007ffea6bb2318 [ 585.561396][T13097] [ 585.870832][T11028] gspca_sunplus: reg_w_riv err -71 [ 585.870934][T11028] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 585.879807][T11028] usb 1-1: USB disconnect, device number 87 [ 585.949389][T13102] FAULT_INJECTION: forcing a failure. [ 585.949389][T13102] name failslab, interval 1, probability 0, space 0, times 0 [ 585.949430][T13102] CPU: 1 UID: 0 PID: 13102 Comm: syz.4.2619 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.949462][T13102] Tainted: [L]=SOFTLOCKUP [ 585.949470][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.949485][T13102] Call Trace: [ 585.949494][T13102] [ 585.949503][T13102] dump_stack_lvl+0xe8/0x150 [ 585.949537][T13102] should_fail_ex+0x46b/0x600 [ 585.949575][T13102] should_failslab+0xa8/0x100 [ 585.949606][T13102] kmem_cache_alloc_noprof+0x87/0x680 [ 585.949631][T13102] ? security_inode_alloc+0x39/0x310 [ 585.949661][T13102] security_inode_alloc+0x39/0x310 [ 585.949686][T13102] inode_init_always_gfp+0x99a/0xd50 [ 585.949750][T13102] ? __pfx_sock_alloc_inode+0x10/0x10 [ 585.949776][T13102] alloc_inode+0x82/0x1b0 [ 585.949812][T13102] sock_alloc+0x46/0x220 [ 585.949843][T13102] kcm_ioctl+0xf5/0x1170 [ 585.949882][T13102] ? tomoyo_path_number_perm+0x219/0x630 [ 585.949917][T13102] ? __pfx_kcm_ioctl+0x10/0x10 [ 585.949948][T13102] ? do_vfs_ioctl+0x117b/0x1540 [ 585.949991][T13102] sock_do_ioctl+0x101/0x320 [ 585.950018][T13102] ? __pfx_sock_do_ioctl+0x10/0x10 [ 585.950057][T13102] sock_ioctl+0x5c9/0x7f0 [ 585.950082][T13102] ? __pfx_sock_ioctl+0x10/0x10 [ 585.950104][T13102] ? __fget_files+0x2a/0x420 [ 585.950124][T13102] ? __fget_files+0x3a6/0x420 [ 585.950145][T13102] ? __fget_files+0x2a/0x420 [ 585.950170][T13102] ? bpf_lsm_file_ioctl+0x9/0x20 [ 585.950209][T13102] ? __pfx_sock_ioctl+0x10/0x10 [ 585.950232][T13102] __se_sys_ioctl+0xff/0x170 [ 585.950260][T13102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.950285][T13102] do_syscall_64+0x15f/0x560 [ 585.950316][T13102] ? trace_irq_disable+0x3b/0x140 [ 585.950347][T13102] ? clear_bhb_loop+0x40/0x90 [ 585.950373][T13102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.950395][T13102] RIP: 0033:0x7f577814ce59 [ 585.950416][T13102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.950435][T13102] RSP: 002b:00007f577639e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.950457][T13102] RAX: ffffffffffffffda RBX: 00007f57783c5fa0 RCX: 00007f577814ce59 [ 585.950474][T13102] RDX: 0000200000000b80 RSI: 00000000000089e2 RDI: 0000000000000004 [ 585.950490][T13102] RBP: 00007f577639e090 R08: 0000000000000000 R09: 0000000000000000 [ 585.950504][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.950516][T13102] R13: 00007f57783c6038 R14: 00007f57783c5fa0 R15: 00007ffef5fcfbc8 [ 585.950556][T13102] [ 586.790566][ T870] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 586.947374][ T870] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 586.947410][ T870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.947431][ T870] usb 1-1: Product: syz [ 586.947447][ T870] usb 1-1: Manufacturer: syz [ 586.947463][ T870] usb 1-1: SerialNumber: syz [ 586.994849][T13124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 587.021847][T13124] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 587.144745][T13124] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 587.219412][T13124] netlink: 'syz.2.2625': attribute type 2 has an invalid length. [ 587.219437][T13124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2625'. [ 587.388888][ T870] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 587.388958][ T870] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 587.900524][T11028] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 588.090602][T11028] usb 5-1: Using ep0 maxpacket: 8 [ 588.112166][T11028] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 588.112198][T11028] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 588.112224][T11028] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.112249][T11028] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.112295][T11028] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.112319][T11028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.402931][T11028] usb 5-1: GET_CAPABILITIES returned 0 [ 588.402976][T11028] usbtmc 5-1:16.0: can't read capabilities [ 588.605521][ T38] audit: type=1326 audit(1779738884.219:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13137 comm="syz.2.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9db4d0ce59 code=0x0 [ 588.651259][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.651347][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.651419][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.653271][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.653349][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.653405][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.653704][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.653762][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.653845][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.654118][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.654197][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.654265][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.662687][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.662773][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.662849][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.808915][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.823445][T11028] usb 5-1: USB disconnect, device number 8 [ 588.970641][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 589.521572][T13144] FAULT_INJECTION: forcing a failure. [ 589.521572][T13144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.521616][T13144] CPU: 1 UID: 0 PID: 13144 Comm: syz.2.2632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 589.521642][T13144] Tainted: [L]=SOFTLOCKUP [ 589.521649][T13144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.521661][T13144] Call Trace: [ 589.521669][T13144] [ 589.521677][T13144] dump_stack_lvl+0xe8/0x150 [ 589.521706][T13144] should_fail_ex+0x46b/0x600 [ 589.521735][T13144] prepare_alloc_pages+0x22a/0x6b0 [ 589.521764][T13144] __alloc_frozen_pages_noprof+0x12f/0x380 [ 589.521791][T13144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.521817][T13144] ? __pfx_policy_nodemask+0x10/0x10 [ 589.521843][T13144] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 589.521870][T13144] ? lockdep_hardirqs_on+0x7a/0x110 [ 589.521900][T13144] alloc_pages_mpol+0xd1/0x380 [ 589.521926][T13144] alloc_pages_noprof+0xd2/0x2f0 [ 589.521949][T13144] get_free_pages_noprof+0xf/0x80 [ 589.521971][T13144] __kasan_populate_vmalloc+0x38/0x1d0 [ 589.521998][T13144] ? rt_spin_unlock+0x160/0x200 [ 589.522019][T13144] alloc_vmap_area+0xd47/0x1480 [ 589.522046][T13144] ? __pfx_alloc_vmap_area+0x10/0x10 [ 589.522065][T13144] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 589.522090][T13144] ? __get_vm_area_node+0x13f/0x300 [ 589.522109][T13144] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 589.522144][T13144] __get_vm_area_node+0x1f8/0x300 [ 589.522166][T13144] __vmalloc_node_range_noprof+0x36a/0x1750 [ 589.522186][T13144] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 589.522207][T13144] ? stack_depot_save_flags+0x33/0x810 [ 589.522236][T13144] ? kasan_save_track+0x3e/0x80 [ 589.522268][T13144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 589.522303][T13144] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 589.522325][T13144] __vmalloc_noprof+0xd2/0x120 [ 589.522364][T13144] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 589.522410][T13144] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 589.522441][T13144] bpf_prog_alloc+0x3c/0x1a0 [ 589.522471][T13144] bpf_prog_create_from_user+0xa7/0x440 [ 589.522498][T13144] ? __pfx_seccomp_check_filter+0x10/0x10 [ 589.522660][T13144] do_seccomp+0x776/0xd30 [ 589.522696][T13144] ? __pfx_do_seccomp+0x10/0x10 [ 589.522728][T13144] ? ksys_write+0x248/0x270 [ 589.522758][T13144] ? __pfx_ksys_write+0x10/0x10 [ 589.522794][T13144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.522820][T13144] do_syscall_64+0x15f/0x560 [ 589.522852][T13144] ? trace_irq_disable+0x3b/0x140 [ 589.522879][T13144] ? clear_bhb_loop+0x40/0x90 [ 589.522908][T13144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.522931][T13144] RIP: 0033:0x7f9db4d0ce59 [ 589.522952][T13144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.522974][T13144] RSP: 002b:00007f9db2f5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 589.522999][T13144] RAX: ffffffffffffffda RBX: 00007f9db4f85fa0 RCX: 00007f9db4d0ce59 [ 589.523018][T13144] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 589.523033][T13144] RBP: 00007f9db2f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 589.523048][T13144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.523061][T13144] R13: 00007f9db4f86038 R14: 00007f9db4f85fa0 R15: 00007ffea6bb2318 [ 589.523095][T13144] [ 589.924402][ T870] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 589.924457][ T870] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 589.925310][ T870] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 589.979544][ T870] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 590.016625][T13146] FAULT_INJECTION: forcing a failure. [ 590.016625][T13146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.016665][T13146] CPU: 1 UID: 0 PID: 13146 Comm: syz.2.2634 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 590.016695][T13146] Tainted: [L]=SOFTLOCKUP [ 590.016703][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.016717][T13146] Call Trace: [ 590.016726][T13146] [ 590.016736][T13146] dump_stack_lvl+0xe8/0x150 [ 590.016771][T13146] should_fail_ex+0x46b/0x600 [ 590.016808][T13146] _copy_to_user+0x31/0xb0 [ 590.016835][T13146] simple_read_from_buffer+0xe1/0x170 [ 590.016875][T13146] proc_fail_nth_read+0x1be/0x230 [ 590.016904][T13146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.016932][T13146] ? rw_verify_area+0x2ac/0x4e0 [ 590.016963][T13146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.016990][T13146] vfs_read+0x212/0xa80 [ 590.017025][T13146] ? __pfx_vfs_read+0x10/0x10 [ 590.017054][T13146] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 590.017087][T13146] ? lockdep_hardirqs_on+0x7a/0x110 [ 590.017118][T13146] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 590.017149][T13146] ? mutex_lock_nested+0x152/0x1d0 [ 590.017170][T13146] ? fdget_pos+0x252/0x320 [ 590.017200][T13146] ksys_read+0x156/0x270 [ 590.017227][T13146] ? __pfx_ksys_read+0x10/0x10 [ 590.017250][T13146] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 590.017401][T13146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.017427][T13146] do_syscall_64+0x15f/0x560 [ 590.017456][T13146] ? trace_irq_disable+0x3b/0x140 [ 590.017481][T13146] ? clear_bhb_loop+0x40/0x90 [ 590.017509][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.017532][T13146] RIP: 0033:0x7f9db4ccd68e [ 590.017562][T13146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 590.017584][T13146] RSP: 002b:00007f9db2f5dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 590.017607][T13146] RAX: ffffffffffffffda RBX: 00007f9db2f5e6c0 RCX: 00007f9db4ccd68e [ 590.017624][T13146] RDX: 000000000000000f RSI: 00007f9db2f5e0a0 RDI: 0000000000000004 [ 590.017638][T13146] RBP: 00007f9db2f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 590.017652][T13146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.017676][T13146] R13: 00007f9db4f86038 R14: 00007f9db4f85fa0 R15: 00007ffea6bb2318 [ 590.017722][T13146] [ 590.275788][ T870] usb 1-1: USB disconnect, device number 88 [ 590.361585][ T8845] udevd[8845]: setting owner of /dev/bus/usb/001/088 to uid=0, gid=0 failed: No such file or directory [ 590.918208][T13172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2641'. [ 591.061257][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 591.206586][T13181] FAULT_INJECTION: forcing a failure. [ 591.206586][T13181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.206628][T13181] CPU: 0 UID: 0 PID: 13181 Comm: syz.0.2644 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.206660][T13181] Tainted: [L]=SOFTLOCKUP [ 591.206669][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.206684][T13181] Call Trace: [ 591.206693][T13181] [ 591.206703][T13181] dump_stack_lvl+0xe8/0x150 [ 591.206736][T13181] should_fail_ex+0x46b/0x600 [ 591.206774][T13181] _copy_from_iter+0x1d3/0x1670 [ 591.206820][T13181] ? trace_kmem_cache_alloc+0x29/0xe0 [ 591.206845][T13181] ? __alloc_skb+0x27d/0x7d0 [ 591.206875][T13181] ? __pfx__copy_from_iter+0x10/0x10 [ 591.206914][T13181] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 591.206940][T13181] ? __alloc_skb+0x27d/0x7d0 [ 591.206975][T13181] ? netlink_sendmsg+0x650/0xb40 [ 591.207008][T13181] ? skb_put+0x11b/0x210 [ 591.207042][T13181] netlink_sendmsg+0x6c0/0xb40 [ 591.207086][T13181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.207124][T13181] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 591.207158][T13181] ? aa_sock_msg_perm+0x122/0x200 [ 591.207182][T13181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.207217][T13181] sock_sendmsg_nosec+0x112/0x150 [ 591.207246][T13181] ____sys_sendmsg+0x55c/0x870 [ 591.207287][T13181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.207338][T13181] ? import_iovec+0x73/0xa0 [ 591.207367][T13181] ___sys_sendmsg+0x2a5/0x360 [ 591.207399][T13181] ? __lock_acquire+0x6b5/0x2d10 [ 591.207432][T13181] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.207473][T13181] ? kstrtouint+0x6e/0xe0 [ 591.207530][T13181] ? __fget_files+0x2a/0x420 [ 591.207553][T13181] ? __fget_files+0x3a6/0x420 [ 591.207587][T13181] __sys_sendmmsg+0x282/0x4e0 [ 591.207627][T13181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 591.207671][T13181] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 591.207709][T13181] ? ksys_write+0x248/0x270 [ 591.207737][T13181] ? __pfx_ksys_write+0x10/0x10 [ 591.207780][T13181] __x64_sys_sendmmsg+0xa0/0xc0 [ 591.207811][T13181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.207835][T13181] do_syscall_64+0x15f/0x560 [ 591.207863][T13181] ? trace_irq_disable+0x3b/0x140 [ 591.207887][T13181] ? clear_bhb_loop+0x40/0x90 [ 591.207915][T13181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.207939][T13181] RIP: 0033:0x7faae290ce59 [ 591.207960][T13181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.207979][T13181] RSP: 002b:00007faae0b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 591.208004][T13181] RAX: ffffffffffffffda RBX: 00007faae2b85fa0 RCX: 00007faae290ce59 [ 591.208022][T13181] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 591.208038][T13181] RBP: 00007faae0b66090 R08: 0000000000000000 R09: 0000000000000000 [ 591.208052][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.208066][T13181] R13: 00007faae2b86038 R14: 00007faae2b85fa0 R15: 00007ffcd06284d8 [ 591.208098][T13181] [ 591.300521][ T870] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 591.450688][ T870] usb 5-1: Using ep0 maxpacket: 32 [ 591.542580][ T870] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 591.542603][ T870] usb 5-1: config 0 has no interface number 0 [ 591.542635][ T870] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 591.542652][ T870] usb 5-1: config 0 interface 1 has no altsetting 0 [ 591.547063][ T870] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 591.547094][ T870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.547115][ T870] usb 5-1: Product: syz [ 591.547134][ T870] usb 5-1: Manufacturer: syz [ 591.547145][ T870] usb 5-1: SerialNumber: syz [ 591.603514][ T870] usb 5-1: config 0 descriptor?? [ 591.862078][ T870] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 591.896840][ T870] cx231xx 5-1:0.1: Failed to read PCB config [ 591.897080][ T870] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 591.917402][ T870] usb 5-1: USB disconnect, device number 9 [ 592.030704][ T822] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 592.200777][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 592.207886][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.207922][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.207964][ T822] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 592.207990][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.261104][ T822] usb 1-1: config 0 descriptor?? [ 592.761523][ T822] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 592.903818][T13184] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2646'. [ 592.935463][T13184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.936051][T13184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.988360][ T822] usb 1-1: USB disconnect, device number 89 [ 593.141105][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 593.265402][T13209] FAULT_INJECTION: forcing a failure. [ 593.265402][T13209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.265433][T13209] CPU: 0 UID: 0 PID: 13209 Comm: syz.2.2653 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 593.265457][T13209] Tainted: [L]=SOFTLOCKUP [ 593.265463][T13209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 593.265474][T13209] Call Trace: [ 593.265480][T13209] [ 593.265487][T13209] dump_stack_lvl+0xe8/0x150 [ 593.265511][T13209] should_fail_ex+0x46b/0x600 [ 593.265541][T13209] _copy_from_iter+0x1d3/0x1670 [ 593.265570][T13209] ? rcu_is_watching+0x15/0xb0 [ 593.265596][T13209] ? __pfx__copy_from_iter+0x10/0x10 [ 593.265620][T13209] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 593.265646][T13209] ? netlink_sendmsg+0x650/0xb40 [ 593.265669][T13209] ? skb_put+0x11b/0x210 [ 593.265694][T13209] netlink_sendmsg+0x6c0/0xb40 [ 593.265731][T13209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.265757][T13209] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 593.265780][T13209] ? aa_sock_msg_perm+0x122/0x200 [ 593.265796][T13209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.265819][T13209] sock_sendmsg_nosec+0x112/0x150 [ 593.265839][T13209] ____sys_sendmsg+0x55c/0x870 [ 593.265867][T13209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.265897][T13209] ? import_iovec+0x73/0xa0 [ 593.265915][T13209] ___sys_sendmsg+0x2a5/0x360 [ 593.265938][T13209] ? __lock_acquire+0x6b5/0x2d10 [ 593.265961][T13209] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.266008][T13209] ? __fget_files+0x2a/0x420 [ 593.266023][T13209] ? __fget_files+0x3a6/0x420 [ 593.266046][T13209] __x64_sys_sendmsg+0x1c3/0x2a0 [ 593.266071][T13209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.266102][T13209] ? __pfx_ksys_write+0x10/0x10 [ 593.266128][T13209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.266146][T13209] do_syscall_64+0x15f/0x560 [ 593.266168][T13209] ? trace_irq_disable+0x3b/0x140 [ 593.266186][T13209] ? clear_bhb_loop+0x40/0x90 [ 593.266206][T13209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.266222][T13209] RIP: 0033:0x7f9db4d0ce59 [ 593.266240][T13209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.266277][T13209] RSP: 002b:00007f9db2f5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.266300][T13209] RAX: ffffffffffffffda RBX: 00007f9db4f85fa0 RCX: 00007f9db4d0ce59 [ 593.266317][T13209] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 593.266331][T13209] RBP: 00007f9db2f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 593.266345][T13209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.266359][T13209] R13: 00007f9db4f86038 R14: 00007f9db4f85fa0 R15: 00007ffea6bb2318 [ 593.266394][T13209] [ 593.657061][ T4931] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 593.669426][T13213] Device name cannot be null; rc = [-22] [ 594.120536][ T5718] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 594.270914][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 594.275290][ T5718] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 594.275326][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.275342][ T5718] usb 5-1: Product: syz [ 594.275354][ T5718] usb 5-1: Manufacturer: syz [ 594.275365][ T5718] usb 5-1: SerialNumber: syz [ 594.282003][ T5718] usb 5-1: config 0 descriptor?? [ 594.530195][ T5718] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 594.689692][T13233] FAULT_INJECTION: forcing a failure. [ 594.689692][T13233] name failslab, interval 1, probability 0, space 0, times 0 [ 594.689730][T13233] CPU: 1 UID: 0 PID: 13233 Comm: syz.3.2663 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 594.689760][T13233] Tainted: [L]=SOFTLOCKUP [ 594.689768][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.689781][T13233] Call Trace: [ 594.689788][T13233] [ 594.689798][T13233] dump_stack_lvl+0xe8/0x150 [ 594.689828][T13233] should_fail_ex+0x46b/0x600 [ 594.689865][T13233] should_failslab+0xa8/0x100 [ 594.689893][T13233] kmem_cache_alloc_noprof+0x87/0x680 [ 594.689917][T13233] ? do_getname_kernel+0x54/0x230 [ 594.689950][T13233] do_getname_kernel+0x54/0x230 [ 594.689984][T13233] ? do_file_open_root+0x1a7/0x710 [ 594.690003][T13233] do_file_open_root+0x1b1/0x710 [ 594.690039][T13233] ? __pfx_do_file_open_root+0x10/0x10 [ 594.690063][T13233] ? do_raw_spin_lock+0x12b/0x2f0 [ 594.690103][T13233] ? rt_spin_lock+0x1e0/0x400 [ 594.690128][T13233] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 594.690160][T13233] file_open_root+0x166/0x1c0 [ 594.690186][T13233] ? __pfx_file_open_root+0x10/0x10 [ 594.690226][T13233] ? alloc_fd+0x679/0x6f0 [ 594.690267][T13233] do_handle_open+0x86c/0x970 [ 594.690399][T13233] ? __pfx_do_handle_open+0x10/0x10 [ 594.690436][T13233] ? __pfx_ksys_write+0x10/0x10 [ 594.690465][T13233] ? __secure_computing+0xe1/0x2a0 [ 594.690491][T13233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.690514][T13233] do_syscall_64+0x15f/0x560 [ 594.690542][T13233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.690563][T13233] ? clear_bhb_loop+0x40/0x90 [ 594.690592][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.690632][T13233] RIP: 0033:0x7fbe13c2ce59 [ 594.690652][T13233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.690671][T13233] RSP: 002b:00007fbe11e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 594.690692][T13233] RAX: ffffffffffffffda RBX: 00007fbe13ea5fa0 RCX: 00007fbe13c2ce59 [ 594.690706][T13233] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 594.690718][T13233] RBP: 00007fbe11e86090 R08: 0000000000000000 R09: 0000000000000000 [ 594.690735][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.690744][T13233] R13: 00007fbe13ea6038 R14: 00007fbe13ea5fa0 R15: 00007ffd66f24528 [ 594.690766][T13233] [ 594.951358][ T5779] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 595.032157][T13237] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2664'. [ 595.080648][ T5779] usb 3-1: device descriptor read/64, error -71 [ 595.370803][ T5779] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 595.504685][ T5779] usb 3-1: device descriptor read/64, error -71 [ 595.611245][ T5779] usb usb3-port1: attempt power cycle [ 595.990785][ T5779] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 596.014569][ T5779] usb 3-1: device descriptor read/8, error -71 [ 596.117194][ T5718] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 596.135501][ T5718] usb 5-1: USB disconnect, device number 10 [ 596.261827][ T5779] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 596.281486][ T5779] usb 3-1: device descriptor read/8, error -71 [ 596.393496][ T5779] usb usb3-port1: unable to enumerate USB device [ 596.674376][ T4931] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 596.770622][ T32] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 596.900655][ T32] usb 4-1: device descriptor read/64, error -71 [ 597.150555][ T32] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 597.280595][ T32] usb 4-1: device descriptor read/64, error -71 [ 597.390882][ T32] usb usb4-port1: attempt power cycle [ 597.563037][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 597.730616][ T32] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 597.752360][ T32] usb 4-1: device descriptor read/8, error -71 [ 597.932664][T11028] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 597.991803][ T32] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 598.013011][ T32] usb 4-1: device descriptor read/8, error -71 [ 598.080748][T11028] usb 3-1: Using ep0 maxpacket: 32 [ 598.084539][T11028] usb 3-1: unable to get BOS descriptor or descriptor too short [ 598.085813][T11028] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 598.085841][T11028] usb 3-1: config 3 has an invalid interface number: 25 but max is 1 [ 598.085862][T11028] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 598.085887][T11028] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 598.085908][T11028] usb 3-1: config 3 has no interface number 0 [ 598.085920][T11028] usb 3-1: config 3 has no interface number 1 [ 598.085967][T11028] usb 3-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 598.085983][T11028] usb 3-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 598.086004][T11028] usb 3-1: config 3 interface 223 has no altsetting 1 [ 598.086018][T11028] usb 3-1: config 3 interface 25 has no altsetting 0 [ 598.088474][T11028] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 598.088504][T11028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.088528][T11028] usb 3-1: Product: syz [ 598.088539][T11028] usb 3-1: Manufacturer: syz [ 598.088550][T11028] usb 3-1: SerialNumber: syz [ 598.153898][ T32] usb usb4-port1: unable to enumerate USB device [ 598.391530][T11028] usb 3-1: USB disconnect, device number 116 [ 599.049062][T13263] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 599.480578][ T5779] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 599.655088][ T5779] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 599.655139][ T5779] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 599.655160][ T5779] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 599.657840][ T5779] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.657871][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.657893][ T5779] usb 1-1: Product: syz [ 599.657910][ T5779] usb 1-1: Manufacturer: syz [ 599.657926][ T5779] usb 1-1: SerialNumber: syz [ 599.836256][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2677'. [ 599.937030][T13274] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 599.937178][T13274] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 600.120684][ T5718] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 600.270590][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 600.273385][ T5718] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 600.273467][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 240, setting to 64 [ 600.276643][ T5718] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 600.276677][ T5718] usb 4-1: New USB device strings: Mfr=170, Product=2, SerialNumber=3 [ 600.276735][ T5718] usb 4-1: Product: syz [ 600.276747][ T5718] usb 4-1: Manufacturer: syz [ 600.276758][ T5718] usb 4-1: SerialNumber: syz [ 600.334194][ T5718] usb 4-1: config 0 descriptor?? [ 600.424713][ T5718] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 600.550323][T13274] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 600.551367][T13274] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 600.754981][ T5779] cdc_ncm 1-1:1.0: failed to get mac address [ 600.937450][T13288] FAULT_INJECTION: forcing a failure. [ 600.937450][T13288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.937481][T13288] CPU: 0 UID: 0 PID: 13288 Comm: syz.2.2680 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 600.937506][T13288] Tainted: [L]=SOFTLOCKUP [ 600.937513][T13288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.937546][T13288] Call Trace: [ 600.937556][T13288] [ 600.937566][T13288] dump_stack_lvl+0xe8/0x150 [ 600.937596][T13288] should_fail_ex+0x46b/0x600 [ 600.937649][T13288] _copy_from_iter+0x1d3/0x1670 [ 600.937694][T13288] ? trace_kmem_cache_alloc+0x29/0xe0 [ 600.937730][T13288] ? __alloc_skb+0x27d/0x7d0 [ 600.937757][T13288] ? __pfx__copy_from_iter+0x10/0x10 [ 600.937780][T13288] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 600.937796][T13288] ? __alloc_skb+0x27d/0x7d0 [ 600.937824][T13288] ? netlink_sendmsg+0x650/0xb40 [ 600.937847][T13288] ? skb_put+0x11b/0x210 [ 600.937870][T13288] netlink_sendmsg+0x6c0/0xb40 [ 600.937900][T13288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.937924][T13288] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 600.937946][T13288] ? aa_sock_msg_perm+0x122/0x200 [ 600.937962][T13288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.937985][T13288] sock_sendmsg_nosec+0x112/0x150 [ 600.938004][T13288] ____sys_sendmsg+0x55c/0x870 [ 600.938030][T13288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.938059][T13288] ? import_iovec+0x73/0xa0 [ 600.938077][T13288] ___sys_sendmsg+0x2a5/0x360 [ 600.938099][T13288] ? __lock_acquire+0x6b5/0x2d10 [ 600.938122][T13288] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.938167][T13288] ? __fget_files+0x2a/0x420 [ 600.938183][T13288] ? __fget_files+0x3a6/0x420 [ 600.938204][T13288] __x64_sys_sendmsg+0x1c3/0x2a0 [ 600.938229][T13288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.938259][T13288] ? __pfx_ksys_write+0x10/0x10 [ 600.938283][T13288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.938301][T13288] do_syscall_64+0x15f/0x560 [ 600.938332][T13288] ? trace_irq_disable+0x3b/0x140 [ 600.938349][T13288] ? clear_bhb_loop+0x40/0x90 [ 600.938368][T13288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.938384][T13288] RIP: 0033:0x7f9db4d0ce59 [ 600.938399][T13288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.938412][T13288] RSP: 002b:00007f9db2f5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.938430][T13288] RAX: ffffffffffffffda RBX: 00007f9db4f85fa0 RCX: 00007f9db4d0ce59 [ 600.938442][T13288] RDX: 0000000000000410 RSI: 0000200000000000 RDI: 0000000000000003 [ 600.938453][T13288] RBP: 00007f9db2f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 600.938463][T13288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.938472][T13288] R13: 00007f9db4f86038 R14: 00007f9db4f85fa0 R15: 00007ffea6bb2318 [ 600.938496][T13288] [ 600.978442][ T5779] cdc_ncm 1-1:1.0: bind() failure [ 601.250189][ T5779] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 601.275893][ T5779] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 601.290003][ T5779] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 601.344772][ T5779] usb 1-1: USB disconnect, device number 90 [ 601.510544][T11028] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 601.603658][T10003] usb 4-1: Failed to submit usb control message: -110 [ 601.603703][T10003] usb 4-1: unable to send the bmi data to the device: -110 [ 601.603725][T10003] usb 4-1: unable to get target info from device [ 601.603744][T10003] usb 4-1: could not get target info (-110) [ 601.603764][T10003] usb 4-1: could not probe fw (-110) [ 601.650615][T11028] usb 5-1: device descriptor read/64, error -71 [ 601.681965][T13296] netlink: 'syz.0.2682': attribute type 10 has an invalid length. [ 601.681991][T13296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2682'. [ 601.705919][T13296] ipvlan0: entered promiscuous mode [ 601.719260][T13296] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 601.892620][T11028] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 602.020588][T11028] usb 5-1: device descriptor read/64, error -71 [ 602.131024][T11028] usb usb5-port1: attempt power cycle [ 602.261405][T11264] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 602.417935][T11264] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 602.417966][T11264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.417985][T11264] usb 3-1: Product: syz [ 602.418000][T11264] usb 3-1: Manufacturer: syz [ 602.418014][T11264] usb 3-1: SerialNumber: syz [ 602.457367][T11264] usb 3-1: config 0 descriptor?? [ 602.514327][T11028] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 602.537742][T11028] usb 5-1: device descriptor read/8, error -71 [ 602.782983][T11028] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 602.802297][T11028] usb 5-1: device descriptor read/8, error -71 [ 602.911173][T11028] usb usb5-port1: unable to enumerate USB device [ 603.073671][T11028] usb 4-1: USB disconnect, device number 91 [ 603.350895][ T5718] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 603.477532][T11264] usb 3-1: ATUSB: AT86RF212 version 233 [ 603.520784][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 603.527033][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 603.548334][ T5718] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 603.548358][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.548373][ T5718] usb 1-1: Product: syz [ 603.548452][ T5718] usb 1-1: Manufacturer: syz [ 603.548464][ T5718] usb 1-1: SerialNumber: syz [ 603.586396][ T5718] usb 1-1: config 0 descriptor?? [ 603.600517][ T5718] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 603.600559][ T5718] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 603.600561][T11028] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 603.678259][T11264] usb 3-1: Firmware version (0.0) predates our first public release. [ 603.678279][T11264] usb 3-1: Please update to version 0.2 or newer [ 603.760811][T11028] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 603.760844][T11028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.767468][T11028] usb 4-1: config 0 descriptor?? [ 603.982284][T11028] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 604.109795][T11264] usb 3-1: USB disconnect, device number 117 [ 604.211997][ T5718] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 604.379046][T11028] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 604.379075][T11028] [drm] Initialized udl on minor 2 [ 604.423294][T11028] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 604.521820][T11028] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 604.665841][ T5718] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 604.665906][ T5718] em28xx 1-1:0.0: board has no eeprom [ 604.706662][ T822] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 604.718762][ T5779] usb 4-1: USB disconnect, device number 92 [ 604.755769][ T822] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 604.942378][ T5718] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 604.942533][ T5718] em28xx 1-1:0.0: dvb set to isoc mode. [ 604.963028][ T870] em28xx 1-1:0.0: Binding DVB extension [ 605.049730][ T5718] usb 1-1: USB disconnect, device number 91 [ 605.160333][ T5718] em28xx 1-1:0.0: Disconnecting em28xx [ 605.496856][ T870] em28xx 1-1:0.0: Registering input extension [ 605.497259][ T5718] em28xx 1-1:0.0: Closing input extension [ 605.591437][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 605.780811][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.780856][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.780885][ T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 605.780903][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.835702][ T9] usb 5-1: config 0 descriptor?? [ 605.894090][ T5718] em28xx 1-1:0.0: Freeing device [ 606.030680][ T5779] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 606.193830][ T5779] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 606.193862][ T5779] usb 4-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 606.193885][ T5779] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 606.193993][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 161, changing to 11 [ 606.194022][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33970, setting to 1024 [ 606.196280][ T5779] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 606.196312][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 606.196397][ T5779] usb 4-1: Product: syz [ 606.196414][ T5779] usb 4-1: Manufacturer: syz [ 606.285180][T13348] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 606.307181][ T5779] cdc_wdm 4-1:1.0: skipping garbage [ 606.307200][ T5779] cdc_wdm 4-1:1.0: skipping garbage [ 606.332889][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.338887][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.379017][ T9] hid-thrustmaster 0003:044F:B65D.002D: item fetching failed at offset 6/7 [ 606.379671][ T9] hid-thrustmaster 0003:044F:B65D.002D: parse failed with error -22 [ 606.379742][ T9] hid-thrustmaster 0003:044F:B65D.002D: probe with driver hid-thrustmaster failed with error -22 [ 606.462249][ T5779] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 606.462368][ T5779] cdc_wdm 4-1:1.0: Unknown control protocol [ 606.599069][T11028] usb 4-1: USB disconnect, device number 93 [ 606.794163][ T9] IPVS: starting estimator thread 0... [ 606.880888][T13361] IPVS: using max 9 ests per chain, 21600 per kthread [ 606.910638][T11263] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 607.040641][T11263] usb 1-1: device descriptor read/64, error -71 [ 607.103134][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.103761][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.280562][T11263] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 607.415336][T11263] usb 1-1: device descriptor read/64, error -71 [ 607.529227][T11263] usb usb1-port1: attempt power cycle [ 607.793086][T13377] FAULT_INJECTION: forcing a failure. [ 607.793086][T13377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.793371][T13377] CPU: 1 UID: 0 PID: 13377 Comm: syz.3.2704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.793405][T13377] Tainted: [L]=SOFTLOCKUP [ 607.793414][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.793428][T13377] Call Trace: [ 607.793438][T13377] [ 607.793449][T13377] dump_stack_lvl+0xe8/0x150 [ 607.793484][T13377] should_fail_ex+0x46b/0x600 [ 607.793523][T13377] _copy_to_user+0x31/0xb0 [ 607.793552][T13377] simple_read_from_buffer+0xe1/0x170 [ 607.793596][T13377] proc_fail_nth_read+0x1be/0x230 [ 607.793626][T13377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.793660][T13377] ? rw_verify_area+0x2ac/0x4e0 [ 607.793684][T13377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.793711][T13377] vfs_read+0x212/0xa80 [ 607.793747][T13377] ? __pfx_vfs_read+0x10/0x10 [ 607.793786][T13377] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 607.793821][T13377] ? lockdep_hardirqs_on+0x7a/0x110 [ 607.793853][T13377] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 607.793885][T13377] ? mutex_lock_nested+0x152/0x1d0 [ 607.793909][T13377] ? fdget_pos+0x252/0x320 [ 607.793941][T13377] ksys_read+0x156/0x270 [ 607.793971][T13377] ? __pfx_ksys_read+0x10/0x10 [ 607.794007][T13377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.794033][T13377] do_syscall_64+0x15f/0x560 [ 607.794065][T13377] ? trace_irq_disable+0x3b/0x140 [ 607.794092][T13377] ? clear_bhb_loop+0x40/0x90 [ 607.794121][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.794146][T13377] RIP: 0033:0x7fbe13bed68e [ 607.794167][T13377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 607.794187][T13377] RSP: 002b:00007fbe11e64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.794211][T13377] RAX: ffffffffffffffda RBX: 00007fbe11e656c0 RCX: 00007fbe13bed68e [ 607.794227][T13377] RDX: 000000000000000f RSI: 00007fbe11e650a0 RDI: 0000000000000004 [ 607.794242][T13377] RBP: 00007fbe11e65090 R08: 0000000000000000 R09: 0000000000000000 [ 607.794256][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.794269][T13377] R13: 00007fbe13ea6128 R14: 00007fbe13ea6090 R15: 00007ffd66f24528 [ 607.794304][T13377] [ 607.941939][T11263] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 607.982796][T11263] usb 1-1: device descriptor read/8, error -71 [ 608.065852][T13379] FAULT_INJECTION: forcing a failure. [ 608.065852][T13379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.065882][T13379] CPU: 1 UID: 0 PID: 13379 Comm: syz.3.2706 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 608.065905][T13379] Tainted: [L]=SOFTLOCKUP [ 608.065911][T13379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.065922][T13379] Call Trace: [ 608.065928][T13379] [ 608.065935][T13379] dump_stack_lvl+0xe8/0x150 [ 608.065959][T13379] should_fail_ex+0x46b/0x600 [ 608.065986][T13379] _copy_from_iter+0x1d3/0x1670 [ 608.066018][T13379] ? trace_kmem_cache_alloc+0x29/0xe0 [ 608.066035][T13379] ? __alloc_skb+0x27d/0x7d0 [ 608.066057][T13379] ? __pfx__copy_from_iter+0x10/0x10 [ 608.066080][T13379] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 608.066098][T13379] ? __alloc_skb+0x27d/0x7d0 [ 608.066124][T13379] ? netlink_sendmsg+0x650/0xb40 [ 608.066148][T13379] ? skb_put+0x11b/0x210 [ 608.066172][T13379] netlink_sendmsg+0x6c0/0xb40 [ 608.066202][T13379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.066228][T13379] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 608.066250][T13379] ? aa_sock_msg_perm+0x122/0x200 [ 608.066267][T13379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.066290][T13379] sock_sendmsg_nosec+0x112/0x150 [ 608.066310][T13379] ____sys_sendmsg+0x55c/0x870 [ 608.066340][T13379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.066369][T13379] ? import_iovec+0x73/0xa0 [ 608.066389][T13379] ___sys_sendmsg+0x2a5/0x360 [ 608.066411][T13379] ? __lock_acquire+0x6b5/0x2d10 [ 608.066435][T13379] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.066462][T13379] ? kstrtouint+0x6e/0xe0 [ 608.066506][T13379] ? __fget_files+0x2a/0x420 [ 608.066521][T13379] ? __fget_files+0x3a6/0x420 [ 608.066544][T13379] __sys_sendmmsg+0x282/0x4e0 [ 608.066572][T13379] ? __pfx___sys_sendmmsg+0x10/0x10 [ 608.066602][T13379] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 608.066631][T13379] ? ksys_write+0x248/0x270 [ 608.066652][T13379] ? __pfx_ksys_write+0x10/0x10 [ 608.066676][T13379] __x64_sys_sendmmsg+0xa0/0xc0 [ 608.066700][T13379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.066745][T13379] do_syscall_64+0x15f/0x560 [ 608.066776][T13379] ? trace_irq_disable+0x3b/0x140 [ 608.066802][T13379] ? clear_bhb_loop+0x40/0x90 [ 608.066839][T13379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.066856][T13379] RIP: 0033:0x7fbe13c2ce59 [ 608.066871][T13379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.066886][T13379] RSP: 002b:00007fbe11e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 608.066904][T13379] RAX: ffffffffffffffda RBX: 00007fbe13ea5fa0 RCX: 00007fbe13c2ce59 [ 608.066916][T13379] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 608.066928][T13379] RBP: 00007fbe11e86090 R08: 0000000000000000 R09: 0000000000000000 [ 608.066938][T13379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.066948][T13379] R13: 00007fbe13ea6038 R14: 00007fbe13ea5fa0 R15: 00007ffd66f24528 [ 608.066983][T13379] [ 608.130489][ T5779] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 608.380522][T11263] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 608.406008][T11263] usb 1-1: device descriptor read/8, error -71 [ 608.421500][ T5779] usb 3-1: Using ep0 maxpacket: 32 [ 608.434740][ T5779] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 608.434774][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.434796][ T5779] usb 3-1: Product: syz [ 608.434813][ T5779] usb 3-1: Manufacturer: syz [ 608.434828][ T5779] usb 3-1: SerialNumber: syz [ 608.475476][ T5779] usb 3-1: config 0 descriptor?? [ 608.499044][T11028] usb 5-1: USB disconnect, device number 15 [ 608.511455][T11263] usb usb1-port1: unable to enumerate USB device [ 608.632535][T13383] FAULT_INJECTION: forcing a failure. [ 608.632535][T13383] name failslab, interval 1, probability 0, space 0, times 0 [ 608.632575][T13383] CPU: 1 UID: 0 PID: 13383 Comm: syz.4.2708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 608.632616][T13383] Tainted: [L]=SOFTLOCKUP [ 608.632626][T13383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.632640][T13383] Call Trace: [ 608.632650][T13383] [ 608.632660][T13383] dump_stack_lvl+0xe8/0x150 [ 608.632695][T13383] should_fail_ex+0x46b/0x600 [ 608.632731][T13383] should_failslab+0xa8/0x100 [ 608.632760][T13383] kmem_cache_alloc_noprof+0x87/0x680 [ 608.632778][T13383] ? dst_alloc+0x105/0x170 [ 608.632826][T13383] dst_alloc+0x105/0x170 [ 608.632854][T13383] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 608.632893][T13383] ? ip_route_output_key_hash+0xd8/0x2a0 [ 608.632927][T13383] ip_route_output_key_hash+0x18d/0x2a0 [ 608.632946][T13383] ? ns_capable+0x89/0xe0 [ 608.632990][T13383] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 608.633037][T13383] ip_route_output_flow+0x2a/0x150 [ 608.633063][T13383] ? security_sk_classify_flow+0x6d/0x150 [ 608.633097][T13383] udp_sendmsg+0x141a/0x21a0 [ 608.633136][T13383] ? __pfx_udp_sendmsg+0x10/0x10 [ 608.633217][T13383] ? __lock_acquire+0x6b5/0x2d10 [ 608.633251][T13383] ? __lock_acquire+0x6b5/0x2d10 [ 608.633288][T13383] udpv6_sendmsg+0x996/0x25c0 [ 608.633317][T13383] ? __lock_acquire+0x6b5/0x2d10 [ 608.633360][T13383] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 608.633398][T13383] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 608.633430][T13383] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 608.633474][T13383] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 608.633522][T13383] ? inet_send_prepare+0x1b9/0x270 [ 608.633555][T13383] ? inet6_sendmsg+0xe4/0x120 [ 608.633581][T13383] ? __pfx_inet6_sendmsg+0x10/0x10 [ 608.633603][T13383] sock_sendmsg_nosec+0x90/0x150 [ 608.633635][T13383] ____sys_sendmsg+0x55c/0x870 [ 608.633665][T13383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.633720][T13383] ? import_iovec+0x73/0xa0 [ 608.633750][T13383] ___sys_sendmsg+0x2a5/0x360 [ 608.633780][T13383] ? __lock_acquire+0x6b5/0x2d10 [ 608.633815][T13383] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.633884][T13383] ? __fget_files+0x2a/0x420 [ 608.633907][T13383] ? __fget_files+0x3a6/0x420 [ 608.633941][T13383] __x64_sys_sendmsg+0x1c3/0x2a0 [ 608.633976][T13383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.634016][T13383] ? __pfx_ksys_write+0x10/0x10 [ 608.634062][T13383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.634089][T13383] do_syscall_64+0x15f/0x560 [ 608.634120][T13383] ? trace_irq_disable+0x3b/0x140 [ 608.634150][T13383] ? clear_bhb_loop+0x40/0x90 [ 608.634179][T13383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.634195][T13383] RIP: 0033:0x7f577814ce59 [ 608.634228][T13383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.634250][T13383] RSP: 002b:00007f577639e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.634276][T13383] RAX: ffffffffffffffda RBX: 00007f57783c5fa0 RCX: 00007f577814ce59 [ 608.634293][T13383] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 608.634306][T13383] RBP: 00007f577639e090 R08: 0000000000000000 R09: 0000000000000000 [ 608.634319][T13383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.634333][T13383] R13: 00007f57783c6038 R14: 00007f57783c5fa0 R15: 00007ffef5fcfbc8 [ 608.634363][T13383] [ 608.747795][ T5717] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 608.898223][ T5779] airspy 3-1:0.0: Board ID: 00 [ 608.898245][ T5779] airspy 3-1:0.0: Firmware version: [ 608.911671][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 608.917448][ T5717] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.917495][ T5717] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.917531][ T5717] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.917630][ T5717] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.917677][ T5717] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.917745][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.158911][ T5717] usb 4-1: GET_CAPABILITIES returned 0 [ 609.158966][ T5717] usbtmc 4-1:16.0: can't read capabilities [ 609.310581][T13376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.313400][T13376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.560562][ T5779] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 609.599889][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.599976][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.685678][ T5779] airspy 3-1:0.0: Registered as swradio24 [ 609.685713][ T5779] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 609.710516][ T5779] usb 3-1: USB disconnect, device number 118 [ 609.912862][ T822] usb 4-1: USB disconnect, device number 94 [ 609.916540][T13394] FAULT_INJECTION: forcing a failure. [ 609.916540][T13394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.916649][T13394] CPU: 1 UID: 0 PID: 13394 Comm: syz.0.2711 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.916681][T13394] Tainted: [L]=SOFTLOCKUP [ 609.916692][T13394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.916706][T13394] Call Trace: [ 609.916715][T13394] [ 609.916726][T13394] dump_stack_lvl+0xe8/0x150 [ 609.916761][T13394] should_fail_ex+0x46b/0x600 [ 609.916810][T13394] _copy_from_user+0x2d/0xb0 [ 609.916836][T13394] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 609.916863][T13394] ? __lock_acquire+0x6b5/0x2d10 [ 609.916898][T13394] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 609.916953][T13394] ? __task_pid_nr_ns+0x28/0x470 [ 609.916989][T13394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.917015][T13394] do_syscall_64+0x15f/0x560 [ 609.917048][T13394] ? clear_bhb_loop+0x40/0x90 [ 609.917076][T13394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.917098][T13394] RIP: 0033:0x7faae28ae1d9 [ 609.917119][T13394] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 609.917140][T13394] RSP: 002b:00007faae0b65a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 609.917166][T13394] RAX: ffffffffffffffda RBX: 00007faae2b85fa0 RCX: 00007faae28ae1d9 [ 609.917191][T13394] RDX: 00007faae0b65a80 RSI: 00007faae0b65bb0 RDI: 0000000000000021 [ 609.917207][T13394] RBP: 00007faae0b66090 R08: 0000000000000000 R09: 0000000000000000 [ 609.917221][T13394] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 609.917234][T13394] R13: 00007faae2b86038 R14: 00007faae2b85fa0 R15: 00007ffcd06284d8 [ 609.917268][T13394] [ 610.261352][T13396] FAULT_INJECTION: forcing a failure. [ 610.261352][T13396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.261396][T13396] CPU: 0 UID: 0 PID: 13396 Comm: syz.0.2712 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.261428][T13396] Tainted: [L]=SOFTLOCKUP [ 610.261437][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.261451][T13396] Call Trace: [ 610.261460][T13396] [ 610.261470][T13396] dump_stack_lvl+0xe8/0x150 [ 610.261507][T13396] should_fail_ex+0x46b/0x600 [ 610.261546][T13396] _copy_to_user+0x31/0xb0 [ 610.261574][T13396] simple_read_from_buffer+0xe1/0x170 [ 610.261618][T13396] proc_fail_nth_read+0x1be/0x230 [ 610.261649][T13396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.261677][T13396] ? rw_verify_area+0x2ac/0x4e0 [ 610.261705][T13396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.261733][T13396] vfs_read+0x212/0xa80 [ 610.261769][T13396] ? __pfx_vfs_read+0x10/0x10 [ 610.261799][T13396] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 610.261831][T13396] ? lockdep_hardirqs_on+0x7a/0x110 [ 610.261865][T13396] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 610.261898][T13396] ? mutex_lock_nested+0x152/0x1d0 [ 610.261922][T13396] ? fdget_pos+0x252/0x320 [ 610.261956][T13396] ksys_read+0x156/0x270 [ 610.261985][T13396] ? __pfx_ksys_read+0x10/0x10 [ 610.262022][T13396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.262048][T13396] do_syscall_64+0x15f/0x560 [ 610.262081][T13396] ? trace_irq_disable+0x3b/0x140 [ 610.262107][T13396] ? clear_bhb_loop+0x40/0x90 [ 610.262136][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.262168][T13396] RIP: 0033:0x7faae28cd68e [ 610.262190][T13396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 610.262211][T13396] RSP: 002b:00007faae0b65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 610.262235][T13396] RAX: ffffffffffffffda RBX: 00007faae0b666c0 RCX: 00007faae28cd68e [ 610.262253][T13396] RDX: 000000000000000f RSI: 00007faae0b660a0 RDI: 0000000000000005 [ 610.262267][T13396] RBP: 00007faae0b66090 R08: 0000000000000000 R09: 0000000000000000 [ 610.262282][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.262296][T13396] R13: 00007faae2b86038 R14: 00007faae2b85fa0 R15: 00007ffcd06284d8 [ 610.262333][T13396] [ 610.665377][T13401] FAULT_INJECTION: forcing a failure. [ 610.665377][T13401] name failslab, interval 1, probability 0, space 0, times 0 [ 610.665419][T13401] CPU: 1 UID: 0 PID: 13401 Comm: syz.2.2714 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.665450][T13401] Tainted: [L]=SOFTLOCKUP [ 610.665458][T13401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.665473][T13401] Call Trace: [ 610.665483][T13401] [ 610.665493][T13401] dump_stack_lvl+0xe8/0x150 [ 610.665527][T13401] should_fail_ex+0x46b/0x600 [ 610.665566][T13401] should_failslab+0xa8/0x100 [ 610.665596][T13401] __kmalloc_noprof+0xdf/0x7b0 [ 610.665623][T13401] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 610.665660][T13401] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 610.665697][T13401] genl_family_rcv_msg_doit+0xd9/0x330 [ 610.665732][T13401] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 610.665769][T13401] ? apparmor_capable+0x126/0x170 [ 610.665806][T13401] ? bpf_lsm_capable+0x9/0x20 [ 610.665838][T13401] ? security_capable+0x7e/0x2c0 [ 610.665880][T13401] genl_rcv_msg+0x61c/0x7a0 [ 610.665914][T13401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.665952][T13401] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 610.666092][T13401] netlink_rcv_skb+0x232/0x4b0 [ 610.666127][T13401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.666155][T13401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.666219][T13401] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.666252][T13401] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.666291][T13401] genl_rcv+0x28/0x40 [ 610.666315][T13401] netlink_unicast+0x780/0x920 [ 610.666358][T13401] netlink_sendmsg+0x813/0xb40 [ 610.666402][T13401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.666438][T13401] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 610.666471][T13401] ? aa_sock_msg_perm+0x122/0x200 [ 610.666494][T13401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.666530][T13401] sock_sendmsg_nosec+0x112/0x150 [ 610.666559][T13401] ____sys_sendmsg+0x55c/0x870 [ 610.666600][T13401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.666643][T13401] ? import_iovec+0x73/0xa0 [ 610.666672][T13401] ___sys_sendmsg+0x2a5/0x360 [ 610.666705][T13401] ? __lock_acquire+0x6b5/0x2d10 [ 610.666738][T13401] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.666811][T13401] ? __fget_files+0x2a/0x420 [ 610.666834][T13401] ? __fget_files+0x3a6/0x420 [ 610.666868][T13401] __x64_sys_sendmsg+0x1c3/0x2a0 [ 610.666905][T13401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.666951][T13401] ? __pfx_ksys_write+0x10/0x10 [ 610.666988][T13401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.667014][T13401] do_syscall_64+0x15f/0x560 [ 610.667053][T13401] ? trace_irq_disable+0x3b/0x140 [ 610.667078][T13401] ? clear_bhb_loop+0x40/0x90 [ 610.667107][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.667131][T13401] RIP: 0033:0x7f9db4d0ce59 [ 610.667152][T13401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.667171][T13401] RSP: 002b:00007f9db2f5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.667195][T13401] RAX: ffffffffffffffda RBX: 00007f9db4f85fa0 RCX: 00007f9db4d0ce59 [ 610.667212][T13401] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 610.667227][T13401] RBP: 00007f9db2f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 610.667241][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.667254][T13401] R13: 00007f9db4f86038 R14: 00007f9db4f85fa0 R15: 00007ffea6bb2318 [ 610.667290][T13401] [ 611.268776][T13409] FAULT_INJECTION: forcing a failure. [ 611.268776][T13409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.268816][T13409] CPU: 1 UID: 0 PID: 13409 Comm: syz.3.2716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 611.268848][T13409] Tainted: [L]=SOFTLOCKUP [ 611.268857][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.268872][T13409] Call Trace: [ 611.268881][T13409] [ 611.268891][T13409] dump_stack_lvl+0xe8/0x150 [ 611.268923][T13409] should_fail_ex+0x46b/0x600 [ 611.268961][T13409] _copy_from_user+0x2d/0xb0 [ 611.268988][T13409] __copy_msghdr+0x3c5/0x5b0 [ 611.269027][T13409] ___sys_sendmsg+0x213/0x360 [ 611.269059][T13409] ? __lock_acquire+0x6b5/0x2d10 [ 611.269092][T13409] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.269124][T13409] ? __lock_acquire+0x6b5/0x2d10 [ 611.269160][T13409] ? kstrtouint+0x6e/0xe0 [ 611.269229][T13409] __sys_sendmmsg+0x282/0x4e0 [ 611.269268][T13409] ? __pfx___sys_sendmmsg+0x10/0x10 [ 611.269312][T13409] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 611.269353][T13409] ? ksys_write+0x248/0x270 [ 611.269384][T13409] ? __pfx_ksys_write+0x10/0x10 [ 611.269419][T13409] __x64_sys_sendmmsg+0xa0/0xc0 [ 611.269452][T13409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.269478][T13409] do_syscall_64+0x15f/0x560 [ 611.269510][T13409] ? trace_irq_disable+0x3b/0x140 [ 611.269535][T13409] ? clear_bhb_loop+0x40/0x90 [ 611.269565][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.269597][T13409] RIP: 0033:0x7fbe13c2ce59 [ 611.269618][T13409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.269639][T13409] RSP: 002b:00007fbe11e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 611.269664][T13409] RAX: ffffffffffffffda RBX: 00007fbe13ea5fa0 RCX: 00007fbe13c2ce59 [ 611.269680][T13409] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000005 [ 611.269694][T13409] RBP: 00007fbe11e86090 R08: 0000000000000000 R09: 0000000000000000 [ 611.269708][T13409] R10: 0000000020004040 R11: 0000000000000246 R12: 0000000000000001 [ 611.269722][T13409] R13: 00007fbe13ea6038 R14: 00007fbe13ea5fa0 R15: 00007ffd66f24528 [ 611.269756][T13409] [ 611.500498][T11263] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 611.617507][T13416] FAULT_INJECTION: forcing a failure. [ 611.617507][T13416] name failslab, interval 1, probability 0, space 0, times 0 [ 611.617548][T13416] CPU: 0 UID: 0 PID: 13416 Comm: syz.3.2719 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 611.617579][T13416] Tainted: [L]=SOFTLOCKUP [ 611.617588][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.617602][T13416] Call Trace: [ 611.617611][T13416] [ 611.617621][T13416] dump_stack_lvl+0xe8/0x150 [ 611.617653][T13416] should_fail_ex+0x46b/0x600 [ 611.617691][T13416] should_failslab+0xa8/0x100 [ 611.617722][T13416] __kmalloc_cache_noprof+0x84/0x690 [ 611.617762][T13416] ? __inet_diag_dump_start+0x8b/0xbf0 [ 611.617802][T13416] __inet_diag_dump_start+0x8b/0xbf0 [ 611.617836][T13416] ? lockdep_hardirqs_on+0x7a/0x110 [ 611.617867][T13416] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 611.617907][T13416] __netlink_dump_start+0x469/0x7e0 [ 611.617947][T13416] inet_diag_handler_cmd+0x1e0/0x2c0 [ 611.617996][T13416] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 611.618028][T13416] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 611.618060][T13416] ? __pfx_inet_diag_dump+0x10/0x10 [ 611.618091][T13416] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 611.618126][T13416] ? sock_diag_lock_handler+0x19/0x290 [ 611.618171][T13416] ? sock_diag_lock_handler+0x19/0x290 [ 611.618204][T13416] sock_diag_rcv_msg+0x4cc/0x600 [ 611.618238][T13416] netlink_rcv_skb+0x232/0x4b0 [ 611.618271][T13416] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 611.618301][T13416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.618349][T13416] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.618382][T13416] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.618422][T13416] netlink_unicast+0x780/0x920 [ 611.618462][T13416] netlink_sendmsg+0x813/0xb40 [ 611.618507][T13416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.618545][T13416] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 611.618576][T13416] ? aa_sock_msg_perm+0x122/0x200 [ 611.618600][T13416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.618634][T13416] sock_sendmsg_nosec+0x112/0x150 [ 611.618662][T13416] sock_write_iter+0x308/0x410 [ 611.618688][T13416] ? __pfx_sock_write_iter+0x10/0x10 [ 611.618736][T13416] do_iter_readv_writev+0x62b/0x8d0 [ 611.618769][T13416] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 611.618810][T13416] ? rw_verify_area+0x25b/0x4e0 [ 611.618841][T13416] vfs_writev+0x345/0x9a0 [ 611.618885][T13416] ? __pfx_vfs_writev+0x10/0x10 [ 611.618933][T13416] ? __fget_files+0x2a/0x420 [ 611.618967][T13416] ? __fget_files+0x3a6/0x420 [ 611.618989][T13416] ? __fget_files+0x2a/0x420 [ 611.619021][T13416] do_writev+0x15a/0x2e0 [ 611.619058][T13416] ? __pfx_do_writev+0x10/0x10 [ 611.619101][T13416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.619127][T13416] do_syscall_64+0x15f/0x560 [ 611.619158][T13416] ? trace_irq_disable+0x3b/0x140 [ 611.619184][T13416] ? clear_bhb_loop+0x40/0x90 [ 611.619223][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.619245][T13416] RIP: 0033:0x7fbe13c2ce59 [ 611.619266][T13416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.619302][T13416] RSP: 002b:00007fbe11e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 611.619328][T13416] RAX: ffffffffffffffda RBX: 00007fbe13ea5fa0 RCX: 00007fbe13c2ce59 [ 611.619345][T13416] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003 [ 611.619358][T13416] RBP: 00007fbe11e86090 R08: 0000000000000000 R09: 0000000000000000 [ 611.619372][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.619385][T13416] R13: 00007fbe13ea6038 R14: 00007fbe13ea5fa0 R15: 00007ffd66f24528 [ 611.619420][T13416] [ 611.667891][T11263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.667928][T11263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.668009][T11263] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 611.668035][T11263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.005482][T11263] usb 3-1: config 0 descriptor?? [ 612.280601][ T822] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 612.349634][T13424] FAULT_INJECTION: forcing a failure. [ 612.349634][T13424] name failslab, interval 1, probability 0, space 0, times 0 [ 612.349707][T13424] CPU: 0 UID: 0 PID: 13424 Comm: syz.3.2722 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.349731][T13424] Tainted: [L]=SOFTLOCKUP [ 612.349738][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.349749][T13424] Call Trace: [ 612.349755][T13424] [ 612.349762][T13424] dump_stack_lvl+0xe8/0x150 [ 612.349788][T13424] should_fail_ex+0x46b/0x600 [ 612.349819][T13424] should_failslab+0xa8/0x100 [ 612.349841][T13424] __kmalloc_noprof+0xdf/0x7b0 [ 612.349859][T13424] ? drm_atomic_commit_init+0xa1/0x3b0 [ 612.349977][T13424] drm_atomic_commit_init+0xa1/0x3b0 [ 612.350000][T13424] drm_atomic_commit_alloc+0xbc/0x100 [ 612.350022][T13424] drm_atomic_helper_disable_plane+0x41/0x200 [ 612.350075][T13424] drm_mode_cursor_common+0xe2d/0x1660 [ 612.350130][T13424] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 612.350173][T13424] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 612.350198][T13424] ? lockdep_hardirqs_on+0x7a/0x110 [ 612.350221][T13424] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 612.350245][T13424] drm_mode_cursor_ioctl+0xd4/0x130 [ 612.350265][T13424] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 612.350284][T13424] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 612.350309][T13424] ? rt_spin_unlock+0x160/0x200 [ 612.350328][T13424] ? drm_is_current_master+0x1a2/0x210 [ 612.350383][T13424] drm_ioctl_kernel+0x2e2/0x3b0 [ 612.350413][T13424] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 612.350442][T13424] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 612.350476][T13424] drm_ioctl+0x6c0/0xb80 [ 612.350514][T13424] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 612.350547][T13424] ? __pfx_drm_ioctl+0x10/0x10 [ 612.350586][T13424] ? __fget_files+0x2a/0x420 [ 612.350613][T13424] ? bpf_lsm_file_ioctl+0x9/0x20 [ 612.350645][T13424] ? __pfx_drm_ioctl+0x10/0x10 [ 612.350670][T13424] __se_sys_ioctl+0xff/0x170 [ 612.350700][T13424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.350724][T13424] do_syscall_64+0x15f/0x560 [ 612.350754][T13424] ? trace_irq_disable+0x3b/0x140 [ 612.350779][T13424] ? clear_bhb_loop+0x40/0x90 [ 612.350807][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.350828][T13424] RIP: 0033:0x7fbe13c2ce59 [ 612.350850][T13424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.350870][T13424] RSP: 002b:00007fbe11e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.350894][T13424] RAX: ffffffffffffffda RBX: 00007fbe13ea5fa0 RCX: 00007fbe13c2ce59 [ 612.350911][T13424] RDX: 0000200000001880 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 612.350926][T13424] RBP: 00007fbe11e86090 R08: 0000000000000000 R09: 0000000000000000 [ 612.350940][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.350954][T13424] R13: 00007fbe13ea6038 R14: 00007fbe13ea5fa0 R15: 00007ffd66f24528 [ 612.350989][T13424] [ 612.451423][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 612.474202][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.474272][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.474336][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 612.474526][ T822] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 612.474554][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.533081][ T822] usb 5-1: config 0 descriptor?? [ 612.795137][T11263] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 612.795182][T11263] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 612.795214][T11263] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 612.795244][T11263] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 612.795273][T11263] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 612.795300][T11263] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 612.795328][T11263] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 612.859828][T11263] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 612.924541][T11263] cp2112 0003:10C4:EA90.002E: Part Number: 0x00 Device Version: 0x00 [ 613.086210][T13427] hsr0: entered allmulticast mode [ 613.086233][T13427] hsr_slave_0: entered allmulticast mode [ 613.087407][ T822] usbhid 5-1:0.0: can't add hid device: -71 [ 613.087633][ T822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 613.108244][T13427] hsr_slave_1: entered allmulticast mode [ 613.161453][ T822] usb 5-1: USB disconnect, device number 16 [ 613.521153][T11263] cp2112 0003:10C4:EA90.002E: error reading lock byte: -71 [ 613.558326][T11263] usb 3-1: USB disconnect, device number 119 [ 613.786645][T13441] Invalid source name [ 613.786666][T13441] UBIFS error (pid: 13441): cannot open "./file0", error -22 [ 613.797263][T13441] "syz.3.2729" (13441) uses obsolete ecb(arc4) skcipher [ 614.177290][ T5779] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 614.340581][T11263] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 614.341659][ T5779] usb 5-1: device descriptor read/64, error -71 [ 614.502428][T11263] usb 3-1: Using ep0 maxpacket: 8 [ 614.505885][T11263] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 614.505922][T11263] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 614.505950][T11263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 614.505999][T11263] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 614.506025][T11263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.578569][T11263] usb 3-1: config 0 descriptor?? [ 614.630888][ T5779] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 614.750624][T11028] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 614.805051][ T5779] usb 5-1: device descriptor read/64, error -71 [ 614.912368][ T5779] usb usb5-port1: attempt power cycle [ 614.979104][T11028] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 614.979139][T11028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.979162][T11028] usb 1-1: Product: syz [ 614.979179][T11028] usb 1-1: Manufacturer: syz [ 614.979196][T11028] usb 1-1: SerialNumber: syz [ 615.028757][T11028] usb 1-1: config 0 descriptor?? [ 615.176297][T11263] elan 0003:04F3:0755.002F: unknown main item tag 0x0 [ 615.176334][T11263] elan 0003:04F3:0755.002F: unknown main item tag 0x0 [ 615.176362][T11263] elan 0003:04F3:0755.002F: unknown main item tag 0x0 [ 615.176507][T11263] elan 0003:04F3:0755.002F: item fetching failed at offset 39/40 [ 615.179100][T11263] elan 0003:04F3:0755.002F: Hid Parse failed [ 615.179221][T11263] elan 0003:04F3:0755.002F: probe with driver elan failed with error -22 [ 615.302288][ T5779] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 615.321455][ T5779] usb 5-1: device descriptor read/8, error -71 [ 615.421925][ T5717] usb 3-1: USB disconnect, device number 120 [ 615.573174][ T5779] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 615.594918][ T5779] usb 5-1: device descriptor read/8, error -71 [ 615.712323][ T5779] usb usb5-port1: unable to enumerate USB device [ 615.820559][T11263] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 616.073643][T11028] usb 1-1: ATUSB: AT86RF212 version 233 [ 616.274998][T11028] usb 1-1: Firmware version (0.0) predates our first public release. [ 616.275028][T11028] usb 1-1: Please update to version 0.2 or newer [ 616.291630][ T5779] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 616.357444][T11028] usb 1-1: USB disconnect, device number 96 [ 616.463812][ T5779] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 616.463843][ T5779] usb 3-1: config 1 has no interface number 0 [ 616.463985][ T5779] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 616.464016][ T5779] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 616.464045][ T5779] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 616.464140][ T5779] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 616.464161][ T5779] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 120, setting to 64 [ 616.466849][ T5779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.466885][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.466943][ T5779] usb 3-1: Product: syz [ 616.466954][ T5779] usb 3-1: Manufacturer: syz [ 616.466966][ T5779] usb 3-1: SerialNumber: syz [ 616.684336][T13464] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 616.887929][T13464] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 616.888062][T13464] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 617.089130][T13464] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 617.218451][T13473] input: syz1 as /devices/virtual/input/input20 [ 617.230626][ T870] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 617.294187][T13464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2737'. [ 617.410542][ T870] usb 1-1: Using ep0 maxpacket: 16 [ 617.414625][ T870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.414910][ T870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.414936][ T870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.414977][ T870] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 617.415057][ T870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.513823][ T870] usb 1-1: config 0 descriptor?? [ 617.526286][T13464] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 617.526495][T13464] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 617.571332][ T5779] cdc_ncm 3-1:1.1: bind() failure [ 617.773112][T11028] usb 3-1: USB disconnect, device number 121 [ 617.929097][ T870] usbhid 1-1:0.0: can't add hid device: -71 [ 617.930323][ T870] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 617.972032][ T870] usb 1-1: USB disconnect, device number 97 [ 618.753460][T13479] FAULT_INJECTION: forcing a failure. [ 618.753460][T13479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.753501][T13479] CPU: 1 UID: 0 PID: 13479 Comm: syz.2.2741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 618.753554][T13479] Tainted: [L]=SOFTLOCKUP [ 618.753563][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 618.753578][T13479] Call Trace: [ 618.753587][T13479] [ 618.753598][T13479] dump_stack_lvl+0xe8/0x150 [ 618.753633][T13479] should_fail_ex+0x46b/0x600 [ 618.753669][T13479] _copy_from_iter+0x1d3/0x1670 [ 618.753700][T13479] ? kmem_cache_alloc_noprof+0x388/0x680 [ 618.753719][T13479] ? sctp_chunkify+0x5a/0x260 [ 618.753770][T13479] ? __pfx__copy_from_iter+0x10/0x10 [ 618.753806][T13479] ? __asan_memcpy+0x40/0x70 [ 618.753840][T13479] ? sctp_make_datafrag_empty+0x184/0x240 [ 618.753869][T13479] ? skb_put+0x11b/0x210 [ 618.753894][T13479] sctp_user_addto_chunk+0x87/0x240 [ 618.753952][T13479] sctp_datamsg_from_user+0x748/0xef0 [ 618.754026][T13479] ? __genradix_ptr+0x1e1/0x220 [ 618.754053][T13479] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 618.754128][T13479] ? irqentry_exit+0x218/0x760 [ 618.754178][T13479] ? irqentry_exit+0x218/0x760 [ 618.754214][T13479] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 618.754280][T13479] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 618.754330][T13479] sctp_sendmsg+0x173c/0x29b0 [ 618.754379][T13479] ? __pfx_sctp_sendmsg+0x10/0x10 [ 618.754424][T13479] ? aa_sk_perm+0x703/0x950 [ 618.754455][T13479] ? __pfx_aa_sk_perm+0x10/0x10 [ 618.754495][T13479] ? sock_rps_record_flow+0x19/0x350 [ 618.754534][T13479] ? inet_sendmsg+0x2f4/0x370 [ 618.754560][T13479] ? __fget_files+0x2a/0x420 [ 618.754580][T13479] ? aa_sock_msg_perm+0x122/0x200 [ 618.754602][T13479] ? __pfx_inet_sendmsg+0x10/0x10 [ 618.754631][T13479] sock_sendmsg_nosec+0xf9/0x150 [ 618.754668][T13479] __sys_sendto+0x402/0x590 [ 618.754706][T13479] ? __pfx___sys_sendto+0x10/0x10 [ 618.754760][T13479] ? ksys_write+0x248/0x270 [ 618.754788][T13479] ? __pfx_ksys_write+0x10/0x10 [ 618.754830][T13479] __x64_sys_sendto+0xde/0x100 [ 618.754862][T13479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.754887][T13479] do_syscall_64+0x15f/0x560 [ 618.754918][T13479] ? trace_irq_disable+0x3b/0x140 [ 618.754942][T13479] ? clear_bhb_loop+0x40/0x90 [ 618.754969][T13479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.754985][T13479] RIP: 0033:0x7f9db4d0ce59 [ 618.755016][T13479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.755037][T13479] RSP: 002b:00007f9db2f3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 618.755062][T13479] RAX: ffffffffffffffda RBX: 00007f9db4f86090 RCX: 00007f9db4d0ce59 [ 618.755079][T13479] RDX: 0000000000000f4c RSI: 0000200000000000 RDI: 0000000000000003 [ 618.755093][T13479] RBP: 00007f9db2f3d090 R08: 0000000000000000 R09: 0000000000000000 [ 618.755106][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.755119][T13479] R13: 00007f9db4f86128 R14: 00007f9db4f86090 R15: 00007ffea6bb2318 [ 618.755149][T13479] [ 619.356363][T13484] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2743'. [ 619.497441][T13488] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.730621][ T870] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 619.730749][T11263] usb 4-1: device descriptor read/64, error -71 [ 619.893051][ T870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 619.893673][ T870] usb 3-1: not running at top speed; connect to a high speed hub [ 619.894922][ T870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.897547][ T870] usb 3-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 619.897577][ T870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.897598][ T870] usb 3-1: Product: syz [ 619.897617][ T870] usb 3-1: Manufacturer: syz [ 619.897629][ T870] usb 3-1: SerialNumber: syz [ 619.939104][T13496] FAULT_INJECTION: forcing a failure. [ 619.939104][T13496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.939242][T13496] CPU: 1 UID: 0 PID: 13496 Comm: syz.0.2749 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 619.939334][T13496] Tainted: [L]=SOFTLOCKUP [ 619.939356][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.939401][T13496] Call Trace: [ 619.939423][T13496] [ 619.939445][T13496] dump_stack_lvl+0xe8/0x150 [ 619.939537][T13496] should_fail_ex+0x46b/0x600 [ 619.939642][T13496] _copy_to_user+0x31/0xb0 [ 619.939715][T13496] simple_read_from_buffer+0xe1/0x170 [ 619.939828][T13496] proc_fail_nth_read+0x1be/0x230 [ 619.939912][T13496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 619.939986][T13496] ? rw_verify_area+0x2ac/0x4e0 [ 619.940058][T13496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 619.940130][T13496] vfs_read+0x212/0xa80 [ 619.940224][T13496] ? __pfx_vfs_read+0x10/0x10 [ 619.940300][T13496] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.940360][T13496] ? lockdep_hardirqs_on+0x7a/0x110 [ 619.940391][T13496] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 619.940421][T13496] ? mutex_lock_nested+0x152/0x1d0 [ 619.940443][T13496] ? fdget_pos+0x252/0x320 [ 619.940484][T13496] ksys_read+0x156/0x270 [ 619.940569][T13496] ? __pfx_ksys_read+0x10/0x10 [ 619.940663][T13496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.940735][T13496] do_syscall_64+0x15f/0x560 [ 619.940830][T13496] ? trace_irq_disable+0x3b/0x140 [ 619.940919][T13496] ? clear_bhb_loop+0x40/0x90 [ 619.940995][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.941056][T13496] RIP: 0033:0x7faae28cd68e [ 619.941111][T13496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 619.941164][T13496] RSP: 002b:00007faae0b65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 619.941227][T13496] RAX: ffffffffffffffda RBX: 00007faae0b666c0 RCX: 00007faae28cd68e [ 619.941270][T13496] RDX: 000000000000000f RSI: 00007faae0b660a0 RDI: 0000000000000004 [ 619.941311][T13496] RBP: 00007faae0b66090 R08: 0000000000000000 R09: 0000000000000000 [ 619.941346][T13496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.941387][T13496] R13: 00007faae2b86038 R14: 00007faae2b85fa0 R15: 00007ffcd06284d8 [ 619.941516][T13496] [ 620.114135][T11263] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 620.277253][T13490] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 620.373298][T11263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.373414][T11263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.373456][T11263] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 620.373479][T11263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.400592][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 620.437715][T11263] usb 4-1: config 0 descriptor?? [ 620.560613][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 620.568576][ T9] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.584238][ T9] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.584280][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 620.584298][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.648018][T13486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.648663][T13486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.690464][T13486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.691181][T13486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.704432][T11028] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 620.860506][T11028] usb 1-1: Using ep0 maxpacket: 16 [ 620.863846][T11028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.863883][T11028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.863903][T11028] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 620.863964][T11028] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 620.863990][T11028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.886745][T11028] usb 1-1: config 0 descriptor?? [ 620.943043][T11263] usbhid 4-1:0.0: can't add hid device: -71 [ 620.943589][T11263] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 620.982576][T11263] usb 4-1: USB disconnect, device number 96 [ 621.076258][ T9] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 621.323486][T11028] usbhid 1-1:0.0: can't add hid device: -71 [ 621.323600][T11028] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 621.360932][T11028] usb 1-1: USB disconnect, device number 98 [ 621.444609][ T5717] usb 5-1: USB disconnect, device number 21 [ 622.360617][ T5718] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 622.440568][ T5717] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 622.523561][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.523802][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.523833][ T5718] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 622.523851][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.582762][ T5718] usb 1-1: config 0 descriptor?? [ 622.593335][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.593373][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.593416][ T5717] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 622.593502][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.649355][ T5717] usb 5-1: config 0 descriptor?? [ 622.738753][ T870] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 622.739011][ T870] usb 3-1: MIDIStreaming interface descriptor not found [ 623.043032][ T5718] hid_parser_main: 3 callbacks suppressed [ 623.043058][ T5718] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 623.043203][ T5718] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 623.100967][ T5718] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0031/input/input21 [ 623.101494][ T5717] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 623.101618][ T5717] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 623.194515][T13512] FAULT_INJECTION: forcing a failure. [ 623.194515][T13512] name failslab, interval 1, probability 0, space 0, times 0 [ 623.194558][T13512] CPU: 1 UID: 0 PID: 13512 Comm: syz.3.2756 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 623.194589][T13512] Tainted: [L]=SOFTLOCKUP [ 623.194598][T13512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.194612][T13512] Call Trace: [ 623.194621][T13512] [ 623.194631][T13512] dump_stack_lvl+0xe8/0x150 [ 623.194666][T13512] should_fail_ex+0x46b/0x600 [ 623.194714][T13512] should_failslab+0xa8/0x100 [ 623.194744][T13512] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 623.194771][T13512] ? __alloc_skb+0x1d0/0x7d0 [ 623.194799][T13512] ? lockdep_hardirqs_on+0x7a/0x110 [ 623.194838][T13512] __alloc_skb+0x1d0/0x7d0 [ 623.194874][T13512] alloc_skb_with_frags+0xc8/0x760 [ 623.194908][T13512] ? rcu_is_watching+0x15/0xb0 [ 623.194940][T13512] ? trace_hrtimer_start+0x82/0x200 [ 623.195053][T13512] tcp_send_rcvq+0x14b/0x520 [ 623.195086][T13512] ? __pfx_tcp_send_rcvq+0x10/0x10 [ 623.195126][T13512] tcp_sendmsg_locked+0x4c00/0x5370 [ 623.195159][T13512] ? finish_task_switch+0x41f/0xbe0 [ 623.195238][T13512] ? rcu_is_watching+0x15/0xb0 [ 623.195267][T13512] ? tcp_sendmsg_locked+0x2a1/0x5370 [ 623.195297][T13512] ? trace_sched_exit_tp+0x3a/0x130 [ 623.195329][T13512] ? __schedule+0x170f/0x5500 [ 623.195378][T13512] ? __lock_acquire+0x6b5/0x2d10 [ 623.195409][T13512] ? __lock_acquire+0x6b5/0x2d10 [ 623.195450][T13512] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 623.195487][T13512] ? do_raw_spin_lock+0x12b/0x2f0 [ 623.195509][T13512] ? lock_acquire+0x106/0x350 [ 623.195540][T13512] ? __asan_memset+0x22/0x50 [ 623.195575][T13512] ? iov_iter_bvec+0xb8/0x180 [ 623.195602][T13512] tls_push_sg+0x278/0x9a0 [ 623.195650][T13512] ? __pfx_tls_push_sg+0x10/0x10 [ 623.195701][T13512] ? work_grab_pending+0x3dd/0x990 [ 623.195757][T13512] tls_tx_records+0x36f/0x5c0 [ 623.195797][T13512] tls_sw_sendmsg+0x211b/0x2430 [ 623.195830][T13512] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 623.195907][T13512] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 623.195936][T13512] ? aa_sk_perm+0x703/0x950 [ 623.195968][T13512] ? __might_fault+0xaf/0x130 [ 623.195999][T13512] ? sock_rps_record_flow+0x19/0x350 [ 623.196031][T13512] ? inet_send_prepare+0x5c/0x270 [ 623.196062][T13512] ? inet6_sendmsg+0x101/0x120 [ 623.196089][T13512] ? __pfx_inet6_sendmsg+0x10/0x10 [ 623.196112][T13512] sock_sendmsg_nosec+0x90/0x150 [ 623.196142][T13512] __sys_sendto+0x402/0x590 [ 623.196180][T13512] ? __pfx___sys_sendto+0x10/0x10 [ 623.196239][T13512] ? exc_page_fault+0x6a/0xc0 [ 623.196274][T13512] ? do_user_addr_fault+0xc6f/0x1340 [ 623.196345][T13512] __x64_sys_sendto+0xde/0x100 [ 623.196377][T13512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.196403][T13512] do_syscall_64+0x15f/0x560 [ 623.196435][T13512] ? trace_irq_disable+0x3b/0x140 [ 623.196461][T13512] ? clear_bhb_loop+0x40/0x90 [ 623.196491][T13512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.196515][T13512] RIP: 0033:0x7fbe13bed68e [ 623.196536][T13512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.196556][T13512] RSP: 002b:00007fbe11e84e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 623.196580][T13512] RAX: ffffffffffffffda RBX: 00007fbe11e866c0 RCX: 00007fbe13bed68e [ 623.196597][T13512] RDX: 000000000000001c RSI: 00007fbe11e85000 RDI: 0000000000000003 [ 623.196611][T13512] RBP: 0000000000000000 R08: 00007fbe11e84f04 R09: 000000000000000c [ 623.196625][T13512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 623.196639][T13512] R13: 00007fbe11e84f58 R14: 00007fbe11e85000 R15: 0000000000000000 [ 623.196673][T13512] [ 623.349169][ T5718] cm6533_jd 0003:0D8C:0022.0031: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 623.358765][T13515] FAULT_INJECTION: forcing a failure. [ 623.358765][T13515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.358861][T13515] CPU: 1 UID: 0 PID: 13515 Comm: syz.4.2754 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 623.358930][T13515] Tainted: [L]=SOFTLOCKUP [ 623.358949][T13515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.358967][T13515] Call Trace: [ 623.358987][T13515] [ 623.359020][T13515] dump_stack_lvl+0xe8/0x150 [ 623.359141][T13515] should_fail_ex+0x46b/0x600 [ 623.359247][T13515] _copy_from_user+0x2d/0xb0 [ 623.359316][T13515] kstrtouint_from_user+0xd6/0x180 [ 623.359407][T13515] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 623.359530][T13515] proc_fail_nth_write+0x8e/0x210 [ 623.359593][T13515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 623.359678][T13515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 623.359742][T13515] vfs_write+0x2a3/0xba0 [ 623.359843][T13515] ? __pfx_vfs_write+0x10/0x10 [ 623.359908][T13515] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 623.359960][T13515] ? lockdep_hardirqs_on+0x7a/0x110 [ 623.360015][T13515] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 623.360082][T13515] ? mutex_lock_nested+0x152/0x1d0 [ 623.360136][T13515] ? fdget_pos+0x252/0x320 [ 623.360210][T13515] ksys_write+0x156/0x270 [ 623.360289][T13515] ? __pfx_ksys_write+0x10/0x10 [ 623.360357][T13515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.360422][T13515] do_syscall_64+0x15f/0x560 [ 623.360488][T13515] ? trace_irq_disable+0x3b/0x140 [ 623.360561][T13515] ? clear_bhb_loop+0x40/0x90 [ 623.360642][T13515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.360699][T13515] RIP: 0033:0x7f577810d68e [ 623.360765][T13515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.360813][T13515] RSP: 002b:00007f577637cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 623.360863][T13515] RAX: ffffffffffffffda RBX: 00007f577637d6c0 RCX: 00007f577810d68e [ 623.360902][T13515] RDX: 0000000000000001 RSI: 00007f577637d0a0 RDI: 0000000000000005 [ 623.360940][T13515] RBP: 00007f577637d090 R08: 0000000000000000 R09: 0000000000000000 [ 623.360977][T13515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.361008][T13515] R13: 00007f57783c6128 R14: 00007f57783c6090 R15: 00007ffef5fcfbc8 [ 623.361094][T13515] [ 623.976356][ T5717] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0032/input/input22 [ 624.039416][ T5718] usb 1-1: USB disconnect, device number 99 [ 624.048157][ T870] usb 3-1: USB disconnect, device number 122 [ 624.219202][T13516] fido_id[13516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 624.266939][ T5717] cm6533_jd 0003:0D8C:0022.0032: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 624.417689][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.417814][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.434559][ T5717] usb 5-1: USB disconnect, device number 22 [ 624.490276][T13521] fido_id[13521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 624.624328][T13523] FAULT_INJECTION: forcing a failure. [ 624.624328][T13523] name failslab, interval 1, probability 0, space 0, times 0 [ 624.624356][T13523] CPU: 1 UID: 0 PID: 13523 Comm: syz.0.2759 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 624.624379][T13523] Tainted: [L]=SOFTLOCKUP [ 624.624385][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.624395][T13523] Call Trace: [ 624.624401][T13523] [ 624.624408][T13523] dump_stack_lvl+0xe8/0x150 [ 624.624430][T13523] should_fail_ex+0x46b/0x600 [ 624.624467][T13523] should_failslab+0xa8/0x100 [ 624.624486][T13523] kmem_cache_alloc_noprof+0x87/0x680 [ 624.624502][T13523] ? skb_clone+0x212/0x3a0 [ 624.624527][T13523] skb_clone+0x212/0x3a0 [ 624.624551][T13523] __netlink_deliver_tap+0x424/0x8b0 [ 624.624580][T13523] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.624610][T13523] netlink_deliver_tap+0x19c/0x1b0 [ 624.624633][T13523] netlink_unicast+0x754/0x920 [ 624.624659][T13523] netlink_sendmsg+0x813/0xb40 [ 624.624686][T13523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.624710][T13523] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 624.624730][T13523] ? aa_sock_msg_perm+0x122/0x200 [ 624.624745][T13523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.624766][T13523] sock_sendmsg_nosec+0x112/0x150 [ 624.624783][T13523] ____sys_sendmsg+0x55c/0x870 [ 624.624809][T13523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.624836][T13523] ? import_iovec+0x73/0xa0 [ 624.624854][T13523] ___sys_sendmsg+0x2a5/0x360 [ 624.624874][T13523] ? __lock_acquire+0x6b5/0x2d10 [ 624.624895][T13523] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.624939][T13523] ? __fget_files+0x2a/0x420 [ 624.624953][T13523] ? __fget_files+0x3a6/0x420 [ 624.624974][T13523] __x64_sys_sendmsg+0x1c3/0x2a0 [ 624.624997][T13523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.625043][T13523] ? __pfx_ksys_write+0x10/0x10 [ 624.625103][T13523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.625130][T13523] do_syscall_64+0x15f/0x560 [ 624.625154][T13523] ? clear_bhb_loop+0x40/0x90 [ 624.625173][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.625190][T13523] RIP: 0033:0x7faae290ce59 [ 624.625204][T13523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.625219][T13523] RSP: 002b:00007faae0b66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.625235][T13523] RAX: ffffffffffffffda RBX: 00007faae2b85fa0 RCX: 00007faae290ce59 [ 624.625248][T13523] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000005 [ 624.625258][T13523] RBP: 00007faae0b66090 R08: 0000000000000000 R09: 0000000000000000 [ 624.625268][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.625278][T13523] R13: 00007faae2b86038 R14: 00007faae2b85fa0 R15: 00007ffcd06284d8 [ 624.625302][T13523] [ 625.030610][ T870] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 625.098165][T13525] FAULT_INJECTION: forcing a failure. [ 625.098165][T13525] name failslab, interval 1, probability 0, space 0, times 0 [ 625.098206][T13525] CPU: 1 UID: 0 PID: 13525 Comm: syz.3.2761 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 625.098237][T13525] Tainted: [L]=SOFTLOCKUP [ 625.098247][T13525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.098260][T13525] Call Trace: [ 625.098270][T13525] [ 625.098280][T13525] dump_stack_lvl+0xe8/0x150 [ 625.098312][T13525] should_fail_ex+0x46b/0x600 [ 625.098354][T13525] should_failslab+0xa8/0x100 [ 625.098384][T13525] kmem_cache_alloc_noprof+0x87/0x680 [ 625.098422][T13525] ? skb_clone+0x212/0x3a0 [ 625.098458][T13525] skb_clone+0x212/0x3a0 [ 625.098495][T13525] __netlink_deliver_tap+0x424/0x8b0 [ 625.098570][T13525] ? netlink_deliver_tap+0x2e/0x1b0 [ 625.098606][T13525] netlink_deliver_tap+0x19c/0x1b0 [ 625.098640][T13525] netlink_unicast+0x754/0x920 [ 625.098683][T13525] netlink_sendmsg+0x813/0xb40 [ 625.098726][T13525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.098761][T13525] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 625.098793][T13525] ? aa_sock_msg_perm+0x122/0x200 [ 625.098828][T13525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.098860][T13525] sock_sendmsg_nosec+0x112/0x150 [ 625.098888][T13525] ____sys_sendmsg+0x55c/0x870 [ 625.098927][T13525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.098970][T13525] ? import_iovec+0x73/0xa0 [ 625.098998][T13525] ___sys_sendmsg+0x2a5/0x360 [ 625.099030][T13525] ? __lock_acquire+0x6b5/0x2d10 [ 625.099063][T13525] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.099131][T13525] ? __fget_files+0x2a/0x420 [ 625.099152][T13525] ? __fget_files+0x3a6/0x420 [ 625.099203][T13525] __x64_sys_sendmsg+0x1c3/0x2a0 [ 625.099240][T13525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.099283][T13525] ? __pfx_ksys_write+0x10/0x10 [ 625.099319][T13525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.099344][T13525] do_syscall_64+0x15f/0x560 [ 625.099375][T13525] ? trace_irq_disable+0x3b/0x140 [ 625.099400][T13525] ? clear_bhb_loop+0x40/0x90 [ 625.099430][T13525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.099455][T13525] RIP: 0033:0x7fbe13c2ce59 [ 625.099477][T13525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.099497][T13525] RSP: 002b:00007fbe11e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.099523][T13525] RAX: ffffffffffffffda RBX: 00007fbe13ea5fa0 RCX: 00007fbe13c2ce59 [ 625.099541][T13525] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 625.099555][T13525] RBP: 00007fbe11e86090 R08: 0000000000000000 R09: 0000000000000000 [ 625.099577][T13525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.099590][T13525] R13: 00007fbe13ea6038 R14: 00007fbe13ea5fa0 R15: 00007ffd66f24528 [ 625.099626][T13525] [ 625.283575][ T870] usb 3-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 625.283637][ T870] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.283683][ T870] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 625.283708][ T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.404267][T13528] FAULT_INJECTION: forcing a failure. [ 625.404267][T13528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.404384][T13528] CPU: 1 UID: 0 PID: 13528 Comm: syz.0.2760 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 625.404463][T13528] Tainted: [L]=SOFTLOCKUP [ 625.404493][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.404554][T13528] Call Trace: [ 625.404570][T13528] [ 625.404592][T13528] dump_stack_lvl+0xe8/0x150 [ 625.404683][T13528] should_fail_ex+0x46b/0x600 [ 625.404786][T13528] _copy_from_user+0x2d/0xb0 [ 625.404860][T13528] memdup_user+0x5e/0xd0 [ 625.404951][T13528] autofs_dev_ioctl+0x1f3/0xad0 [ 625.405049][T13528] ? __fget_files+0x2a/0x420 [ 625.405118][T13528] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 625.405198][T13528] ? __fget_files+0x2a/0x420 [ 625.405264][T13528] ? __fget_files+0x2a/0x420 [ 625.405348][T13528] ? bpf_lsm_file_ioctl+0x9/0x20 [ 625.405417][T13528] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 625.405489][T13528] __se_sys_ioctl+0xff/0x170 [ 625.405564][T13528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.405621][T13528] do_syscall_64+0x15f/0x560 [ 625.405709][T13528] ? trace_irq_disable+0x3b/0x140 [ 625.405779][T13528] ? clear_bhb_loop+0x40/0x90 [ 625.405846][T13528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.405907][T13528] RIP: 0033:0x7faae290ce59 [ 625.405977][T13528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.406040][T13528] RSP: 002b:00007faae0b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.406103][T13528] RAX: ffffffffffffffda RBX: 00007faae2b86090 RCX: 00007faae290ce59 [ 625.406147][T13528] RDX: 0000200000000000 RSI: 00000000c018937a RDI: 0000000000000004 [ 625.406188][T13528] RBP: 00007faae0b45090 R08: 0000000000000000 R09: 0000000000000000 [ 625.406228][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.406262][T13528] R13: 00007faae2b86128 R14: 00007faae2b86090 R15: 00007ffcd06284d8 [ 625.406352][T13528] [ 625.755086][ T870] usb 3-1: config 0 descriptor?? [ 625.770208][ T870] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 626.110612][ T5716] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 626.190723][ T5717] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 626.261551][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 626.263938][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 626.265217][ T5716] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 626.265245][ T5716] usb 4-1: config 13 has no interface number 0 [ 626.265291][ T5716] usb 4-1: config 13 interface 50 altsetting 158 bulk endpoint 0x8 has invalid maxpacket 16 [ 626.265320][ T5716] usb 4-1: config 13 interface 50 has no altsetting 0 [ 626.267824][ T5716] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 626.267856][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.267872][ T5716] usb 4-1: Product: syz [ 626.267883][ T5716] usb 4-1: Manufacturer: syz [ 626.267895][ T5716] usb 4-1: SerialNumber: syz [ 626.271219][ T5718] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 626.315598][T13531] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 626.386180][ T5717] usb 5-1: Using ep0 maxpacket: 16 [ 626.399127][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short [ 626.404149][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.404175][ T5717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 626.404267][ T5717] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.404295][ T5717] usb 5-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 626.473195][ T5717] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.473220][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.473357][ T5717] usb 5-1: Product: syz [ 626.473369][ T5717] usb 5-1: Manufacturer: syz [ 626.473380][ T5717] usb 5-1: SerialNumber: syz [ 626.553296][T13534] netlink: 'syz.0.2763': attribute type 3 has an invalid length. [ 626.553320][T13534] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2763'. [ 626.732941][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 626.734797][ T5718] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 626.734836][ T5718] usb 1-1: can't read configurations, error -71 [ 626.839824][ T5716] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.839885][ T5716] usb 4-1: MIDIStreaming interface descriptor not found [ 626.874965][ T5717] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 626.875001][ T5717] cdc_ncm 5-1:1.0: bind() failure [ 626.920286][ T5717] usb 5-1: USB disconnect, device number 23 [ 627.080757][ T5716] usb 4-1: USB disconnect, device number 97 [ 627.294579][ T8189] udevd[8189]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.819598][ T5716] usb 3-1: USB disconnect, device number 123 [ 627.855466][T13548] ceph: No mds server is up or the cluster is laggy [ 627.916427][T13559] [ 627.916462][T13559] ====================================================== [ 627.916471][T13559] WARNING: possible circular locking dependency detected [ 627.916488][T13559] syzkaller #0 Tainted: G L [ 627.916505][T13559] ------------------------------------------------------ [ 627.916512][T13559] syz.0.2768/13559 is trying to acquire lock: [ 627.916524][T13559] ffff8880217ee4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 627.916677][T13559] [ 627.916677][T13559] but task is already holding lock: [ 627.916685][T13559] ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 627.916767][T13559] [ 627.916767][T13559] which lock already depends on the new lock. [ 627.916767][T13559] [ 627.916775][T13559] [ 627.916775][T13559] the existing dependency chain (in reverse order) is: [ 627.916782][T13559] [ 627.916782][T13559] -> #5 (system_transition_mutex){+.+.}-{4:4}: [ 627.916807][T13559] mutex_lock_nested+0x5a/0x1d0 [ 627.916826][T13559] lock_system_sleep+0x49/0x70 [ 627.916853][T13559] resume_store+0x2ff/0x4f0 [ 627.916868][T13559] kernfs_fop_write_iter+0x3b0/0x540 [ 627.916893][T13559] vfs_write+0x629/0xba0 [ 627.916912][T13559] ksys_write+0x156/0x270 [ 627.916931][T13559] do_syscall_64+0x15f/0x560 [ 627.916954][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.916972][T13559] [ 627.916972][T13559] -> #4 (&of->mutex){+.+.}-{4:4}: [ 627.916995][T13559] mutex_lock_nested+0x5a/0x1d0 [ 627.917011][T13559] kernfs_seq_start+0x5c/0x420 [ 627.917035][T13559] seq_read_iter+0x3f8/0xe20 [ 627.917057][T13559] copy_splice_read+0x605/0xab0 [ 627.917073][T13559] splice_direct_to_actor+0x483/0xc80 [ 627.917089][T13559] do_splice_direct+0x19b/0x2a0 [ 627.917105][T13559] do_sendfile+0x547/0x7e0 [ 627.917129][T13559] __se_sys_sendfile64+0x144/0x1a0 [ 627.917152][T13559] do_syscall_64+0x15f/0x560 [ 627.917174][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.917191][T13559] [ 627.917191][T13559] -> #3 (&p->lock){+.+.}-{4:4}: [ 627.917214][T13559] mutex_lock_nested+0x5a/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 627.917230][T13559] seq_read_iter+0xb8/0xe20 [ 627.917251][T13559] lo_rw_aio+0xc80/0xf00 [ 627.917272][T13559] loop_process_work+0x92a/0x11b0 [ 627.917292][T13559] process_one_work+0x98b/0x1630 [ 627.917316][T13559] worker_thread+0xb49/0x1140 [ 627.917341][T13559] kthread+0x388/0x470 [ 627.917359][T13559] ret_from_fork+0x514/0xb70 [ 627.917377][T13559] ret_from_fork_asm+0x1a/0x30 [ 627.917400][T13559] [ 627.917400][T13559] -> #2 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 627.917425][T13559] process_one_work+0x8d7/0x1630 [ 627.917448][T13559] worker_thread+0xb49/0x1140 [ 627.917472][T13559] kthread+0x388/0x470 [ 627.917488][T13559] ret_from_fork+0x514/0xb70 [ 627.917507][T13559] ret_from_fork_asm+0x1a/0x30 [ 627.917528][T13559] [ 627.917528][T13559] -> #1 ((wq_completion)loop2){+.+.}-{0:0}: [ 627.917552][T13559] touch_wq_lockdep_map+0xcb/0x180 [ 627.917568][T13559] __flush_workqueue+0x14b/0x14f0 [ 627.917583][T13559] drain_workqueue+0xd3/0x390 [ 627.917598][T13559] lo_release+0x287/0x8f0 [ 627.917618][T13559] bdev_release+0x541/0x660 [ 627.917641][T13559] blkdev_release+0x15/0x20 [ 627.917665][T13559] __fput+0x461/0xa70 [ 627.917679][T13559] task_work_run+0x1d9/0x270 [ 627.917698][T13559] do_exit+0x70f/0x22c0 [ 627.917715][T13559] do_group_exit+0x21b/0x2d0 [ 627.917734][T13559] get_signal+0x1284/0x1330 [ 627.917757][T13559] arch_do_signal_or_restart+0xbc/0x840 [ 627.917774][T13559] exit_to_user_mode_loop+0x8c/0x4d0 [ 627.917792][T13559] do_syscall_64+0x33e/0x560 [ 627.917815][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.917866][T13559] [ 627.917866][T13559] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 627.917891][T13559] __lock_acquire+0x15a5/0x2d10 [ 627.917911][T13559] lock_acquire+0x106/0x350 [ 627.917930][T13559] mutex_lock_nested+0x5a/0x1d0 [ 627.917947][T13559] bdev_open+0xe0/0xcc0 [ 627.917969][T13559] bdev_file_open_by_dev+0x1be/0x240 [ 627.917993][T13559] swsusp_check+0x56/0x490 [ 627.918012][T13559] software_resume+0x51/0x4c0 [ 627.918038][T13559] resume_store+0x333/0x4f0 [ 627.918052][T13559] kernfs_fop_write_iter+0x3b0/0x540 [ 627.918075][T13559] vfs_write+0x629/0xba0 [ 627.918093][T13559] ksys_write+0x156/0x270 [ 627.918111][T13559] do_syscall_64+0x15f/0x560 [ 627.918134][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.918151][T13559] [ 627.918151][T13559] other info that might help us debug this: [ 627.918151][T13559] [ 627.918157][T13559] Chain exists of: [ 627.918157][T13559] &disk->open_mutex --> &of->mutex --> system_transition_mutex [ 627.918157][T13559] [ 627.918184][T13559] Possible unsafe locking scenario: [ 627.918184][T13559] [ 627.918190][T13559] CPU0 CPU1 [ 627.918196][T13559] ---- ---- [ 627.918202][T13559] lock(system_transition_mutex); [ 627.918214][T13559] lock(&of->mutex); [ 627.918227][T13559] lock(system_transition_mutex); [ 627.918240][T13559] lock(&disk->open_mutex); [ 627.918252][T13559] [ 627.918252][T13559] *** DEADLOCK *** [ 627.918252][T13559] [ 627.918257][T13559] 5 locks held by syz.0.2768/13559: [ 627.918268][T13559] #0: ffff88803baa2528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 627.918309][T13559] #1: ffff88803723e480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 627.918357][T13559] #2: ffff888037bfc478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 627.918404][T13559] #3: ffff88801e6da5a8 (kn->active#62){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 627.918455][T13559] #4: ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 627.918505][T13559] [ 627.918505][T13559] stack backtrace: [ 627.918519][T13559] CPU: 1 UID: 0 PID: 13559 Comm: syz.0.2768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 627.918544][T13559] Tainted: [L]=SOFTLOCKUP [ 627.918551][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 627.918563][T13559] Call Trace: [ 627.918570][T13559] [ 627.918578][T13559] dump_stack_lvl+0xe8/0x150 [ 627.918602][T13559] print_circular_bug+0x2e1/0x300 [ 627.918630][T13559] check_noncircular+0x12e/0x150 [ 627.918658][T13559] __lock_acquire+0x15a5/0x2d10 [ 627.918687][T13559] ? bd_prepare_to_claim+0x417/0x4a0 [ 627.918713][T13559] ? bdev_open+0xe0/0xcc0 [ 627.918735][T13559] lock_acquire+0x106/0x350 [ 627.918755][T13559] ? bdev_open+0xe0/0xcc0 [ 627.918781][T13559] ? bdev_open+0xe0/0xcc0 [ 627.918805][T13559] ? bdev_open+0xe0/0xcc0 [ 627.918827][T13559] mutex_lock_nested+0x5a/0x1d0 [ 627.918850][T13559] ? bdev_open+0xe0/0xcc0 [ 627.918874][T13559] bdev_open+0xe0/0xcc0 [ 627.918901][T13559] bdev_file_open_by_dev+0x1be/0x240 [ 627.918927][T13559] swsusp_check+0x56/0x490 [ 627.918949][T13559] software_resume+0x51/0x4c0 [ 627.918977][T13559] resume_store+0x333/0x4f0 [ 627.918992][T13559] ? sysfs_file_kobj+0x1a/0x230 [ 627.919019][T13559] ? __pfx_resume_store+0x10/0x10 [ 627.919037][T13559] ? sysfs_file_kobj+0x1a/0x230 [ 627.919063][T13559] ? sysfs_file_kobj+0x1e4/0x230 [ 627.919090][T13559] ? sysfs_kf_write+0x166/0x260 [ 627.919107][T13559] ? __pfx_sysfs_kf_write+0x10/0x10 [ 627.919123][T13559] kernfs_fop_write_iter+0x3b0/0x540 [ 627.919151][T13559] vfs_write+0x629/0xba0 [ 627.919174][T13559] ? __pfx_vfs_write+0x10/0x10 [ 627.919195][T13559] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 627.919219][T13559] ? lockdep_hardirqs_on+0x7a/0x110 [ 627.919243][T13559] ? mutex_lock_nested+0x152/0x1d0 [ 627.919272][T13559] ? fdget_pos+0x252/0x320 [ 627.919291][T13559] ksys_write+0x156/0x270 [ 627.919312][T13559] ? __pfx_ksys_write+0x10/0x10 [ 627.919334][T13559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.919354][T13559] do_syscall_64+0x15f/0x560 [ 627.919378][T13559] ? trace_irq_disable+0x3b/0x140 [ 627.919395][T13559] ? clear_bhb_loop+0x40/0x90 [ 627.919415][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.919432][T13559] RIP: 0033:0x7faae290ce59 [ 627.919448][T13559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.919464][T13559] RSP: 002b:00007faae0b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 627.919482][T13559] RAX: ffffffffffffffda RBX: 00007faae2b86180 RCX: 00007faae290ce59 [ 627.919496][T13559] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000007 [ 627.919509][T13559] RBP: 00007faae29a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 627.919520][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.919532][T13559] R13: 00007faae2b86218 R14: 00007faae2b86180 R15: 00007ffcd06284d8 [ 627.919551][T13559] [ 627.970019][T13559] PM: Image not found (code -22) [ 629.733299][T13557] syz_tun (unregistering): left allmulticast mode [ 630.472303][ T152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.691905][ T152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.932018][ T152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.173310][ T152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.530795][ T152] bridge_slave_1: left allmulticast mode [ 631.530825][ T152] bridge_slave_1: left promiscuous mode [ 631.531024][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.691057][ T152] bridge_slave_0: left allmulticast mode [ 631.691091][ T152] bridge_slave_0: left promiscuous mode [ 631.691238][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.331196][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.411541][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.432276][ T152] bond0 (unregistering): Released all slaves [ 632.473799][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 633.033308][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 633.473420][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 633.730548][ T152] hsr_slave_0: left promiscuous mode [ 633.770581][ T152] hsr_slave_1: left promiscuous mode [ 633.771569][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.771585][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.811456][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.811480][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.872113][ T152] veth1_macvtap: left promiscuous mode [ 633.872159][ T152] veth0_macvtap: left promiscuous mode [ 633.872269][ T152] veth1_vlan: left promiscuous mode [ 633.872343][ T152] veth0_vlan: left promiscuous mode [ 634.431351][ T152] team0 (unregistering): Port device team_slave_1 removed [ 634.470978][ T152] team0 (unregistering): Port device team_slave_0 removed [ 634.573458][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 635.982274][ T152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.192184][ T152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.401891][ T152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.611862][ T152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.011781][ T152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.272260][ T152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.313019][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 637.542215][ T152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.613776][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 637.823576][ T152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0