last executing test programs: 9m32.280336307s ago: executing program 0 (id=1258): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) r2 = eventfd(0xffff) r3 = creat(&(0x7f0000000300)='./file0\x00', 0xa) fcntl$setlease(r3, 0x400, 0x1) fcntl$setsig(r3, 0xa, 0x21) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x8000, 0x1, r3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, 0x0, 0x0) write$smackfs_netlabel(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="30303030303030303030303030303030303030382e30303030303030303030303030303030303030392e30303030303030303030303030303030303030322e30303030303030303030303030303030303030362e2f30303030303d3030303030303030303032303438202f6465762f6b766d0000b09fcfd5304d6eadacbcd91442af7ce851fa65523316f4567ab0ee68d865150b8d675a8286630481f7b5adba10d9fc3af6bd8fc0323a4a7a74028ea4bdff32961c2c45bf7e666b7c229069953aa3231df7d59a8f"], 0x74) 9m31.769054182s ago: executing program 0 (id=1260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000000}, &(0x7f0000bbdffc)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) tkill(0x0, 0xb) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9m30.433194392s ago: executing program 0 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000880)="b907ef19edfff007049e0ff0888ec9495dd8", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9m27.769012534s ago: executing program 0 (id=1264): r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ff9, 0x8, '9P2000.u'}, 0x15) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x19, 0x1, "0000e10b0000000026086700"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x18, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x100, 0x4) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES8=r5], 0x0) 9m11.574754332s ago: executing program 32 (id=1271): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ff9, 0x8, '9P2000.u'}, 0x15) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x19, 0x1, "0000e10b0000000026086700"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x18, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x100, 0x4) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES8=r5], 0x0) 7m28.46942478s ago: executing program 1 (id=1690): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000080)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x80}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x1, 0x4, 0xff}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x100, 0x0, 0x4, 0x7}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, '\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83, 0x0, 0x25}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8002, 0xf, 0xef, "db728d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x10, 0x0, {0x7}}}}}}}]}}, 0x0) 7m26.777705107s ago: executing program 1 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4080) 7m26.494039541s ago: executing program 1 (id=1694): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/file0\x00', 0x1000, 0x10000001) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="189eca7b4320cc0c07834e0e6d7c7a54b0ce2afe3a7c44e4c8808ef3667b5e0ab9711dfcbced0608b80cf9856105df027f84f720df1031ef24", @ANYBLOB="000000000000fa00b703000000010000850000000c000000b700000000000000184200000800000000000000000000008520000005000200b7080000000080007a8af8ff00000000b7080000000140007b8af0ff00000000bfa100000000ef6a68220000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000183000000200000000000000000000008500000064000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYRES16], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfcbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x4) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, r7, 0x2, 0x709d25, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004e8c9}, 0x2000) syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r9, 0x1, 0xffffffff, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x40000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0xd71a338c9e357fb2) 7m22.491291952s ago: executing program 1 (id=1703): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002140)={'veth1_to_bond\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES32=0x0], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000190002002dbd7000fcdbdf251d010000818615000200030000c0070015743a0000b7a283161b00005e000000000c000b00020000800000a685754a6e60aec13216edc39e1e8a87733759333d3930e991cf521888fc005da746672b3dce4cdb71158559899435eccf378b34207ae518a00683e2"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r4 = socket(0x28, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000306010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x101, &(0x7f00000001c0)=0x2) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x3, 0x1, 0x3}, 0xfd}, 0x18) 7m22.157466282s ago: executing program 1 (id=1706): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x20}}, 0x0) 7m21.84359161s ago: executing program 1 (id=1707): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket(0x2b, 0x1, 0x1) listen(r3, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x22) 7m4.737188927s ago: executing program 33 (id=1707): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket(0x2b, 0x1, 0x1) listen(r3, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x22) 2m10.674530539s ago: executing program 2 (id=2509): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2m9.856343689s ago: executing program 2 (id=2512): setresuid(0x0, 0xee00, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="010029bd70000000000001"], 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') ppoll(&(0x7f0000000300)=[{r2, 0x63e6}], 0x1, 0x0, 0x0, 0x0) (async) file_setattr(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2, 0x0, 0xfffffff7, 0x200, 0xb9e}, 0x18, 0x100) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m7.987446169s ago: executing program 2 (id=2518): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) (fail_nth: 2) 2m7.056659709s ago: executing program 2 (id=2522): r0 = getpid() get_robust_list(r0, &(0x7f00000009c0)=&(0x7f0000000980)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000940)}, &(0x7f0000000a00)=0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/57, 0x39, 0x72, 0x400, 0x9, 0x4, 0x1}}, 0x120) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001a00)=""/4082, 0xff2}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x6}, 0x5c}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x8020000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x101082, 0x0) capget(&(0x7f0000000400)={0x20071026, r0}, &(0x7f0000000780)={0x100, 0x100, 0x1, 0xffffffff, 0x5, 0x5}) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@loopback, @remote, 0xffffff00, 0xff000000, 'ip6tnl0\x00', '\x00', {0xff}, {0xff}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x10}}}, {{@ip={@empty, @broadcast, 0xff, 0xffffff00, 'team_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x84, 0x2, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x0, 0x3}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x40, 0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x62d2567d, 0x3, 0x1, 0xd1, 0x9, 0x9, 0xaca6, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f00000000c0)="eb34b1b56a", &(0x7f00000001c0)=@buf="e749ee000007000000009d6ff69366b1110f934434eae16a50f31d7850933a9b7ad97fd7920cda8ce40113bfa4f0dd2f2a416b6847ae83c18ead1a02f2f2a86c6e1690f54d74de82227c9b44bf0ed85f9acdec7946", 0x2}, 0x20) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) listen(r3, 0x8) pivot_root(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000840)='./file0\x00') timerfd_create(0x0, 0x800) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r8, &(0x7f00000042c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0xc01a2, 0x0) chroot(&(0x7f0000000880)='./file0\x00') 2m6.375372639s ago: executing program 2 (id=2528): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x2, 0x0, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0x4000000a78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x3, 0x1, 0x7}}, 0xe8) gettid() r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="0001000018000100feffffff0001000020010000000000000000000000000000fc0100000000000000000000000000010001071c4e230005000000003a", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x100}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m3.018758713s ago: executing program 2 (id=2532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000240)=[{0x1, 0x2, {0x0, 0x0, 0x3}, {0x2}, 0xff, 0xfd}], 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000011000300686173683a6e65742c6e65740000000014000780050015001100000008001240"], 0x60}}, 0x0) 1m47.695954613s ago: executing program 34 (id=2532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000240)=[{0x1, 0x2, {0x0, 0x0, 0x3}, {0x2}, 0xff, 0xfd}], 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000011000300686173683a6e65742c6e65740000000014000780050015001100000008001240"], 0x60}}, 0x0) 1m37.32364994s ago: executing program 4 (id=2667): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e9500990000008100", 0x20, 0x24042801, &(0x7f0000000c80)={0x11, 0x8100, r2, 0x1, 0x9, 0x6, @random="2a5ca7702f22"}, 0x14) 1m37.079058186s ago: executing program 4 (id=2670): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xa, 0x84, 0x7fff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0126}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)) 1m36.68226947s ago: executing program 4 (id=2673): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x0, 0x0) 1m36.539477103s ago: executing program 4 (id=2675): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0xc4b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x8, 0x9, 0x2, 0xffffffff, 0x8a, 0x3, 0x5, 0x2, 0x236, 0x7, 0xfffffff5, 0x8, 0x3, 0x6, 0x1, 0x8, 0x0, 0x5, 0x4f1, 0xa, 0x401, 0x1, 0x1, 0xffffffff, 0x2, 0x7, 0x31, 0x7f, 0x1827, 0xa, 0x1, 0x80000001, 0x6, 0x20, 0x2, 0x7, 0x7ff, 0x8, 0x80000005, 0x40, 0xc4f, 0x8, 0x1, 0x8, 0x80, 0x79, 0x3, 0xffff, 0x1, 0x400, 0x2, 0x1, 0x1, 0x3, 0x2ca, 0x80000000, 0xc0, 0x9, 0x2, 0x7f, 0x1, 0xffff, 0x3, 0xb2, 0xff, 0x4, 0x3, 0x800, 0xd, 0xfff, 0xaee, 0x4, 0x80000000, 0x5, 0x1, 0xffffffff, 0xffffffff, 0x7, 0x1, 0x2, 0x0, 0x9, 0x80000000, 0x7, 0x0, 0x0, 0x4, 0x3ff, 0xa, 0x6, 0x5, 0x3, 0x80, 0x9, 0x9, 0x10001, 0x0, 0x2aa, 0xfffffffe, 0x384d, 0x6, 0x7, 0x20000, 0x4, 0x101, 0x7, 0x5, 0x4, 0x1, 0x0, 0x4, 0x27, 0x1e, 0x4, 0xb, 0x0, 0x0, 0x10001, 0x8, 0x2, 0x75, 0x6e49, 0x7, 0x0, 0x2, 0x1, 0xb, 0xabf, 0x9e, 0x4, 0xfffffffe, 0x1ff, 0x10000, 0x6, 0x5, 0x2, 0x0, 0x400, 0x1, 0x8, 0x9, 0x7, 0x5, 0x5, 0x3, 0x5, 0x5, 0x5, 0x5, 0x80000001, 0x2, 0x39e, 0x7, 0xf8, 0x32, 0x9, 0x9, 0x3, 0xc, 0xfffffff7, 0x2, 0x4, 0x91, 0x100, 0x0, 0x0, 0x1, 0x4, 0x4, 0x925, 0x6, 0x1000, 0xc, 0x200, 0x100, 0x7ff, 0x1, 0x80, 0x3, 0x6, 0x6e1650a9, 0xb, 0x401, 0xff, 0xffff, 0x5, 0x5, 0x5, 0x3, 0x6, 0xffffffff, 0x1, 0x9, 0x8, 0xb78c, 0xa, 0x7ff, 0x1, 0x4, 0x9, 0x24e, 0x6c34, 0x6, 0x9, 0x7, 0x5fce, 0x9b, 0x7, 0x7, 0x9, 0x14c, 0x9, 0x0, 0x10000, 0xc59, 0xe, 0x3ff, 0x82e7, 0x7fffffff, 0x1, 0x6, 0x80000001, 0x8, 0x0, 0x6, 0x4, 0x6, 0x2, 0x7fff, 0x5, 0x9, 0x86ca, 0x10, 0x5, 0x9, 0xa5e1, 0x8, 0x7fff, 0x7, 0x6, 0xa03, 0x6, 0xcbaa, 0x7fff, 0x1, 0x4, 0x4, 0x802, 0x3, 0x401, 0xb, 0xfffffff7, 0x125, 0x1000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 1m32.97312332s ago: executing program 4 (id=2692): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xfffffff8, @mcast1, 0x8}], 0x1c) 1m32.708401435s ago: executing program 4 (id=2694): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x6) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x2000001, &(0x7f00000002c0)) close(r0) 1m17.652077578s ago: executing program 35 (id=2694): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x6) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x2000001, &(0x7f00000002c0)) close(r0) 35.325103436s ago: executing program 6 (id=3017): socket(0x28, 0x5, 0x0) setresgid(0xee00, 0x0, 0xee00) setresgid(0x0, 0xee01, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001f00)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x1}}, 0x20) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 30.429460714s ago: executing program 6 (id=3035): r0 = epoll_create(0x8000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x9) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) 28.542591437s ago: executing program 6 (id=3039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x5, 0x2, 0xffff8001, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa4, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x0, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x9, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x280006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd82, 0x60a0, 0x17f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 27.161084571s ago: executing program 6 (id=3043): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x410, 0xffffff62, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) 26.987355845s ago: executing program 6 (id=3044): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) chown(&(0x7f0000000180)='./file0\x00', r0, r1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') creat(&(0x7f0000000040)='./bus\x00', 0x48) 26.190871521s ago: executing program 6 (id=3045): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfa, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 20.426986813s ago: executing program 5 (id=3061): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/stat\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xb, 0x13, r0, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x87, 0x7fff0004}]}) chown(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0x24, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf0ae90021bd21762ae3fe8892b69c17f3f453", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000b80)={0x0, 0xb}, &(0x7f0000000bc0)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) pwritev2(r1, 0x0, 0x0, 0x80000007, 0x14edec83, 0x10) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x6, 0x7}, {0x4, 0x4}]}, 0x14, 0x1) syz_usb_connect$uac1(0x2, 0xc6, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x14, 0xd0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x3, 0x3, 0x7288, 0xe6}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x3, 0x3, 0x3, 0x6, 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x5e, 'm'}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x0, 0x5, 0x4, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0xb0, 0x7, "830954b1"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xbd, 0x1, 0xe7, 0x3, "e5b8"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0xe, 0x78, "02ed1e"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0xb, "e737d1d305"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc, 0x80, 0x3, {0x7, 0x25, 0x1, 0x3, 0x6, 0x84}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x0, 0x5, 0x8, {0x7, 0x25, 0x1, 0x2, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x2, 0xc0, 0xff, 0x54}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x5, [{0x40, &(0x7f0000000400)=@string={0x40, 0x3, "d5054b28def54ea16a43a383f09a96bfd2815c8fedff09e32cc60ba828a4dcb415a4c8fd414fe63afe155dd10c74e48dd921a3af897fd9ae16eafe89fda2"}}, {0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="2903fc59c2bc15eab1c10c7c7b7b5bc72c1c7816e7b0aa0ce27bc4d91ad020a56f2818ba1d74d0268b36e23cf6445777b687ed5da51366e7bec1cd166a361b59cb6623ad3bcfa14ccc31d4a6d5db5adc5c1f76a8126f890504cbbaaa54a9b515cdf1d4d744daba3e3fe56f46c6d7e073b40400000094bce32c12883f267f97035a12557add8c5d1b0ade0beb9ee2811cfda27a81d40000000000"]}, {0xa4, &(0x7f0000000540)=@string={0xa4, 0x3, "58c5a1b9cdf2089aafe85cb6383fa8e27fe8621c82c7a3e3930c0174ead1125ac8795572991028eaedd909c7363e5752d16aa01df6519de910c47c1926fad6ab186fb5ef2970edfc0a30b3e2233109376a2a2caf5c0d5aaf3b6984d4afb915fb5dcf105c9080f674e5804a42b8afb08d480c228bd523a91e1a3735a39c6fa7983ea06129898dc45f291aba0d9351f4398a96339d2a3e1a3eeb7331d00261d5763cec"}}, {0xa0, &(0x7f00000006c0)=@string={0xa0, 0x3, "7b373b802dab9a58ef179b0b25e4087605c04831d5c9eed93aba3980b787354f0af5a56cad99ca081da20b351f8f7c4e3ce6b500fb616d78560c3d199f855218ba05943e9ce401cca432e8e1585bc426bbadc2b4e5c7073acb49ed5026e6b884fe1b9373b946f7f3222109bb52f3fbdc41177ec0b98e60fe9d1b03d8069965539eea51109b46e766555dae31741f77113f5d47639d908650a75218cc1c41"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1009}}]}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000940)={0x24, &(0x7f0000000840)={0x0, 0x10, 0x72, {0x72, 0x11, "ddc9c4dd2e187f9276adf21b3b5365fb0db7812de8ed4818042ef104e65e18e152aa64e9f3750465e27506eb0e9bba5f2a9d9eda679c700be913f0943c2ad5f0aec6db58d3f3b7c6b6f763b4e1c25445457ae790879ed6d4515d41f51f3701dfc2989a298d0a02ac08aa9086be56a162"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8e, 0x1, {0x22, 0xff0}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000980)={0x0, 0x0, 0x85, "68070057e2e3ff72bf3412621221dca2d20856b10f3cdd2581b9d92fcb908e92e5700a84d53ded218b9375fb7c2a59643672e6798be24a46705eb19abe4e5c5aa4bbae643097f6b2fe92f5a4d9b1e57072ba1859028e48f1d97037c6cd1692c70cf20d8e62f1bfd28dfd56a075ab75f348ad4bd0fabf95d9364ee568adffaa6debfd91b8a7"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xc6}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xc4}, &(0x7f0000000ac0)={0x20, 0x1, 0x1, "ff"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x7}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r5, 0x7, 0xffffffffffffffff, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 16.072619499s ago: executing program 5 (id=3066): r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$dsp(r0, &(0x7f00000102c0)=""/122, 0xfffffed7) 10.061914252s ago: executing program 36 (id=3045): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfa, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 9.056699671s ago: executing program 5 (id=3083): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x2, 0x3, 0x0, &(0x7f0000000100)=""/60, 0x0, 0xeeee8000}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r1, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001640)}}], 0x1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r6 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r8 = dup(r7) r9 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x8a200) ioctl$IOC_PR_RELEASE(r9, 0x401070ca, &(0x7f0000000140)={0x6, 0x2800, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r8}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x30}]}) close_range(r10, r10, 0x0) 8.592441081s ago: executing program 5 (id=3090): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="a3bbf2c65a8d7f4244b05956e33e599d7171912e2bd861faba0f4dd9f6c584a9", 0x20}, {&(0x7f0000000180)="cc240a", 0x3}], 0x2, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}}], 0x1, 0x40001) 8.419094451s ago: executing program 5 (id=3092): r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$dsp(r0, &(0x7f00000102c0)=""/122, 0xfffffed7) 8.032208241s ago: executing program 3 (id=3095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000740)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r1, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x30}}, 0x101) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x1, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfdffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x80, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd93, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0x2]}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.866065148s ago: executing program 3 (id=3097): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 7.343987933s ago: executing program 8 (id=3099): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x2, 0x3, 0x0, &(0x7f0000000100)=""/60, 0x0, 0xeeee8000}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r1, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001640)}}], 0x1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r6 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r8 = dup(r7) r9 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x8a200) ioctl$IOC_PR_RELEASE(r9, 0x401070ca, &(0x7f0000000140)={0x6, 0x2800, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r8}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x30}]}) close_range(r10, r10, 0x0) 7.143176223s ago: executing program 3 (id=3101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="a3bbf2c65a8d7f4244b05956e33e599d7171912e2bd861faba0f4dd9f6c584a9", 0x20}, {&(0x7f0000000180)="cc240a", 0x3}], 0x2, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}}], 0x1, 0x40001) 6.66745285s ago: executing program 3 (id=3103): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000140)=""/78, 0x4e}], 0x2) 6.437434579s ago: executing program 8 (id=3104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x5, 0x2, 0xffff8001, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa4, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x0, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x9, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x280006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd82, 0x60a0, 0x17f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.128933461s ago: executing program 3 (id=3105): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x3, 0x42, 0x40, 0xc0, 0xffffffffffffffff, 0x40000000}, 0x50) socket(0xa, 0x3, 0x87) openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2, 0xff}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.677293931s ago: executing program 8 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x88c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000003"], 0x20}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x404) 4.359279894s ago: executing program 7 (id=3108): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x7ffffffd}}, 0x0, 0x0, 0xe457, 0x0, 0x54, 0x6}, 0x9c) 4.351227021s ago: executing program 8 (id=3109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010400000000ebfc18de82244708090002000000000901000000080003400000000a0800010001"], 0x30}, 0x1, 0x0, 0x0, 0x40045}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x240048d4}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.219775501s ago: executing program 7 (id=3110): r0 = semget$private(0x0, 0x5, 0x8a) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, 0x0) 4.122058159s ago: executing program 8 (id=3111): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.396304704s ago: executing program 8 (id=3112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB="4c010000190001002abd7000fddbdf251d01060015000400030000e0080100006698c11e01060003"], 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.395073798s ago: executing program 7 (id=3113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="a3bbf2c65a8d7f4244b05956e33e599d7171912e2bd861faba0f4dd9f6c584a9873aba48b43be4b67ee68d9b02b962", 0x2f}, {&(0x7f0000000180)="cc240a", 0x3}], 0x2, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}}], 0x1, 0x40001) 2.166699668s ago: executing program 7 (id=3114): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c8a1, 0xc000, 0x1, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/42, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2.109003312s ago: executing program 5 (id=3115): r0 = creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0xffffffff, 0x1, {r2}, {0xffffffffffffffff}, 0x7, 0xe1ce}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000140)=@md0, r4, &(0x7f0000000300)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x5, 0x8, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=@v2={0x2000000, [{0xaae}, {0x7eb, 0x4}]}, 0x14, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg$can_bcm(r4, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, &(0x7f0000002e80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x663b, @rand_addr=' \x01\x00', 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffe}}], 0x30}}], 0x1, 0x2400c000) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x801) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) 1.708848664s ago: executing program 3 (id=3117): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000140)='./file0\x00') setuid(0xee01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x40006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) close(r0) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x1100}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=3118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x88c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000003"], 0x20}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x404) kernel console output (not intermixed with test programs): tting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 817.952262][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 817.954066][ T31] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 817.954100][ T31] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 817.954195][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 817.954220][ T31] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.954244][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 817.954268][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 817.954292][ T31] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 817.954368][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 817.964684][ T31] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 817.964727][ T31] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 817.965543][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 817.965572][ T31] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.965596][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 817.965679][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 817.965705][ T31] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 817.965730][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 817.986686][ T31] usb 7-1: string descriptor 0 read error: -22 [ 817.986961][ T31] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 817.986985][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.161258][ T5895] usb 5-1: GET_CAPABILITIES returned 0 [ 818.161309][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 818.474313][ T31] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 818.493352][T13537] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2127'. [ 818.631820][ T31] usb 7-1: USB disconnect, device number 4 [ 818.633721][ T10] usb 6-1: usb_control_msg returned -32 [ 818.633774][ T10] usbtmc 6-1:16.0: can't read capabilities [ 818.645920][ T5895] usb 5-1: USB disconnect, device number 45 [ 821.008164][T13540] usbtmc: can not find device for minor 0 [ 822.537547][ T5977] usb 6-1: USB disconnect, device number 18 [ 825.768111][ T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 826.092580][ T31] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 826.092613][ T31] usb 4-1: config 0 has no interface number 0 [ 826.092665][ T31] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 826.092693][ T31] usb 4-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid maxpacket 27392, setting to 64 [ 826.092731][ T31] usb 4-1: config 0 interface 216 has no altsetting 0 [ 826.092767][ T31] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 826.092791][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.969139][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2140'. [ 827.968109][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 828.120227][ T31] usb 4-1: config 0 descriptor?? [ 828.149926][ T10] usb 6-1: device descriptor read/64, error -71 [ 828.178731][ T31] usb 4-1: can't set config #0, error -71 [ 828.208559][ T31] usb 4-1: USB disconnect, device number 31 [ 828.250857][T12366] udevd[12366]: setting mode of /dev/bus/usb/004/031 to 020664 failed: No such file or directory [ 828.251637][T12366] udevd[12366]: setting owner of /dev/bus/usb/004/031 to uid=0, gid=0 failed: No such file or directory [ 828.540221][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 828.576888][ T5813] Bluetooth: hci1: connection err: -111 [ 828.749998][ T10] usb 6-1: device descriptor read/64, error -71 [ 828.859137][ T10] usb usb6-port1: attempt power cycle [ 829.209484][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 830.136609][T13576] tipc: can't start tipc receive workqueue [ 831.195799][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 833.324147][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 834.241164][ T10] usb 6-1: device descriptor read/8, error -110 [ 834.561466][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 834.578367][ T10] usb 6-1: device descriptor read/8, error -32 [ 834.688339][ T10] usb usb6-port1: unable to enumerate USB device [ 834.898237][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 835.048074][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 835.050869][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 835.050907][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 835.050934][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.050958][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.051005][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 835.051039][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.321288][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 835.321341][ T10] usbtmc 3-1:16.0: can't read capabilities [ 835.516832][ T31] usb 3-1: USB disconnect, device number 26 [ 836.962670][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 838.888354][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2156'. [ 841.398009][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 841.548105][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 841.550872][ T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 841.550909][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 841.550936][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 841.550961][ T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.551004][ T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 841.551030][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.775999][ T31] usb 7-1: usb_control_msg returned -71 [ 841.776057][ T31] usbtmc 7-1:16.0: can't read capabilities [ 841.883285][ T31] usb 7-1: USB disconnect, device number 5 [ 846.072402][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2167'. [ 848.338037][ T5977] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 848.648249][ T5977] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 848.648283][ T5977] usb 4-1: config 0 has no interface number 0 [ 848.648335][ T5977] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 848.648364][ T5977] usb 4-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid maxpacket 27392, setting to 64 [ 848.648397][ T5977] usb 4-1: config 0 interface 216 has no altsetting 0 [ 848.648434][ T5977] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 848.648459][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.654455][ T5977] usb 4-1: config 0 descriptor?? [ 848.655736][T13695] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 848.738334][ T5977] usb 4-1: NFC: intf ffff88805e157000 id ffffffff8e53a1e0 [ 848.932980][ T5977] usb 4-1: USB disconnect, device number 32 [ 856.100326][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2189'. [ 858.670877][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 859.609989][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 860.838101][ T5949] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 861.061237][ T5949] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 861.061268][ T5949] usb 3-1: config 1 has an invalid interface association descriptor of length 4, skipping [ 861.061289][ T5949] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 861.061310][ T5949] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 861.119967][T13787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.120531][T13787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.149257][ T5949] usb 3-1: string descriptor 0 read error: -71 [ 861.149460][ T5949] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 861.149487][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.200608][ T5949] usb 3-1: can't set config #1, error -71 [ 861.223900][ T5949] usb 3-1: USB disconnect, device number 27 [ 862.835975][T13815] kAFS: unable to lookup cell '\,' [ 862.908993][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2200'. [ 862.909019][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2200'. [ 862.909044][T13818] netlink: 'syz.6.2200': attribute type 6 has an invalid length. [ 863.281053][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 863.718074][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 864.175389][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 864.184575][ T31] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 864.184618][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.184638][ T31] usb 6-1: Product: syz [ 864.184653][ T31] usb 6-1: Manufacturer: syz [ 864.184667][ T31] usb 6-1: SerialNumber: syz [ 865.191231][ T31] usb 6-1: config 0 descriptor?? [ 866.780460][ T31] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 866.886648][ T5949] usb 6-1: USB disconnect, device number 23 [ 867.976384][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 870.108087][ T5949] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 870.148321][T13857] kAFS: unable to lookup cell '\,' [ 870.204044][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 870.204069][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2211'. [ 870.204095][T13859] netlink: 'syz.3.2211': attribute type 6 has an invalid length. [ 870.288031][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 870.294908][ T5949] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 870.294978][ T5949] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 870.295001][ T5949] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 870.295025][ T5949] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 870.295045][ T5949] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.295072][ T5949] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 870.295086][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.790844][ T5949] usb 5-1: GET_CAPABILITIES returned 0 [ 870.790901][ T5949] usbtmc 5-1:16.0: can't read capabilities [ 871.144913][ T9520] usb 5-1: USB disconnect, device number 46 [ 871.300591][T13866] FAULT_INJECTION: forcing a failure. [ 871.300591][T13866] name failslab, interval 1, probability 0, space 0, times 0 [ 871.300634][T13866] CPU: 1 UID: 0 PID: 13866 Comm: syz.3.2214 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 871.300665][T13866] Tainted: [L]=SOFTLOCKUP [ 871.300672][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 871.300685][T13866] Call Trace: [ 871.300692][T13866] [ 871.300701][T13866] dump_stack_lvl+0xe8/0x150 [ 871.300738][T13866] should_fail_ex+0x46b/0x600 [ 871.300766][T13866] should_failslab+0xa8/0x100 [ 871.300798][T13866] __kmalloc_noprof+0xdf/0x7c0 [ 871.300826][T13866] ? tomoyo_encode+0x28b/0x550 [ 871.300852][T13866] tomoyo_encode+0x28b/0x550 [ 871.300879][T13866] tomoyo_realpath_from_path+0x58d/0x5d0 [ 871.300909][T13866] ? tomoyo_path_number_perm+0x219/0x630 [ 871.300931][T13866] tomoyo_path_number_perm+0x246/0x630 [ 871.300949][T13866] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 871.300965][T13866] ? __lock_acquire+0x6b5/0x2cf0 [ 871.300980][T13866] ? do_raw_spin_lock+0x12b/0x2f0 [ 871.301019][T13866] ? __fget_files+0x2a/0x420 [ 871.301032][T13866] ? __fget_files+0x2a/0x420 [ 871.301042][T13866] ? __fget_files+0x3a6/0x420 [ 871.301051][T13866] ? __fget_files+0x2a/0x420 [ 871.301064][T13866] security_file_ioctl+0xc3/0x2a0 [ 871.301083][T13866] __se_sys_ioctl+0x47/0x170 [ 871.301099][T13866] do_syscall_64+0xe2/0xf80 [ 871.301116][T13866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.301128][T13866] ? trace_irq_disable+0x37/0x100 [ 871.301143][T13866] ? clear_bhb_loop+0x60/0xb0 [ 871.301158][T13866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.301170][T13866] RIP: 0033:0x7efd4cb2aeb9 [ 871.301182][T13866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.301193][T13866] RSP: 002b:00007efd4ad5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.301207][T13866] RAX: ffffffffffffffda RBX: 00007efd4cda6090 RCX: 00007efd4cb2aeb9 [ 871.301216][T13866] RDX: 000000110c230007 RSI: 00000000c004743e RDI: 0000000000000003 [ 871.301224][T13866] RBP: 00007efd4ad5d090 R08: 0000000000000000 R09: 0000000000000000 [ 871.301232][T13866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.301239][T13866] R13: 00007efd4cda6128 R14: 00007efd4cda6090 R15: 00007ffe08800498 [ 871.301259][T13866] [ 871.301282][T13866] ERROR: Out of memory at tomoyo_realpath_from_path. [ 872.125079][T13872] binder: 13871:13872 ioctl c0306201 200000000640 returned -22 [ 872.126098][T13872] overlayfs: failed to resolve './file0': -2 [ 872.624565][T13880] FAULT_INJECTION: forcing a failure. [ 872.624565][T13880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.624606][T13880] CPU: 0 UID: 0 PID: 13880 Comm: syz.2.2219 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 872.624637][T13880] Tainted: [L]=SOFTLOCKUP [ 872.624651][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 872.624663][T13880] Call Trace: [ 872.624671][T13880] [ 872.624679][T13880] dump_stack_lvl+0xe8/0x150 [ 872.624714][T13880] should_fail_ex+0x46b/0x600 [ 872.624743][T13880] strncpy_from_user+0x36/0x2b0 [ 872.624779][T13880] getname_flags+0xf2/0x540 [ 872.624814][T13880] path_listxattrat+0xd9/0x3e0 [ 872.624843][T13880] ? __pfx_path_listxattrat+0x10/0x10 [ 872.624880][T13880] do_syscall_64+0xe2/0xf80 [ 872.624909][T13880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.624929][T13880] ? trace_irq_disable+0x37/0x100 [ 872.624957][T13880] ? clear_bhb_loop+0x60/0xb0 [ 872.624983][T13880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.625004][T13880] RIP: 0033:0x7fd7f0e0aeb9 [ 872.625023][T13880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.625042][T13880] RSP: 002b:00007fd7ef066028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 872.625066][T13880] RAX: ffffffffffffffda RBX: 00007fd7f1085fa0 RCX: 00007fd7f0e0aeb9 [ 872.625082][T13880] RDX: 00000000000000fe RSI: 0000000000000000 RDI: 0000200000000000 [ 872.625096][T13880] RBP: 00007fd7ef066090 R08: 0000000000000000 R09: 0000000000000000 [ 872.625109][T13880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.625121][T13880] R13: 00007fd7f1086038 R14: 00007fd7f1085fa0 R15: 00007ffcc7069008 [ 872.625156][T13880] [ 873.145324][T13896] kAFS: unable to lookup cell '\,' [ 873.250706][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'. [ 873.250724][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2224'. [ 873.250741][T13897] netlink: 'syz.3.2224': attribute type 6 has an invalid length. [ 873.268025][T11135] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 873.429161][T11135] usb 5-1: Using ep0 maxpacket: 32 [ 873.431295][T11135] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 873.431314][T11135] usb 5-1: config 0 has no interface number 0 [ 873.436140][T11135] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 873.436160][T11135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.436173][T11135] usb 5-1: Product: syz [ 873.436181][T11135] usb 5-1: Manufacturer: syz [ 873.436190][T11135] usb 5-1: SerialNumber: syz [ 874.236917][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2225'. [ 875.263860][T11135] usb 5-1: config 0 descriptor?? [ 875.300283][T11135] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 875.533881][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.534066][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.986899][T11135] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 876.014365][T13882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2218'. [ 876.155468][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 876.281632][T11135] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 876.344072][T11135] usb 5-1: USB disconnect, device number 47 [ 876.472876][T11135] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 876.501642][T11135] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 876.502766][T11135] quatech2 5-1:0.51: device disconnected [ 877.485377][T13918] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2232'. [ 877.812555][T13927] FAULT_INJECTION: forcing a failure. [ 877.812555][T13927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.812593][T13927] CPU: 1 UID: 0 PID: 13927 Comm: syz.6.2234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 877.812622][T13927] Tainted: [L]=SOFTLOCKUP [ 877.812630][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 877.812641][T13927] Call Trace: [ 877.812649][T13927] [ 877.812658][T13927] dump_stack_lvl+0xe8/0x150 [ 877.812694][T13927] should_fail_ex+0x46b/0x600 [ 877.812731][T13927] _copy_to_user+0x31/0xb0 [ 877.812763][T13927] simple_read_from_buffer+0xe1/0x170 [ 877.812798][T13927] proc_fail_nth_read+0x1be/0x230 [ 877.812828][T13927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.812859][T13927] ? rw_verify_area+0x2ac/0x4e0 [ 877.812886][T13927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.812913][T13927] vfs_read+0x212/0xa70 [ 877.812949][T13927] ? __pfx_vfs_read+0x10/0x10 [ 877.812977][T13927] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 877.813005][T13927] ? lockdep_hardirqs_on+0x7a/0x110 [ 877.813035][T13927] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 877.813065][T13927] ? mutex_lock_nested+0x152/0x1d0 [ 877.813087][T13927] ? fdget_pos+0x252/0x320 [ 877.813117][T13927] ksys_read+0x156/0x270 [ 877.813147][T13927] ? __pfx_ksys_read+0x10/0x10 [ 877.813172][T13927] ? fput+0xa0/0xd0 [ 877.813206][T13927] do_syscall_64+0xe2/0xf80 [ 877.813234][T13927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.813255][T13927] ? trace_irq_disable+0x37/0x100 [ 877.813284][T13927] ? clear_bhb_loop+0x60/0xb0 [ 877.813311][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.813332][T13927] RIP: 0033:0x7f2064dfb78e [ 877.813352][T13927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 877.813371][T13927] RSP: 002b:00007f206308dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 877.813396][T13927] RAX: ffffffffffffffda RBX: 00007f206308e6c0 RCX: 00007f2064dfb78e [ 877.813411][T13927] RDX: 000000000000000f RSI: 00007f206308e0a0 RDI: 0000000000000004 [ 877.813424][T13927] RBP: 00007f206308e090 R08: 0000000000000000 R09: 0000000000000000 [ 877.813438][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.813450][T13927] R13: 00007f20650b6038 R14: 00007f20650b5fa0 R15: 00007fff0ba16938 [ 877.813486][T13927] [ 878.738065][ T5945] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 878.897995][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 878.901658][ T5945] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 878.901683][ T5945] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 878.901702][ T5945] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 878.901716][ T5945] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.901741][ T5945] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 878.901755][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.119300][ T5945] usb 4-1: GET_CAPABILITIES returned 0 [ 879.119354][ T5945] usbtmc 4-1:16.0: can't read capabilities [ 879.338740][ T5945] usb 4-1: USB disconnect, device number 33 [ 879.613502][T13951] FAULT_INJECTION: forcing a failure. [ 879.613502][T13951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.613542][T13951] CPU: 0 UID: 0 PID: 13951 Comm: syz.6.2240 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 879.613573][T13951] Tainted: [L]=SOFTLOCKUP [ 879.613580][T13951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 879.613593][T13951] Call Trace: [ 879.613602][T13951] [ 879.613611][T13951] dump_stack_lvl+0xe8/0x150 [ 879.613647][T13951] should_fail_ex+0x46b/0x600 [ 879.613675][T13951] strncpy_from_user+0x36/0x2b0 [ 879.613714][T13951] getname_flags+0xf2/0x540 [ 879.613760][T13951] __x64_sys_mkdirat+0x7a/0xa0 [ 879.613791][T13951] do_syscall_64+0xe2/0xf80 [ 879.613820][T13951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.613840][T13951] ? trace_irq_disable+0x37/0x100 [ 879.613867][T13951] ? clear_bhb_loop+0x60/0xb0 [ 879.613893][T13951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.613915][T13951] RIP: 0033:0x7f2064e3aeb9 [ 879.613934][T13951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.613952][T13951] RSP: 002b:00007f206308e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 879.613974][T13951] RAX: ffffffffffffffda RBX: 00007f20650b5fa0 RCX: 00007f2064e3aeb9 [ 879.613990][T13951] RDX: 000000000000001e RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 879.614004][T13951] RBP: 00007f206308e090 R08: 0000000000000000 R09: 0000000000000000 [ 879.614017][T13951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.614029][T13951] R13: 00007f20650b6038 R14: 00007f20650b5fa0 R15: 00007fff0ba16938 [ 879.614064][T13951] [ 879.737982][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 879.893544][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 879.893578][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.954353][ T10] usb 5-1: config 0 descriptor?? [ 879.969014][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 880.279031][T13955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.298978][T13955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.987985][ T10] usb 5-1: USB disconnect, device number 48 [ 881.618083][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 881.803855][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.803892][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.803935][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 881.803960][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.869324][ T10] usb 7-1: config 0 descriptor?? [ 882.177627][T13984] FAULT_INJECTION: forcing a failure. [ 882.177627][T13984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.177678][T13984] CPU: 1 UID: 0 PID: 13984 Comm: syz.4.2252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 882.177714][T13984] Tainted: [L]=SOFTLOCKUP [ 882.177722][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 882.177734][T13984] Call Trace: [ 882.177743][T13984] [ 882.177752][T13984] dump_stack_lvl+0xe8/0x150 [ 882.177786][T13984] should_fail_ex+0x46b/0x600 [ 882.177815][T13984] _copy_from_user+0x2d/0xb0 [ 882.177841][T13984] __copy_msghdr+0x3c5/0x5b0 [ 882.177869][T13984] ___sys_sendmsg+0x213/0x360 [ 882.177889][T13984] ? __lock_acquire+0x6b5/0x2cf0 [ 882.177916][T13984] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.177974][T13984] ? __fget_files+0x2a/0x420 [ 882.177994][T13984] ? __fget_files+0x3a6/0x420 [ 882.178023][T13984] __x64_sys_sendmsg+0x1c3/0x2a0 [ 882.178050][T13984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 882.178082][T13984] ? __pfx_ksys_write+0x10/0x10 [ 882.178121][T13984] do_syscall_64+0xe2/0xf80 [ 882.178150][T13984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.178170][T13984] ? trace_irq_disable+0x37/0x100 [ 882.178196][T13984] ? clear_bhb_loop+0x60/0xb0 [ 882.178220][T13984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.178240][T13984] RIP: 0033:0x7fe68489aeb9 [ 882.178259][T13984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.178279][T13984] RSP: 002b:00007fe682af6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.178302][T13984] RAX: ffffffffffffffda RBX: 00007fe684b15fa0 RCX: 00007fe68489aeb9 [ 882.178318][T13984] RDX: 0000000020000010 RSI: 00002000000019c0 RDI: 0000000000000003 [ 882.178333][T13984] RBP: 00007fe682af6090 R08: 0000000000000000 R09: 0000000000000000 [ 882.178347][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.178360][T13984] R13: 00007fe684b16038 R14: 00007fe684b15fa0 R15: 00007ffc5a0fe708 [ 882.178394][T13984] [ 882.316542][ T10] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 882.316577][ T10] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 882.316601][ T10] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 882.316625][ T10] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 882.316648][ T10] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 882.457969][ T10] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 882.599484][T13971] FAULT_INJECTION: forcing a failure. [ 882.599484][T13971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.599526][T13971] CPU: 0 UID: 0 PID: 13971 Comm: syz.6.2245 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 882.599557][T13971] Tainted: [L]=SOFTLOCKUP [ 882.599565][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 882.599578][T13971] Call Trace: [ 882.599586][T13971] [ 882.599595][T13971] dump_stack_lvl+0xe8/0x150 [ 882.599633][T13971] should_fail_ex+0x46b/0x600 [ 882.599663][T13971] _copy_to_user+0x31/0xb0 [ 882.599705][T13971] simple_read_from_buffer+0xe1/0x170 [ 882.599745][T13971] proc_fail_nth_read+0x1be/0x230 [ 882.599777][T13971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 882.599808][T13971] ? rw_verify_area+0x2ac/0x4e0 [ 882.599834][T13971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 882.599863][T13971] vfs_read+0x212/0xa70 [ 882.599900][T13971] ? __pfx_vfs_read+0x10/0x10 [ 882.599930][T13971] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 882.599960][T13971] ? lockdep_hardirqs_on+0x7a/0x110 [ 882.599989][T13971] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 882.600018][T13971] ? mutex_lock_nested+0x152/0x1d0 [ 882.600039][T13971] ? fdget_pos+0x252/0x320 [ 882.600070][T13971] ksys_read+0x156/0x270 [ 882.600100][T13971] ? __pfx_ksys_read+0x10/0x10 [ 882.600141][T13971] do_syscall_64+0xe2/0xf80 [ 882.600170][T13971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.600191][T13971] ? trace_irq_disable+0x37/0x100 [ 882.600219][T13971] ? clear_bhb_loop+0x60/0xb0 [ 882.600246][T13971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.600268][T13971] RIP: 0033:0x7f2064dfb78e [ 882.600288][T13971] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 882.600306][T13971] RSP: 002b:00007f206308dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 882.600331][T13971] RAX: ffffffffffffffda RBX: 00007f206308e6c0 RCX: 00007f2064dfb78e [ 882.600347][T13971] RDX: 000000000000000f RSI: 00007f206308e0a0 RDI: 0000000000000005 [ 882.600360][T13971] RBP: 00007f206308e090 R08: 0000000000000000 R09: 0000000000000000 [ 882.600374][T13971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.600386][T13971] R13: 00007f20650b6038 R14: 00007f20650b5fa0 R15: 00007fff0ba16938 [ 882.600423][T13971] [ 882.768573][ T5945] usb 7-1: USB disconnect, device number 6 [ 882.840625][T13987] fido_id[13987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 883.162647][T13993] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2255'. [ 883.521235][T13996] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2256'. [ 883.902851][ T5813] Bluetooth: hci4: connection err: -111 [ 884.843304][T14026] FAULT_INJECTION: forcing a failure. [ 884.843304][T14026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.843344][T14026] CPU: 1 UID: 0 PID: 14026 Comm: syz.5.2264 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.843372][T14026] Tainted: [L]=SOFTLOCKUP [ 884.843388][T14026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 884.843400][T14026] Call Trace: [ 884.843408][T14026] [ 884.843416][T14026] dump_stack_lvl+0xe8/0x150 [ 884.843455][T14026] should_fail_ex+0x46b/0x600 [ 884.843482][T14026] _copy_from_user+0x2d/0xb0 [ 884.843508][T14026] __copy_msghdr+0x3c5/0x5b0 [ 884.843535][T14026] ___sys_sendmsg+0x213/0x360 [ 884.843554][T14026] ? __lock_acquire+0x6b5/0x2cf0 [ 884.843581][T14026] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.843637][T14026] ? __fget_files+0x2a/0x420 [ 884.843655][T14026] ? __fget_files+0x3a6/0x420 [ 884.843684][T14026] __x64_sys_sendmsg+0x1c3/0x2a0 [ 884.843708][T14026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.843738][T14026] ? __pfx_ksys_write+0x10/0x10 [ 884.843775][T14026] do_syscall_64+0xe2/0xf80 [ 884.843802][T14026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.843821][T14026] ? trace_irq_disable+0x37/0x100 [ 884.843847][T14026] ? clear_bhb_loop+0x60/0xb0 [ 884.843871][T14026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.843890][T14026] RIP: 0033:0x7fbe9524aeb9 [ 884.843908][T14026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.843925][T14026] RSP: 002b:00007fbe934a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.843949][T14026] RAX: ffffffffffffffda RBX: 00007fbe954c5fa0 RCX: 00007fbe9524aeb9 [ 884.843963][T14026] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 884.843975][T14026] RBP: 00007fbe934a6090 R08: 0000000000000000 R09: 0000000000000000 [ 884.843988][T14026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.844000][T14026] R13: 00007fbe954c6038 R14: 00007fbe954c5fa0 R15: 00007ffe1b1f2cb8 [ 884.844031][T14026] [ 884.905670][T14027] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2263'. [ 885.405381][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.405957][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.629336][ T5879] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 885.690891][ T5945] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 885.838020][ T921] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 885.848015][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 885.853215][ T5879] usb 7-1: config 16 has an invalid interface number: 161 but max is 0 [ 885.853244][ T5879] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 885.853261][ T5879] usb 7-1: config 16 has no interface number 0 [ 885.853305][ T5879] usb 7-1: config 16 interface 161 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 885.853330][ T5879] usb 7-1: config 16 interface 161 has no altsetting 0 [ 885.853362][ T5879] usb 7-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=be.e8 [ 885.853393][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.909841][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 885.915213][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 885.917185][ T5945] usb 3-1: config 7 has an invalid interface number: 48 but max is 0 [ 885.917208][ T5945] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 885.917226][ T5945] usb 3-1: config 7 has no interface number 0 [ 885.917311][ T5945] usb 3-1: config 7 interface 48 has no altsetting 0 [ 885.923431][ T5945] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 885.923513][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.923533][ T5945] usb 3-1: Product: syz [ 885.923546][ T5945] usb 3-1: Manufacturer: syz [ 885.923560][ T5945] usb 3-1: SerialNumber: syz [ 886.034412][ T5813] Bluetooth: hci5: connection err: -111 [ 886.048088][ T921] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 886.048120][ T921] usb 4-1: config 1 has an invalid interface association descriptor of length 4, skipping [ 886.048140][ T921] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 886.048159][ T921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.165874][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.185554][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.380042][ T921] usb 4-1: string descriptor 0 read error: -71 [ 886.380411][ T921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.380441][ T921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.458096][ T921] usb 4-1: can't set config #1, error -71 [ 886.474382][ T921] usb 4-1: USB disconnect, device number 34 [ 886.786141][ T5879] usb 7-1: string descriptor 0 read error: -71 [ 886.815311][ T5879] rndis_host 7-1:16.161: skipping garbage [ 886.815337][ T5879] rndis_host 7-1:16.161: skipping garbage [ 886.815356][ T5879] usb 7-1: bad CDC descriptors [ 886.825570][ T5879] cdc_acm 7-1:16.161: skipping garbage [ 886.825592][ T5879] cdc_acm 7-1:16.161: skipping garbage [ 886.876241][ T5879] usb 7-1: USB disconnect, device number 7 [ 887.153390][ T5945] cdc_phonet 3-1:7.48: skipping garbage [ 887.153434][ T5945] cdc_phonet 3-1:7.48: probe with driver cdc_phonet failed with error -22 [ 887.170729][ T5945] usb 3-1: USB disconnect, device number 28 [ 887.222915][T13717] udevd[13717]: setting mode of /dev/bus/usb/003/028 to 020664 failed: No such file or directory [ 887.223137][T13717] udevd[13717]: setting owner of /dev/bus/usb/003/028 to uid=0, gid=0 failed: No such file or directory [ 887.318034][ T31] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 887.477706][ T31] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 887.477743][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.477773][ T31] usb 6-1: Product: syz [ 887.477789][ T31] usb 6-1: Manufacturer: syz [ 887.477805][ T31] usb 6-1: SerialNumber: syz [ 888.331384][ T31] rtl8150 6-1:1.0: couldn't reset the device [ 888.331819][ T31] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 888.411714][ T31] usb 6-1: USB disconnect, device number 24 [ 889.698994][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2286'. [ 892.968143][ T5949] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 893.037531][T14133] netlink: 'syz.5.2301': attribute type 25 has an invalid length. [ 893.037572][T14133] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2301'. [ 893.037635][T14133] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 893.039839][T14134] tipc: Started in network mode [ 893.039864][T14134] tipc: Node identity ac14140f, cluster identity 4711 [ 893.044539][T14134] tipc: New replicast peer: 255.255.255.255 [ 893.058088][T14134] tipc: Enabled bearer , priority 10 [ 893.143993][ T5949] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 893.144024][ T5949] usb 3-1: config 1 has an invalid interface association descriptor of length 4, skipping [ 893.144044][ T5949] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 893.144065][ T5949] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.246605][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.247256][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.359900][ T5949] usb 3-1: string descriptor 0 read error: -71 [ 893.360078][ T5949] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 893.360104][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.394546][ T5949] usb 3-1: can't set config #1, error -71 [ 893.397296][ T5949] usb 3-1: USB disconnect, device number 29 [ 893.670086][ T31] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 893.828098][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 893.834258][ T31] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 893.834289][ T31] usb 6-1: config 0 has no interface number 0 [ 893.834337][ T31] usb 6-1: config 0 interface 230 has no altsetting 0 [ 893.838243][ T31] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 893.838275][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.838295][ T31] usb 6-1: Product: syz [ 893.838311][ T31] usb 6-1: Manufacturer: syz [ 893.838326][ T31] usb 6-1: SerialNumber: syz [ 893.926406][ T31] usb 6-1: config 0 descriptor?? [ 893.934979][ T31] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 893.985952][ T31] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 894.159729][ T5879] tipc: Node number set to 2886997007 [ 894.937966][ T5977] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 895.096611][ T5977] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 895.096642][ T5977] usb 4-1: config 1 has an invalid interface association descriptor of length 4, skipping [ 895.096661][ T5977] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 895.096683][ T5977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.190985][T14159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.194000][T14159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.253961][ T5977] usb 4-1: string descriptor 0 read error: -71 [ 895.254135][ T5977] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 895.254161][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.308028][ T5977] usb 4-1: can't set config #1, error -71 [ 895.311131][ T5977] usb 4-1: USB disconnect, device number 35 [ 895.834012][T14172] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2314'. [ 895.970647][T14176] FAULT_INJECTION: forcing a failure. [ 895.970647][T14176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.970690][T14176] CPU: 1 UID: 0 PID: 14176 Comm: syz.6.2317 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 895.970721][T14176] Tainted: [L]=SOFTLOCKUP [ 895.970729][T14176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 895.970742][T14176] Call Trace: [ 895.970750][T14176] [ 895.970760][T14176] dump_stack_lvl+0xe8/0x150 [ 895.970796][T14176] should_fail_ex+0x46b/0x600 [ 895.970826][T14176] _copy_from_user+0x2d/0xb0 [ 895.970855][T14176] __copy_msghdr+0x3c5/0x5b0 [ 895.970883][T14176] ___sys_sendmsg+0x213/0x360 [ 895.970905][T14176] ? __lock_acquire+0x6b5/0x2cf0 [ 895.970933][T14176] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.970994][T14176] ? __fget_files+0x2a/0x420 [ 895.971014][T14176] ? __fget_files+0x3a6/0x420 [ 895.971045][T14176] __x64_sys_sendmsg+0x1c3/0x2a0 [ 895.971071][T14176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 895.971104][T14176] ? __pfx_ksys_write+0x10/0x10 [ 895.971144][T14176] do_syscall_64+0xe2/0xf80 [ 895.971170][T14176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.971192][T14176] ? trace_irq_disable+0x37/0x100 [ 895.971219][T14176] ? clear_bhb_loop+0x60/0xb0 [ 895.971245][T14176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.971266][T14176] RIP: 0033:0x7f2064e3aeb9 [ 895.971285][T14176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.971303][T14176] RSP: 002b:00007f206308e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.971326][T14176] RAX: ffffffffffffffda RBX: 00007f20650b5fa0 RCX: 00007f2064e3aeb9 [ 895.971342][T14176] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000003 [ 895.971356][T14176] RBP: 00007f206308e090 R08: 0000000000000000 R09: 0000000000000000 [ 895.971378][T14176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.971391][T14176] R13: 00007f20650b6038 R14: 00007f20650b5fa0 R15: 00007fff0ba16938 [ 895.971426][T14176] [ 896.535236][T14188] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2318'. [ 896.708068][ T5949] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 896.919777][ T5949] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 896.919813][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.970963][ T5949] usb 5-1: config 0 descriptor?? [ 897.170675][ T31] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 897.233786][ T31] usb 6-1: USB disconnect, device number 25 [ 899.359768][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2326'. [ 899.565801][ T5949] pegasus 5-1:0.0: can't reset MAC [ 899.566217][ T5949] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 900.323599][ T7968] usb 5-1: USB disconnect, device number 49 [ 901.038033][ T31] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 901.203983][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 901.204014][ T31] usb 5-1: config 1 has an invalid interface association descriptor of length 4, skipping [ 901.204034][ T31] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 901.204067][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.301827][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.309931][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.331988][ T31] usb 5-1: string descriptor 0 read error: -71 [ 901.332180][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.332207][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.394052][ T31] usb 5-1: can't set config #1, error -71 [ 901.397569][ T31] usb 5-1: USB disconnect, device number 50 [ 902.974717][T14251] FAULT_INJECTION: forcing a failure. [ 902.974717][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 902.974758][T14251] CPU: 0 UID: 0 PID: 14251 Comm: syz.6.2337 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 902.974788][T14251] Tainted: [L]=SOFTLOCKUP [ 902.974796][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 902.974808][T14251] Call Trace: [ 902.974816][T14251] [ 902.974826][T14251] dump_stack_lvl+0xe8/0x150 [ 902.974861][T14251] should_fail_ex+0x46b/0x600 [ 902.974888][T14251] ? __alloc_skb+0x1d7/0x390 [ 902.974922][T14251] should_failslab+0xa8/0x100 [ 902.974957][T14251] ? __alloc_skb+0x1d7/0x390 [ 902.974987][T14251] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 902.975018][T14251] ? lockdep_hardirqs_on+0x7a/0x110 [ 902.975050][T14251] ? __alloc_skb+0x193/0x390 [ 902.975084][T14251] __alloc_skb+0x1d7/0x390 [ 902.975122][T14251] netlink_sendmsg+0x5d4/0xb40 [ 902.975164][T14251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.975202][T14251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 902.975238][T14251] ____sys_sendmsg+0xa4e/0xac0 [ 902.975261][T14251] ? __might_fault+0xaf/0x130 [ 902.975308][T14251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.975342][T14251] ? import_iovec+0x73/0xa0 [ 902.975375][T14251] ___sys_sendmsg+0x2a5/0x360 [ 902.975395][T14251] ? __lock_acquire+0x6b5/0x2cf0 [ 902.975423][T14251] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.975483][T14251] ? __fget_files+0x2a/0x420 [ 902.975504][T14251] ? __fget_files+0x3a6/0x420 [ 902.975534][T14251] __x64_sys_sendmsg+0x1c3/0x2a0 [ 902.975558][T14251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.975592][T14251] ? __pfx_ksys_write+0x10/0x10 [ 902.975633][T14251] do_syscall_64+0xe2/0xf80 [ 902.975662][T14251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.975683][T14251] ? trace_irq_disable+0x37/0x100 [ 902.975712][T14251] ? clear_bhb_loop+0x60/0xb0 [ 902.975739][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.975760][T14251] RIP: 0033:0x7f2064e3aeb9 [ 902.975780][T14251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.975798][T14251] RSP: 002b:00007f206306d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.975823][T14251] RAX: ffffffffffffffda RBX: 00007f20650b6090 RCX: 00007f2064e3aeb9 [ 902.975839][T14251] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 902.975853][T14251] RBP: 00007f206306d090 R08: 0000000000000000 R09: 0000000000000000 [ 902.975866][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.975879][T14251] R13: 00007f20650b6128 R14: 00007f20650b6090 R15: 00007fff0ba16938 [ 902.975914][T14251] [ 903.529987][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2340'. [ 904.211626][T14277] program syz.3.2347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 905.147736][T14289] FAULT_INJECTION: forcing a failure. [ 905.147736][T14289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.147788][T14289] CPU: 1 UID: 0 PID: 14289 Comm: syz.3.2350 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 905.147825][T14289] Tainted: [L]=SOFTLOCKUP [ 905.147833][T14289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 905.147845][T14289] Call Trace: [ 905.147854][T14289] [ 905.147863][T14289] dump_stack_lvl+0xe8/0x150 [ 905.147902][T14289] should_fail_ex+0x46b/0x600 [ 905.147932][T14289] _copy_to_user+0x31/0xb0 [ 905.147964][T14289] simple_read_from_buffer+0xe1/0x170 [ 905.148004][T14289] proc_fail_nth_read+0x1be/0x230 [ 905.148035][T14289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 905.148065][T14289] ? rw_verify_area+0x2ac/0x4e0 [ 905.148093][T14289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 905.148122][T14289] vfs_read+0x212/0xa70 [ 905.148159][T14289] ? __pfx_vfs_read+0x10/0x10 [ 905.148189][T14289] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 905.148220][T14289] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.148277][T14289] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 905.148307][T14289] ? mutex_lock_nested+0x152/0x1d0 [ 905.148329][T14289] ? fdget_pos+0x252/0x320 [ 905.148358][T14289] ksys_read+0x156/0x270 [ 905.148387][T14289] ? __pfx_ksys_read+0x10/0x10 [ 905.148428][T14289] do_syscall_64+0xe2/0xf80 [ 905.148456][T14289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.148476][T14289] ? trace_irq_disable+0x37/0x100 [ 905.148503][T14289] ? clear_bhb_loop+0x60/0xb0 [ 905.148530][T14289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.148551][T14289] RIP: 0033:0x7efd4caeb78e [ 905.148571][T14289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 905.148590][T14289] RSP: 002b:00007efd4ad5cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 905.148614][T14289] RAX: ffffffffffffffda RBX: 00007efd4ad5d6c0 RCX: 00007efd4caeb78e [ 905.148630][T14289] RDX: 000000000000000f RSI: 00007efd4ad5d0a0 RDI: 0000000000000005 [ 905.148643][T14289] RBP: 00007efd4ad5d090 R08: 0000000000000000 R09: 0000000000000000 [ 905.148657][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.148670][T14289] R13: 00007efd4cda6128 R14: 00007efd4cda6090 R15: 00007ffe08800498 [ 905.148707][T14289] [ 907.257506][ T5977] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 907.504013][ T5977] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 907.504079][ T5977] usb 5-1: config 0 has no interface number 0 [ 907.508537][ T5977] usb 5-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 907.508587][ T5977] usb 5-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid maxpacket 27392, setting to 64 [ 907.508974][ T5977] usb 5-1: config 0 interface 216 has no altsetting 0 [ 907.509051][ T5977] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 907.509109][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.050897][ T5977] usb 5-1: config 0 descriptor?? [ 908.051873][T14298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 908.053752][ T5977] usb 5-1: NFC: intf ffff88802069f000 id ffffffff8e53a1e0 [ 908.287615][ T10] usb 5-1: USB disconnect, device number 51 [ 908.531238][ T5878] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 908.680753][ T5878] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 908.680785][ T5878] usb 6-1: config 7 has no interface number 0 [ 908.687653][ T5878] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 908.687687][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.687708][ T5878] usb 6-1: Product: syz [ 908.687723][ T5878] usb 6-1: Manufacturer: syz [ 908.687738][ T5878] usb 6-1: SerialNumber: syz [ 909.555567][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2364'. [ 910.570934][ T921] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 911.888304][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 912.284807][ T5878] as10x_usb: device has been detected [ 912.288486][ T5878] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 912.369189][ T5878] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 912.555851][ T5878] as10x_usb: error during firmware upload part1 [ 912.556659][ T5878] Registered device Elgato EyeTV DTT Deluxe [ 912.579808][ T5878] usb 6-1: USB disconnect, device number 26 [ 912.759550][ T5878] Unregistered device Elgato EyeTV DTT Deluxe [ 912.765392][ T5878] as10x_usb: device has been disconnected [ 913.098048][ T921] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 913.267530][ T921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 913.298041][ T921] usb 3-1: not running at top speed; connect to a high speed hub [ 913.299787][ T921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.299814][ T921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 913.340516][ T921] usb 3-1: string descriptor 0 read error: -22 [ 913.340630][ T921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 913.340645][ T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.376999][ T921] usb 3-1: 0:2 : does not exist [ 913.613652][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 913.852336][ T921] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 913.863140][ T921] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 913.875697][ T921] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 914.088580][ T921] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 914.104530][ T921] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 914.122720][ T921] usb 3-1: USB disconnect, device number 31 [ 915.273778][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2377'. [ 916.312519][ T5878] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 916.500405][ T5878] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 916.500441][ T5878] usb 6-1: config 0 has no interface number 0 [ 916.500494][ T5878] usb 6-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 916.500523][ T5878] usb 6-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid maxpacket 27392, setting to 64 [ 916.500552][ T5878] usb 6-1: config 0 interface 216 has no altsetting 0 [ 916.500589][ T5878] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 916.500613][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.506442][ T5878] usb 6-1: config 0 descriptor?? [ 916.508880][T14357] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 916.515009][ T5878] usb 6-1: NFC: intf ffff888069d72000 id ffffffff8e53a1e0 [ 916.729303][ T5977] usb 6-1: USB disconnect, device number 27 [ 917.474149][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2380'. [ 918.989087][T14380] capability: warning: `syz.3.2384' uses deprecated v2 capabilities in a way that may be insecure [ 920.535201][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 922.119058][ T5895] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 922.270955][ T5895] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 922.270988][ T5895] usb 5-1: config 0 has no interface number 0 [ 922.271043][ T5895] usb 5-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 922.271073][ T5895] usb 5-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid maxpacket 27392, setting to 64 [ 922.271101][ T5895] usb 5-1: config 0 interface 216 has no altsetting 0 [ 922.271137][ T5895] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 922.271162][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.343633][ T5895] usb 5-1: config 0 descriptor?? [ 922.344936][T14407] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 922.372053][ T5895] usb 5-1: NFC: intf ffff88803489b000 id ffffffff8e53a1e0 [ 922.554737][ T5895] usb 5-1: USB disconnect, device number 52 [ 925.659690][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 927.765595][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2413'. [ 927.817982][ T7968] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 928.016222][ T7968] usb 7-1: config 0 has an invalid interface number: 216 but max is 0 [ 928.016257][ T7968] usb 7-1: config 0 has no interface number 0 [ 928.016310][ T7968] usb 7-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 928.016338][ T7968] usb 7-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid maxpacket 27392, setting to 64 [ 928.016366][ T7968] usb 7-1: config 0 interface 216 has no altsetting 0 [ 928.016404][ T7968] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 928.016429][ T7968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.027141][ T7968] usb 7-1: config 0 descriptor?? [ 928.038429][T14469] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 928.043778][ T7968] usb 7-1: NFC: intf ffff88802069a000 id ffffffff8e53a1e0 [ 928.269398][ T5895] usb 7-1: USB disconnect, device number 8 [ 928.449688][T14479] dummy0: entered promiscuous mode [ 928.449900][T14479] macsec1: entered promiscuous mode [ 928.450140][T14479] macsec1: entered allmulticast mode [ 928.450156][T14479] dummy0: entered allmulticast mode [ 928.552482][T14479] dummy0: left allmulticast mode [ 928.552759][T14479] dummy0: left promiscuous mode [ 928.759022][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2415'. [ 929.049537][ T5878] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 929.241215][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 929.247619][ T5878] usb 3-1: config 162 has an invalid interface number: 46 but max is 0 [ 929.247640][ T5878] usb 3-1: config 162 has no interface number 0 [ 929.247671][ T5878] usb 3-1: config 162 interface 46 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 929.247687][ T5878] usb 3-1: config 162 interface 46 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 929.247703][ T5878] usb 3-1: config 162 interface 46 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 929.247718][ T5878] usb 3-1: config 162 interface 46 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 929.247734][ T5878] usb 3-1: config 162 interface 46 has no altsetting 0 [ 929.328538][ T5878] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 929.328573][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.328594][ T5878] usb 3-1: Product: syz [ 929.328610][ T5878] usb 3-1: Manufacturer: syz [ 929.328626][ T5878] usb 3-1: SerialNumber: syz [ 929.371855][T14485] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 929.646224][T14483] team0 (unregistering): Port device team_slave_0 removed [ 929.731927][T14483] team0 (unregistering): Port device team_slave_1 removed [ 931.722014][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2422'. [ 931.968103][ T5878] usb 3-1: USB disconnect, device number 32 [ 932.428596][ T5878] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 932.588937][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 932.593794][ T5878] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 932.593826][ T5878] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 932.593846][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.593868][ T5878] usb 5-1: config 0 has no interface number 0 [ 932.593922][ T5878] usb 5-1: config 0 interface 189 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 932.593953][ T5878] usb 5-1: config 0 interface 189 has no altsetting 0 [ 932.601659][ T5878] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=7d.4e [ 932.601691][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.601710][ T5878] usb 5-1: Product: syz [ 932.601725][ T5878] usb 5-1: Manufacturer: syz [ 932.601739][ T5878] usb 5-1: SerialNumber: syz [ 932.619356][ T5878] usb 5-1: config 0 descriptor?? [ 932.747998][ T5945] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 932.911209][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 932.917174][ T5945] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 932.917242][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.917268][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 932.917386][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 932.917414][ T5945] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.917487][ T5945] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 932.917514][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.178244][ T5945] usb 3-1: usb_control_msg returned -32 [ 933.178343][ T5945] usbtmc 3-1:16.0: can't read capabilities [ 935.066366][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'. [ 936.060732][ T7968] usb 3-1: USB disconnect, device number 33 [ 936.212650][ T5895] usb 5-1: USB disconnect, device number 53 [ 936.443901][T14548] FAULT_INJECTION: forcing a failure. [ 936.443901][T14548] name failslab, interval 1, probability 0, space 0, times 0 [ 936.443941][T14548] CPU: 1 UID: 0 PID: 14548 Comm: syz.4.2434 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 936.443973][T14548] Tainted: [L]=SOFTLOCKUP [ 936.443982][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 936.443995][T14548] Call Trace: [ 936.444004][T14548] [ 936.444014][T14548] dump_stack_lvl+0xe8/0x150 [ 936.444051][T14548] should_fail_ex+0x46b/0x600 [ 936.444082][T14548] should_failslab+0xa8/0x100 [ 936.444118][T14548] __kmalloc_noprof+0xdf/0x7c0 [ 936.444149][T14548] ? tomoyo_encode+0x28b/0x550 [ 936.444178][T14548] tomoyo_encode+0x28b/0x550 [ 936.444207][T14548] tomoyo_realpath_from_path+0x58d/0x5d0 [ 936.444243][T14548] ? tomoyo_path_number_perm+0x219/0x630 [ 936.444284][T14548] tomoyo_path_number_perm+0x246/0x630 [ 936.444317][T14548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 936.444347][T14548] ? __lock_acquire+0x6b5/0x2cf0 [ 936.444376][T14548] ? do_raw_spin_lock+0x12b/0x2f0 [ 936.444447][T14548] ? __fget_files+0x2a/0x420 [ 936.444472][T14548] ? __fget_files+0x2a/0x420 [ 936.444492][T14548] ? __fget_files+0x3a6/0x420 [ 936.444511][T14548] ? __fget_files+0x2a/0x420 [ 936.444536][T14548] security_file_ioctl+0xc3/0x2a0 [ 936.444570][T14548] __se_sys_ioctl+0x47/0x170 [ 936.444601][T14548] do_syscall_64+0xe2/0xf80 [ 936.444632][T14548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.444654][T14548] ? trace_irq_disable+0x37/0x100 [ 936.444683][T14548] ? clear_bhb_loop+0x60/0xb0 [ 936.444710][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.444733][T14548] RIP: 0033:0x7fe68489aeb9 [ 936.444754][T14548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.444774][T14548] RSP: 002b:00007fe682ad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.444800][T14548] RAX: ffffffffffffffda RBX: 00007fe684b16090 RCX: 00007fe68489aeb9 [ 936.444817][T14548] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 936.444832][T14548] RBP: 00007fe682ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 936.444846][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.444860][T14548] R13: 00007fe684b16128 R14: 00007fe684b16090 R15: 00007ffc5a0fe708 [ 936.444898][T14548] [ 936.444921][T14548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 937.661444][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2435'. [ 937.858880][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.858962][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.894558][T14579] FAULT_INJECTION: forcing a failure. [ 940.894558][T14579] name failslab, interval 1, probability 0, space 0, times 0 [ 940.894600][T14579] CPU: 1 UID: 0 PID: 14579 Comm: syz.4.2444 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 940.894631][T14579] Tainted: [L]=SOFTLOCKUP [ 940.894639][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 940.894652][T14579] Call Trace: [ 940.894662][T14579] [ 940.894672][T14579] dump_stack_lvl+0xe8/0x150 [ 940.894708][T14579] should_fail_ex+0x46b/0x600 [ 940.894736][T14579] ? __alloc_skb+0x1d7/0x390 [ 940.894769][T14579] should_failslab+0xa8/0x100 [ 940.894803][T14579] ? __alloc_skb+0x1d7/0x390 [ 940.894834][T14579] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 940.894867][T14579] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.894899][T14579] ? __alloc_skb+0x193/0x390 [ 940.894932][T14579] __alloc_skb+0x1d7/0x390 [ 940.894970][T14579] netlink_sendmsg+0x5d4/0xb40 [ 940.895012][T14579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.895090][T14579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.895126][T14579] ____sys_sendmsg+0xa4e/0xac0 [ 940.895151][T14579] ? __might_fault+0xaf/0x130 [ 940.895190][T14579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.895225][T14579] ? import_iovec+0x73/0xa0 [ 940.895258][T14579] ___sys_sendmsg+0x2a5/0x360 [ 940.895282][T14579] ? __lock_acquire+0x6b5/0x2cf0 [ 940.895310][T14579] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.895374][T14579] ? __fget_files+0x2a/0x420 [ 940.895394][T14579] ? __fget_files+0x3a6/0x420 [ 940.895426][T14579] __x64_sys_sendmsg+0x1c3/0x2a0 [ 940.895454][T14579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.895489][T14579] ? __pfx_ksys_write+0x10/0x10 [ 940.895531][T14579] do_syscall_64+0xe2/0xf80 [ 940.895560][T14579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.895582][T14579] ? trace_irq_disable+0x37/0x100 [ 940.895610][T14579] ? clear_bhb_loop+0x60/0xb0 [ 940.895634][T14579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.895656][T14579] RIP: 0033:0x7fe68489aeb9 [ 940.895678][T14579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.895698][T14579] RSP: 002b:00007fe682af6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.895723][T14579] RAX: ffffffffffffffda RBX: 00007fe684b15fa0 RCX: 00007fe68489aeb9 [ 940.895740][T14579] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 940.895755][T14579] RBP: 00007fe682af6090 R08: 0000000000000000 R09: 0000000000000000 [ 940.895769][T14579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.895783][T14579] R13: 00007fe684b16038 R14: 00007fe684b15fa0 R15: 00007ffc5a0fe708 [ 940.895819][T14579] [ 941.068022][ T5895] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 941.291734][ T5895] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 941.291768][ T5895] usb 3-1: config 0 has no interface number 0 [ 941.291826][ T5895] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 941.291857][ T5895] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid maxpacket 27392, setting to 64 [ 941.291886][ T5895] usb 3-1: config 0 interface 216 has no altsetting 0 [ 941.291924][ T5895] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 941.291950][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.357982][ T5945] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 941.382169][ T5895] usb 3-1: config 0 descriptor?? [ 941.385493][T14575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 941.413211][ T5895] usb 3-1: NFC: intf ffff88802c2f7000 id ffffffff8e53a1e0 [ 941.826302][ T5895] usb 3-1: USB disconnect, device number 34 [ 942.847995][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 942.851105][ T5945] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 942.851167][ T5945] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 942.851182][ T5945] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 942.851197][ T5945] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 942.851211][ T5945] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.851237][ T5945] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 942.851251][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.067184][ T5945] usb 4-1: usb_control_msg returned -32 [ 944.067242][ T5945] usbtmc 4-1:16.0: can't read capabilities [ 944.345189][T14595] 9p: Could not find request transport: uyix [ 944.493880][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 945.526561][ T5895] usb 4-1: USB disconnect, device number 36 [ 946.726134][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2457'. [ 948.682156][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 950.827971][ T5949] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 950.978016][ T5949] usb 6-1: Using ep0 maxpacket: 32 [ 950.980434][ T5949] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 950.980464][ T5949] usb 6-1: config 0 has no interface number 0 [ 950.980518][ T5949] usb 6-1: config 0 interface 12 has no altsetting 0 [ 950.983693][ T5949] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 950.983730][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.983751][ T5949] usb 6-1: Product: syz [ 950.983768][ T5949] usb 6-1: Manufacturer: syz [ 950.983783][ T5949] usb 6-1: SerialNumber: syz [ 951.050776][ T5949] usb 6-1: config 0 descriptor?? [ 951.510193][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 952.262795][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 952.448171][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 952.450520][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 952.450543][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 952.450559][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 952.450573][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.450639][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 952.450654][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.745322][ T31] usb 4-1: GET_CAPABILITIES returned 0 [ 952.745355][ T31] usbtmc 4-1:16.0: can't read capabilities [ 952.980698][ T5945] usb 4-1: USB disconnect, device number 37 [ 953.107424][ T5949] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 953.107491][ T5949] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 953.107507][ T5949] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 953.107588][ T5949] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 953.153107][ T5949] usb 6-1: USB disconnect, device number 28 [ 954.858137][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2474'. [ 955.447961][T14700] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 955.475257][T14699] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2475'. [ 955.720520][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2477'. [ 955.721469][T14704] FAULT_INJECTION: forcing a failure. [ 955.721469][T14704] name failslab, interval 1, probability 0, space 0, times 0 [ 955.721493][T14704] CPU: 0 UID: 0 PID: 14704 Comm: syz.6.2477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 955.721512][T14704] Tainted: [L]=SOFTLOCKUP [ 955.721517][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 955.721524][T14704] Call Trace: [ 955.721529][T14704] [ 955.721535][T14704] dump_stack_lvl+0xe8/0x150 [ 955.721558][T14704] should_fail_ex+0x46b/0x600 [ 955.721574][T14704] ? __alloc_skb+0x1d7/0x390 [ 955.721593][T14704] should_failslab+0xa8/0x100 [ 955.721612][T14704] ? __alloc_skb+0x1d7/0x390 [ 955.721628][T14704] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 955.721646][T14704] ? lockdep_hardirqs_on+0x7a/0x110 [ 955.721664][T14704] ? __alloc_skb+0x193/0x390 [ 955.721682][T14704] __alloc_skb+0x1d7/0x390 [ 955.721703][T14704] netlink_sendmsg+0x5d4/0xb40 [ 955.721725][T14704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.721746][T14704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.721765][T14704] ____sys_sendmsg+0xa4e/0xac0 [ 955.721779][T14704] ? __might_fault+0xaf/0x130 [ 955.721800][T14704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 955.721818][T14704] ? import_iovec+0x73/0xa0 [ 955.721836][T14704] ___sys_sendmsg+0x2a5/0x360 [ 955.721848][T14704] ? __lock_acquire+0x6b5/0x2cf0 [ 955.721864][T14704] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.721897][T14704] ? __fget_files+0x2a/0x420 [ 955.721908][T14704] ? __fget_files+0x3a6/0x420 [ 955.721924][T14704] __x64_sys_sendmsg+0x1c3/0x2a0 [ 955.721939][T14704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 955.721957][T14704] ? __pfx_ksys_write+0x10/0x10 [ 955.721980][T14704] do_syscall_64+0xe2/0xf80 [ 955.721995][T14704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.722006][T14704] ? trace_irq_disable+0x37/0x100 [ 955.722022][T14704] ? clear_bhb_loop+0x60/0xb0 [ 955.722036][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.722048][T14704] RIP: 0033:0x7f2064e3aeb9 [ 955.722061][T14704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.722072][T14704] RSP: 002b:00007f206308e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.722087][T14704] RAX: ffffffffffffffda RBX: 00007f20650b5fa0 RCX: 00007f2064e3aeb9 [ 955.722096][T14704] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 955.722104][T14704] RBP: 00007f206308e090 R08: 0000000000000000 R09: 0000000000000000 [ 955.722112][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.722119][T14704] R13: 00007f20650b6038 R14: 00007f20650b5fa0 R15: 00007fff0ba16938 [ 955.722138][T14704] [ 956.998064][ T5878] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 957.168028][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 957.170162][ T5878] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 957.170184][ T5878] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 957.170200][ T5878] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 957.170215][ T5878] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 957.170248][ T5878] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 957.170262][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.349762][T14722] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 957.363809][T14722] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 957.364398][T14722] vhci_hcd vhci_hcd.0: Device attached [ 957.498010][ T5878] usb 7-1: GET_CAPABILITIES returned 0 [ 957.498068][ T5878] usbtmc 7-1:16.0: can't read capabilities [ 957.724259][ T5878] usb 7-1: USB disconnect, device number 9 [ 957.908885][ T5895] usb 40-1: SetAddress Request (2) to port 0 [ 957.908945][ T5895] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 958.496590][T14723] vhci_hcd: connection reset by peer [ 958.496984][ T1226] vhci_hcd vhci_hcd.3: stop threads [ 958.497015][ T1226] vhci_hcd vhci_hcd.3: release socket [ 958.497101][ T1226] vhci_hcd vhci_hcd.3: disconnect device [ 958.668195][ T7968] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 958.823738][ T7968] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 958.823760][ T7968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.823774][ T7968] usb 7-1: Product: syz [ 958.823782][ T7968] usb 7-1: Manufacturer: syz [ 958.823792][ T7968] usb 7-1: SerialNumber: syz [ 958.866460][ T7968] usb 7-1: config 0 descriptor?? [ 958.881167][ T7968] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 959.719841][ T7968] sonixb 7-1:0.0: Error writing register 01: -110 [ 959.719960][ T7968] sonixb 7-1:0.0: probe with driver sonixb failed with error -110 [ 962.207695][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2494'. [ 962.978364][ T5895] usb 40-1: device descriptor read/8, error -110 [ 963.062128][ T31] usb 7-1: USB disconnect, device number 10 [ 963.406559][ T37] audit: type=1326 audit(1770372688.631:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14770 comm="syz.5.2496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe9524aeb9 code=0x0 [ 963.523229][ T5895] usb usb40-port1: attempt power cycle [ 963.569237][ T31] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 963.718139][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 963.721710][ T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 963.721734][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 963.721749][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 963.721765][ T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.721790][ T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 963.721804][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.953760][ T31] usb 7-1: GET_CAPABILITIES returned 0 [ 963.953793][ T31] usbtmc 7-1:16.0: can't read capabilities [ 964.160439][ T5878] usb 7-1: USB disconnect, device number 11 [ 964.314157][ T5895] usb usb40-port1: unable to enumerate USB device [ 968.377937][ T31] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 968.530074][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 968.534685][ T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 968.534723][ T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 968.534750][ T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 968.534776][ T31] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.534823][ T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 968.534848][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.749871][ T31] usb 6-1: GET_CAPABILITIES returned 0 [ 968.749938][ T31] usbtmc 6-1:16.0: can't read capabilities [ 968.757326][T14838] FAULT_INJECTION: forcing a failure. [ 968.757326][T14838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.757368][T14838] CPU: 1 UID: 0 PID: 14838 Comm: syz.2.2518 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 968.757399][T14838] Tainted: [L]=SOFTLOCKUP [ 968.757407][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 968.757421][T14838] Call Trace: [ 968.757430][T14838] [ 968.757440][T14838] dump_stack_lvl+0xe8/0x150 [ 968.757477][T14838] should_fail_ex+0x46b/0x600 [ 968.757508][T14838] _copy_from_user+0x2d/0xb0 [ 968.757538][T14838] kstrtouint_from_user+0xd6/0x180 [ 968.757568][T14838] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 968.757612][T14838] proc_fail_nth_write+0x8e/0x210 [ 968.757641][T14838] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 968.757674][T14838] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 968.757704][T14838] vfs_write+0x2a3/0xba0 [ 968.757743][T14838] ? __pfx_vfs_write+0x10/0x10 [ 968.757775][T14838] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 968.757810][T14838] ? lockdep_hardirqs_on+0x7a/0x110 [ 968.757838][T14838] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 968.757866][T14838] ? mutex_lock_nested+0x152/0x1d0 [ 968.757887][T14838] ? fdget_pos+0x252/0x320 [ 968.757925][T14838] ksys_write+0x156/0x270 [ 968.757955][T14838] ? __pfx_ksys_write+0x10/0x10 [ 968.757994][T14838] do_syscall_64+0xe2/0xf80 [ 968.758022][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.758043][T14838] ? clear_bhb_loop+0x60/0xb0 [ 968.758069][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.758089][T14838] RIP: 0033:0x7fd7f0dcb78e [ 968.758110][T14838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 968.758128][T14838] RSP: 002b:00007fd7ef044fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 968.758152][T14838] RAX: ffffffffffffffda RBX: 00007fd7ef0456c0 RCX: 00007fd7f0dcb78e [ 968.758168][T14838] RDX: 0000000000000001 RSI: 00007fd7ef0450a0 RDI: 0000000000000003 [ 968.758182][T14838] RBP: 00007fd7ef045090 R08: 0000000000000000 R09: 0000000000000000 [ 968.758197][T14838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.758210][T14838] R13: 00007fd7f1086128 R14: 00007fd7f1086090 R15: 00007ffcc7069008 [ 968.758247][T14838] [ 968.998203][ T31] usb 6-1: USB disconnect, device number 29 [ 970.653712][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2527'. [ 972.848137][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 973.457998][ T5895] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 974.229227][ T5878] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 974.418004][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 974.449801][ T5878] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 974.449840][ T5878] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 974.449876][ T5878] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 974.449902][ T5878] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.449948][ T5878] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 974.449973][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.507993][T14883] FAULT_INJECTION: forcing a failure. [ 974.507993][T14883] name failslab, interval 1, probability 0, space 0, times 0 [ 974.508032][T14883] CPU: 1 UID: 0 PID: 14883 Comm: syz.3.2534 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 974.508060][T14883] Tainted: [L]=SOFTLOCKUP [ 974.508067][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 974.508079][T14883] Call Trace: [ 974.508087][T14883] [ 974.508096][T14883] dump_stack_lvl+0xe8/0x150 [ 974.508137][T14883] should_fail_ex+0x46b/0x600 [ 974.508163][T14883] ? vm_area_dup+0x2b/0x670 [ 974.508181][T14883] should_failslab+0xa8/0x100 [ 974.508211][T14883] ? vm_area_dup+0x2b/0x670 [ 974.508227][T14883] kmem_cache_alloc_noprof+0x83/0x6a0 [ 974.508262][T14883] vm_area_dup+0x2b/0x670 [ 974.508286][T14883] __split_vma+0x1d5/0xa30 [ 974.508319][T14883] ? __pfx___split_vma+0x10/0x10 [ 974.508352][T14883] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 974.508389][T14883] vms_gather_munmap_vmas+0x2f1/0x1320 [ 974.508409][T14883] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 974.508448][T14883] ? mtree_range_walk+0x6aa/0x840 [ 974.508479][T14883] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 974.508511][T14883] ? mas_find+0xa7d/0xd30 [ 974.508541][T14883] mmap_region+0x85c/0x1f50 [ 974.508583][T14883] ? __pfx_mmap_region+0x10/0x10 [ 974.508666][T14883] ? __lock_acquire+0x6b5/0x2cf0 [ 974.508711][T14883] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 974.508747][T14883] ? cap_mmap_addr+0xaf/0x100 [ 974.508775][T14883] ? bpf_lsm_mmap_addr+0x9/0x20 [ 974.508794][T14883] ? security_mmap_addr+0x71/0x240 [ 974.508822][T14883] ? shmem_mapping+0xd/0x50 [ 974.508846][T14883] ? memfd_check_seals_mmap+0x16e/0x210 [ 974.508869][T14883] do_mmap+0xc2f/0x10c0 [ 974.508899][T14883] ? __pfx_mtree_load+0x10/0x10 [ 974.508924][T14883] ? __pfx_do_mmap+0x10/0x10 [ 974.508955][T14883] ? mmap_write_lock_killable+0x1f/0xc0 [ 974.508987][T14883] __se_sys_remap_file_pages+0x6dd/0x8a0 [ 974.509030][T14883] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 974.509064][T14883] ? rcu_is_watching+0x15/0xb0 [ 974.509097][T14883] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 974.509134][T14883] do_syscall_64+0xe2/0xf80 [ 974.509159][T14883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.509178][T14883] ? trace_irq_disable+0x37/0x100 [ 974.509203][T14883] ? clear_bhb_loop+0x60/0xb0 [ 974.509227][T14883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.509247][T14883] RIP: 0033:0x7efd4cb2aeb9 [ 974.509265][T14883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.509282][T14883] RSP: 002b:00007efd4ad3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 974.509304][T14883] RAX: ffffffffffffffda RBX: 00007efd4cda6180 RCX: 00007efd4cb2aeb9 [ 974.509318][T14883] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 974.509332][T14883] RBP: 00007efd4ad3c090 R08: 0000000004000000 R09: 0000000000000000 [ 974.509345][T14883] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 974.509357][T14883] R13: 00007efd4cda6218 R14: 00007efd4cda6180 R15: 00007ffe08800498 [ 974.509390][T14883] [ 974.919696][ T5878] usb 5-1: GET_CAPABILITIES returned 0 [ 974.919755][ T5878] usbtmc 5-1:16.0: can't read capabilities [ 975.131281][T11135] usb 5-1: USB disconnect, device number 54 [ 975.788114][T14898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2541'. [ 977.182670][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2531'. [ 978.020614][T14907] netlink: 'syz.4.2543': attribute type 12 has an invalid length. [ 978.020639][T14907] netlink: 'syz.4.2543': attribute type 29 has an invalid length. [ 978.020653][T14907] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2543'. [ 978.020678][T14907] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2543'. [ 979.158207][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'. [ 979.158239][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'. [ 979.158257][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'. [ 979.166459][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'. [ 979.166601][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'. [ 979.166625][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'. [ 979.342932][ T5878] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 979.515702][ T5878] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 979.515733][ T5878] usb 7-1: config 1 has an invalid interface association descriptor of length 4, skipping [ 979.515753][ T5878] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 979.515773][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.719664][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.721731][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.843203][ T5878] usb 7-1: string descriptor 0 read error: -71 [ 979.843370][ T5878] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.843394][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.880456][ T5878] usb 7-1: can't set config #1, error -71 [ 979.898571][ T5878] usb 7-1: USB disconnect, device number 12 [ 981.040753][T14938] __nla_validate_parse: 35 callbacks suppressed [ 981.040796][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 983.438159][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2555'. [ 986.509364][T14981] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 987.158907][T14993] netlink: 'syz.6.2569': attribute type 11 has an invalid length. [ 987.158934][T14993] netem: change failed [ 988.047271][T15012] evm: overlay not supported [ 989.034655][T15031] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.102016][T15031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.105366][T15031] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.105470][T15031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.208913][T15031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 989.634736][T15044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 989.653909][T15044] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 989.656764][T15044] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 989.700470][T15044] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 989.701343][T15044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 990.703371][T15043] chnl_net:caif_netlink_parms(): no params data found [ 990.780402][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2598'. [ 990.780431][T15064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2598'. [ 991.347686][T15043] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.348521][T15043] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.348783][T15043] bridge_slave_0: entered allmulticast mode [ 991.351385][T15043] bridge_slave_0: entered promiscuous mode [ 991.361097][T15043] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.363337][T15043] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.363560][T15043] bridge_slave_1: entered allmulticast mode [ 991.366115][T15043] bridge_slave_1: entered promiscuous mode [ 991.606242][T15043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.652629][T15043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.765874][T15043] team0: Port device team_slave_0 added [ 991.787583][T15043] team0: Port device team_slave_1 added [ 991.838939][ T5813] Bluetooth: hci2: command tx timeout [ 991.908609][T15043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.908629][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.908669][T15043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.911331][T15043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.911347][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.911377][T15043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.364380][T15043] hsr_slave_0: entered promiscuous mode [ 992.383419][T15043] hsr_slave_1: entered promiscuous mode [ 992.390790][T15043] debugfs: 'hsr0' already exists in 'hsr' [ 992.390819][T15043] Cannot create hsr debugfs directory [ 992.888336][T15100] netlink: 'syz.5.2609': attribute type 1 has an invalid length. [ 993.918876][ T5813] Bluetooth: hci2: command tx timeout [ 994.394444][T15124] ptrace attach of "./syz-executor exec"[15127] was attempted by "./syz-executor exec"[15124] [ 994.929157][T15143] netlink: 'syz.6.2624': attribute type 13 has an invalid length. [ 996.004403][ T1225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.009062][ T5813] Bluetooth: hci2: command tx timeout [ 996.349929][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.726619][ T1225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.274745][ T37] audit: type=1800 audit(1770372722.491:696): pid=15212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2652" name="file0" dev="overlay" ino=1447 res=0 errno=0 [ 997.301774][ T1225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.928656][T15225] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 998.043946][T15224] kvm: pic: non byte read [ 998.050622][T15224] kvm: pic: level sensitive irq not supported [ 998.050858][T15224] kvm: pic: non byte read [ 998.051233][T15224] kvm: pic: non byte read [ 998.054166][T15224] kvm: pic: non byte read [ 998.054741][T15224] kvm: pic: single mode not supported [ 998.054753][T15224] kvm: pic: level sensitive irq not supported [ 998.054844][T15224] kvm: pic: non byte read [ 998.078721][ T5813] Bluetooth: hci2: command tx timeout [ 998.118386][T15043] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 998.504205][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.504290][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.833888][ T1225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.879646][T15043] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 998.956657][T15043] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 999.036254][T15043] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 999.660415][ T1225] bridge_slave_1: left allmulticast mode [ 999.660447][ T1225] bridge_slave_1: left promiscuous mode [ 999.660717][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.762221][ T1225] bridge_slave_0: left allmulticast mode [ 999.762255][ T1225] bridge_slave_0: left promiscuous mode [ 999.762563][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.200623][T15291] 9p: Bad value for 'rfdno' [ 1003.078997][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.161576][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.182309][ T1225] bond0 (unregistering): Released all slaves [ 1003.226642][T15300] 8021q: VLANs not supported on ip6_vti0 [ 1003.534164][T15043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.614940][T15043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.671359][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.671544][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.688995][ T1225] IPVS: stopping backup sync thread 11266 ... [ 1003.737697][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.738223][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.907404][T15360] sctp: [Deprecated]: syz.3.2699 (pid 15360) Use of int in max_burst socket option deprecated. [ 1004.907404][T15360] Use struct sctp_assoc_value instead [ 1005.969696][ T1225] hsr_slave_0: left promiscuous mode [ 1006.009588][ T1225] hsr_slave_1: left promiscuous mode [ 1006.010762][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.010792][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.074770][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.074802][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.245227][ T1225] veth1_macvtap: left promiscuous mode [ 1006.245298][ T1225] veth0_macvtap: left promiscuous mode [ 1006.245451][ T1225] veth1_vlan: left promiscuous mode [ 1006.245555][ T1225] veth0_vlan: left promiscuous mode [ 1009.189686][ T37] audit: type=1800 audit(1770372734.411:697): pid=15419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2719" name="file0" dev="overlay" ino=3134 res=0 errno=0 [ 1011.668655][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 1011.920192][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 1013.608587][T15439] netlink: 'syz.3.2726': attribute type 1 has an invalid length. [ 1013.682534][T15441] netlink: 'syz.3.2727': attribute type 1 has an invalid length. [ 1014.406207][T15457] 9p: Bad value for 'rfdno' [ 1015.256092][T15043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.964218][T15043] veth0_vlan: entered promiscuous mode [ 1015.978141][T15043] veth1_vlan: entered promiscuous mode [ 1016.164870][T15043] veth0_macvtap: entered promiscuous mode [ 1016.200740][T15043] veth1_macvtap: entered promiscuous mode [ 1016.357543][T15043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.459497][T15043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.523387][ T3554] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.525820][ T3554] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.527014][ T3554] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.527201][ T3554] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.555721][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2747'. [ 1016.610980][ T1225] IPVS: stop unused estimator thread 0... [ 1016.856594][ T37] audit: type=1326 audit(1770372742.081:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15515 comm="syz.5.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9524aeb9 code=0x7ffc0000 [ 1016.856651][ T37] audit: type=1326 audit(1770372742.081:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15515 comm="syz.5.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9524aeb9 code=0x7ffc0000 [ 1016.912629][ T37] audit: type=1326 audit(1770372742.141:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15515 comm="syz.5.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe9524aeb9 code=0x7ffc0000 [ 1016.946152][ T37] audit: type=1326 audit(1770372742.141:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15515 comm="syz.5.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9524aeb9 code=0x7ffc0000 [ 1016.946214][ T37] audit: type=1326 audit(1770372742.171:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15515 comm="syz.5.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9524aeb9 code=0x7ffc0000 [ 1017.097697][T15518] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1017.097729][T15518] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1017.110209][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.110231][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.354418][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.354442][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.228180][T15553] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1019.110848][T15579] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1019.135610][T15582] loop2: detected capacity change from 0 to 7 [ 1019.208081][T15520] loop2: [ 1019.208122][T15520] loop2: partition table partially beyond EOD, truncated [ 1019.213732][T15044] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1019.247020][T15044] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1019.275196][T15044] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1019.294638][T15044] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1019.308187][T15044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1019.326440][T15582] loop2: [ 1019.326477][T15582] loop2: partition table partially beyond EOD, truncated [ 1020.485301][T15583] chnl_net:caif_netlink_parms(): no params data found [ 1020.824928][T15583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.825152][T15583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.825361][T15583] bridge_slave_0: entered allmulticast mode [ 1020.830612][T15583] bridge_slave_0: entered promiscuous mode [ 1020.834136][T15583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.834352][T15583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.834552][T15583] bridge_slave_1: entered allmulticast mode [ 1020.837165][T15583] bridge_slave_1: entered promiscuous mode [ 1020.897157][T15583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.923680][T15583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.147164][T15644] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2785'. [ 1021.170720][T15583] team0: Port device team_slave_0 added [ 1021.358913][ T5813] Bluetooth: hci1: command tx timeout [ 1021.454533][T15583] team0: Port device team_slave_1 added [ 1021.664416][T15583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.664438][T15583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.664467][T15583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.667117][T15583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.667132][T15583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.667162][T15583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.077701][T15583] hsr_slave_0: entered promiscuous mode [ 1022.098656][T15583] hsr_slave_1: entered promiscuous mode [ 1022.580199][T15669] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1023.441436][ T5813] Bluetooth: hci1: command tx timeout [ 1023.889149][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2804'. [ 1023.965167][T15583] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1024.049796][T15583] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1024.112495][T15583] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1024.161127][T15583] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1024.607261][T15583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.748576][T15583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.773187][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.773478][T10557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.813591][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.814641][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.518265][ T5813] Bluetooth: hci1: command tx timeout [ 1026.115738][T15583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.194214][T15583] veth0_vlan: entered promiscuous mode [ 1027.281214][T15583] veth1_vlan: entered promiscuous mode [ 1027.441774][T15583] veth0_macvtap: entered promiscuous mode [ 1027.452044][T15583] veth1_macvtap: entered promiscuous mode [ 1027.513439][T15583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.593755][T15583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.598989][ T5813] Bluetooth: hci1: command tx timeout [ 1027.675379][ T87] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.675845][ T87] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.676078][ T87] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.676782][ T87] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.418142][T10557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.418166][T10557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.550942][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.550966][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.178515][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2764'. [ 1029.365648][T15802] bond1: Invalid ad_actor_system MAC address. [ 1029.365666][T15802] bond1: option ad_actor_system: invalid value (1) [ 1029.489782][T15802] bond1 (unregistering): Released all slaves [ 1030.472233][T15836] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 1031.605151][T15852] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2858'. [ 1031.906247][T15044] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1031.932283][T15044] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1031.936084][T15044] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1031.962573][T15044] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1032.002747][T15044] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1032.853431][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2865'. [ 1033.596529][ T37] audit: type=1326 audit(1770372758.821:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6dbaeb9 code=0x7ffc0000 [ 1033.596846][ T37] audit: type=1326 audit(1770372758.821:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6dbaeb9 code=0x7ffc0000 [ 1033.597364][ T37] audit: type=1326 audit(1770372758.821:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cb6d7b78e code=0x7ffc0000 [ 1033.603159][ T37] audit: type=1326 audit(1770372758.831:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cb6d7b78e code=0x7ffc0000 [ 1033.604406][ T37] audit: type=1326 audit(1770372758.831:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6dbaeb9 code=0x7ffc0000 [ 1033.611845][ T37] audit: type=1326 audit(1770372758.831:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6dbaeb9 code=0x7ffc0000 [ 1033.614828][ T37] audit: type=1326 audit(1770372758.841:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f0cb6dbaeb9 code=0x7ffc0000 [ 1033.614879][ T37] audit: type=1326 audit(1770372758.841:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6dbaeb9 code=0x7ffc0000 [ 1033.616015][ T37] audit: type=1326 audit(1770372758.841:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0cb6dbaeb9 code=0x7ffc0000 [ 1033.616266][ T37] audit: type=1326 audit(1770372758.841:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15884 comm="syz.7.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb6dbaeb9 code=0x7ffc0000 [ 1034.158974][ T5813] Bluetooth: hci7: command tx timeout [ 1034.823641][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2877'. [ 1035.115644][ T1221] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.304840][T15857] chnl_net:caif_netlink_parms(): no params data found [ 1035.617320][T15925] syzkaller0: entered promiscuous mode [ 1035.617352][T15925] syzkaller0: entered allmulticast mode [ 1035.683690][T15948] overlayfs: failed to clone lowerpath [ 1036.041745][ T1221] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.122707][T15964] overlayfs: failed to clone upperpath [ 1036.262466][ T5813] Bluetooth: hci7: command tx timeout [ 1038.264261][ T1221] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.317905][ T5813] Bluetooth: hci7: command tx timeout [ 1038.871645][ T1221] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.972337][T15857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.972536][T15857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.972814][T15857] bridge_slave_0: entered allmulticast mode [ 1038.996848][T15857] bridge_slave_0: entered promiscuous mode [ 1039.081856][T15857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.082888][T15857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.083129][T15857] bridge_slave_1: entered allmulticast mode [ 1039.086096][T15857] bridge_slave_1: entered promiscuous mode [ 1040.030133][T15857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.093925][T15857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.261710][T15857] team0: Port device team_slave_0 added [ 1040.298156][T15857] team0: Port device team_slave_1 added [ 1040.398049][ T5813] Bluetooth: hci7: command tx timeout [ 1040.750449][T15857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.750468][T15857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.750493][T15857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.006706][T15857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.006727][T15857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.006759][T15857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.081607][T16049] overlayfs: failed to clone upperpath [ 1042.081823][ T1221] bridge_slave_1: left allmulticast mode [ 1042.081856][ T1221] bridge_slave_1: left promiscuous mode [ 1042.082140][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.181935][ T1221] bridge_slave_0: left allmulticast mode [ 1042.181968][ T1221] bridge_slave_0: left promiscuous mode [ 1042.182264][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.470262][T16083] fuse: Bad value for 'fd' [ 1042.975853][T16094] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1044.054938][T16106] overlayfs: failed to clone upperpath [ 1046.408741][ T1221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.478107][ T1221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.540699][ T1221] bond0 (unregistering): Released all slaves [ 1047.019715][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2937'. [ 1047.027155][T16116] lo: Caught tx_queue_len zero misconfig [ 1047.204789][T15857] hsr_slave_0: entered promiscuous mode [ 1047.206349][T15857] hsr_slave_1: entered promiscuous mode [ 1047.207484][T15857] debugfs: 'hsr0' already exists in 'hsr' [ 1047.207508][T15857] Cannot create hsr debugfs directory [ 1047.207712][ T1221] tipc: Disabling bearer [ 1047.208614][ T1221] tipc: Left network mode [ 1047.309103][T16132] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2938'. [ 1047.376122][T16124] vlan2: entered promiscuous mode [ 1047.376148][T16124] gretap0: entered promiscuous mode [ 1047.413568][ T1221] IPVS: stopping backup sync thread 10072 ... [ 1047.920883][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1047.920904][ T37] audit: type=1326 audit(1770372773.151:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.7.2944" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cb6dbaeb9 code=0x0 [ 1048.900483][T16176] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1048.980480][T16176] kvm: pic: level sensitive irq not supported [ 1048.980671][T16176] kvm: pic: non byte read [ 1048.981062][T16176] kvm: pic: level sensitive irq not supported [ 1048.981793][T16176] kvm: pic: non byte read [ 1048.983501][T16176] kvm: pic: level sensitive irq not supported [ 1048.985065][T16176] kvm: pic: non byte read [ 1048.990056][T16176] kvm: pic: level sensitive irq not supported [ 1048.991575][T16176] kvm: pic: non byte read [ 1050.434982][T16225] ptrace attach of "./syz-executor exec"[16228] was attempted by "./syz-executor exec"[16225] [ 1050.577457][T16232] ptrace attach of "./syz-executor exec"[16231] was attempted by "./syz-executor exec"[16232] [ 1050.911067][T16234] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1050.963018][T16234] kvm: pic: level sensitive irq not supported [ 1050.963185][T16234] kvm: pic: non byte read [ 1050.963654][T16234] kvm: pic: level sensitive irq not supported [ 1050.963781][T16234] kvm: pic: non byte read [ 1050.964030][T16234] kvm: pic: level sensitive irq not supported [ 1050.964083][T16234] kvm: pic: non byte read [ 1050.964403][T16234] kvm: pic: level sensitive irq not supported [ 1050.964467][T16234] kvm: pic: non byte read [ 1051.018518][ T1221] hsr_slave_0: left promiscuous mode [ 1051.077921][ T1221] hsr_slave_1: left promiscuous mode [ 1051.079171][ T1221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.079198][ T1221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.111747][ T1221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.111778][ T1221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.352632][ T1221] batadv0: left promiscuous mode [ 1051.352801][ T1221] veth1_macvtap: left promiscuous mode [ 1051.352912][ T1221] veth0_macvtap: left promiscuous mode [ 1051.353220][ T1221] veth1_vlan: left promiscuous mode [ 1051.353429][ T1221] veth0_vlan: left promiscuous mode [ 1055.828657][ T1221] team0 (unregistering): Port device team_slave_1 removed [ 1056.140006][ T1221] team0 (unregistering): Port device team_slave_0 removed [ 1058.656948][T16254] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1059.162017][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3000'. [ 1059.843961][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.844073][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.807672][ T1221] IPVS: stop unused estimator thread 0... [ 1062.606456][T16380] netlink: 288 bytes leftover after parsing attributes in process `syz.8.3022'. [ 1063.311114][T15857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1063.357933][ T5949] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1063.363097][T15857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1063.424306][T15857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1063.459678][T15857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1063.508030][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 1063.510528][ T5949] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1063.510566][ T5949] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1063.510590][ T5949] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1063.510614][ T5949] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.510658][ T5949] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1063.510682][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.811528][ T5949] usb 6-1: GET_CAPABILITIES returned 0 [ 1063.811584][ T5949] usbtmc 6-1:16.0: can't read capabilities [ 1064.030768][ T5945] usb 6-1: USB disconnect, device number 30 [ 1064.203022][T15857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.269052][T15857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.280496][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.280734][T10557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.346458][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.346637][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.174718][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3034'. [ 1067.664564][T15857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.020990][T15857] veth0_vlan: entered promiscuous mode [ 1068.082701][T15857] veth1_vlan: entered promiscuous mode [ 1068.246266][T15857] veth0_macvtap: entered promiscuous mode [ 1068.270166][T15857] veth1_macvtap: entered promiscuous mode [ 1068.345453][T15857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.376773][T15857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.406700][ T1220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.407184][ T1220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.407229][ T1220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.407266][ T1220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.353234][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.353262][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.368412][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.368436][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.367671][T16470] lo speed is unknown, defaulting to 1000 [ 1070.588789][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3046'. [ 1070.776638][T16470] lo speed is unknown, defaulting to 1000 [ 1070.802043][T16470] lo speed is unknown, defaulting to 1000 [ 1070.887996][T16479] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 1074.260426][T16500] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1074.360024][T16500] kvm: pic: level sensitive irq not supported [ 1074.360210][T16500] kvm: pic: non byte read [ 1074.360607][T16500] kvm: pic: level sensitive irq not supported [ 1074.360747][T16500] kvm: pic: non byte read [ 1074.364930][T16500] kvm: pic: level sensitive irq not supported [ 1074.381356][T16500] kvm: pic: non byte read [ 1074.413820][T16507] netlink: 288 bytes leftover after parsing attributes in process `syz.8.3056'. [ 1075.048707][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3057'. [ 1075.382306][T14680] lo speed is unknown, defaulting to 1000 [ 1075.384942][T16470] infiniband syz1: set active [ 1075.384967][T16470] infiniband syz1: added lo [ 1075.391629][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3058'. [ 1075.652438][T16470] RDS/IB: syz1: added [ 1075.653449][T16470] smc: adding ib device syz1 with port count 1 [ 1075.653749][T16470] smc: ib device syz1 port 1 has no pnetid [ 1075.657717][ T5945] lo speed is unknown, defaulting to 1000 [ 1075.724297][T16470] lo speed is unknown, defaulting to 1000 [ 1076.441509][ T5878] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1076.447968][ T5977] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1076.630427][ T5977] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 1076.630463][ T5977] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 1076.630485][ T5977] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1076.630528][ T5977] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1076.630576][ T5977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1076.630600][ T5977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1076.630624][ T5977] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1076.687186][ T5977] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1076.687219][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.687238][ T5977] usb 9-1: Manufacturer: 㝂 [ 1076.695343][ T5977] usb 9-1: config 0 descriptor?? [ 1076.729567][ T5977] hub 9-1:0.0: bad descriptor, ignoring hub [ 1076.729607][ T5977] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1076.783409][ T5977] input: 㝂 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input15 [ 1076.805019][ T5878] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1076.805048][ T5878] usb 6-1: config 1 has an invalid interface association descriptor of length 4, skipping [ 1076.805067][ T5878] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1076.805085][ T5878] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1076.903913][T16522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.924590][T16522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.011095][ T5878] usb 6-1: string descriptor 0 read error: -71 [ 1077.011346][ T5878] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1077.011457][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.593227][ T5878] usb 6-1: can't set config #1, error -71 [ 1078.595870][ T5878] usb 6-1: USB disconnect, device number 31 [ 1078.704238][T16308] udevd[16308]: setting mode of /dev/bus/usb/006/031 to 020664 failed: No such file or directory [ 1078.704453][T16308] udevd[16308]: setting owner of /dev/bus/usb/006/031 to uid=0, gid=0 failed: No such file or directory [ 1078.851150][ T5977] usb 9-1: USB disconnect, device number 2 [ 1080.220673][T16470] lo speed is unknown, defaulting to 1000 [ 1080.769468][T16540] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3067'. [ 1081.883189][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3068'. [ 1084.203062][T16470] lo speed is unknown, defaulting to 1000 [ 1085.299910][T16573] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1086.089681][T16575] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1086.503085][T16470] lo speed is unknown, defaulting to 1000 [ 1086.696913][T16582] netlink: 288 bytes leftover after parsing attributes in process `syz.8.3079'. [ 1087.062359][T15044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1087.093941][T15044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1087.106483][T15044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1087.118857][T15044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1087.123105][T15044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1087.320269][T16593] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 1087.749895][T16611] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1088.137132][T16585] lo speed is unknown, defaulting to 1000 [ 1088.562581][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3096'. [ 1088.566055][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3096'. [ 1089.186470][T16640] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3100'. [ 1089.203055][ T5813] Bluetooth: hci4: command tx timeout [ 1089.423521][T16470] lo speed is unknown, defaulting to 1000 [ 1091.282957][ T5813] Bluetooth: hci4: command tx timeout [ 1091.836036][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3107'. [ 1091.842608][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3107'. [ 1093.834617][ T5813] Bluetooth: hci4: command tx timeout [ 1094.397619][T16470] lo speed is unknown, defaulting to 1000 [ 1094.648482][T16585] chnl_net:caif_netlink_parms(): no params data found [ 1095.992461][T15044] Bluetooth: hci4: command tx timeout [ 1096.257356][T16700] [ 1096.257372][T16700] ====================================================== [ 1096.257383][T16700] WARNING: possible circular locking dependency detected [ 1096.257396][T16700] syzkaller #0 Tainted: G L [ 1096.257409][T16700] ------------------------------------------------------ [ 1096.257418][T16700] syz.3.3117/16700 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1096.257432][T16700] ffff88803b31d920 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x104/0xda0 [ 1096.257494][T16700] [ 1096.257494][T16700] but task is already holding lock: [ 1096.257502][T16700] ffff88803b31ded8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 1096.257559][T16700] [ 1096.257559][T16700] which lock already depends on the new lock. [ 1096.257559][T16700] [ 1096.257567][T16700] [ 1096.257567][T16700] the existing dependency chain (in reverse order) is: [ 1096.257576][T16700] [ 1096.257576][T16700] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1096.257610][T16700] lock_sock_nested+0x3e/0x130 [ 1096.257638][T16700] smc_listen_out+0x109/0x3e0 [ 1096.257666][T16700] smc_listen_work+0x813/0x13f0 [ 1096.257694][T16700] process_scheduled_works+0xaec/0x17a0 [ 1096.257713][T16700] worker_thread+0xda6/0x1360 [ 1096.257737][T16700] kthread+0x726/0x8b0 [ 1096.257756][T16700] ret_from_fork+0x51b/0xa40 [ 1096.257774][T16700] ret_from_fork_asm+0x1a/0x30 [ 1096.257804][T16700] [ 1096.257804][T16700] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1096.257834][T16700] __lock_acquire+0x15a5/0x2cf0 [ 1096.257856][T16700] lock_acquire+0x106/0x330 [ 1096.257875][T16700] __flush_work+0x6df/0xda0 [ 1096.257897][T16700] __cancel_work_sync+0xbe/0x110 [ 1096.257919][T16700] smc_clcsock_release+0x60/0xf0 [ 1096.257948][T16700] __smc_release+0x6a0/0x810 [ 1096.257969][T16700] smc_close_non_accepted+0xd5/0x1f0 [ 1096.257992][T16700] smc_close_active+0xb9b/0xf40 [ 1096.258133][T16700] __smc_release+0xa0/0x810 [ 1096.258156][T16700] smc_release+0x2eb/0x5a0 [ 1096.258177][T16700] sock_close+0xc3/0x240 [ 1096.258200][T16700] __fput+0x45e/0xa80 [ 1096.258219][T16700] task_work_run+0x1d9/0x270 [ 1096.258249][T16700] exit_to_user_mode_loop+0xed/0x480 [ 1096.258271][T16700] do_syscall_64+0x2b7/0xf80 [ 1096.258296][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.258317][T16700] [ 1096.258317][T16700] other info that might help us debug this: [ 1096.258317][T16700] [ 1096.258325][T16700] Possible unsafe locking scenario: [ 1096.258325][T16700] [ 1096.258333][T16700] CPU0 CPU1 [ 1096.258340][T16700] ---- ---- [ 1096.258348][T16700] lock(sk_lock-AF_SMC/1); [ 1096.258372][T16700] lock((work_completion)(&new_smc->smc_listen_work)); [ 1096.258391][T16700] lock(sk_lock-AF_SMC/1); [ 1096.258413][T16700] lock((work_completion)(&new_smc->smc_listen_work)); [ 1096.258429][T16700] [ 1096.258429][T16700] *** DEADLOCK *** [ 1096.258429][T16700] [ 1096.258435][T16700] 3 locks held by syz.3.3117/16700: [ 1096.258448][T16700] #0: ffff88803d4e22f8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1096.258510][T16700] #1: ffff88803b31ded8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 1096.258566][T16700] #2: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x104/0xda0 [ 1096.258630][T16700] [ 1096.258630][T16700] stack backtrace: [ 1096.258646][T16700] CPU: 1 UID: 0 PID: 16700 Comm: syz.3.3117 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1096.258677][T16700] Tainted: [L]=SOFTLOCKUP [ 1096.258685][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1096.258699][T16700] Call Trace: [ 1096.258707][T16700] [ 1096.258717][T16700] dump_stack_lvl+0xe8/0x150 [ 1096.258746][T16700] print_circular_bug+0x2e1/0x300 [ 1096.258777][T16700] check_noncircular+0x12e/0x150 [ 1096.258810][T16700] __lock_acquire+0x15a5/0x2cf0 [ 1096.258837][T16700] ? do_raw_spin_lock+0x12b/0x2f0 [ 1096.258876][T16700] ? __flush_work+0x104/0xda0 [ 1096.258899][T16700] lock_acquire+0x106/0x330 [ 1096.258921][T16700] ? __flush_work+0x104/0xda0 [ 1096.258949][T16700] ? __flush_work+0x104/0xda0 [ 1096.258974][T16700] __flush_work+0x6df/0xda0 [ 1096.258997][T16700] ? __flush_work+0x104/0xda0 [ 1096.259020][T16700] ? __flush_work+0x104/0xda0 [ 1096.259054][T16700] ? __pfx___flush_work+0x10/0x10 [ 1096.259079][T16700] ? __pfx_wq_barrier_func+0x10/0x10 [ 1096.259110][T16700] ? __cancel_work_sync+0x5c/0x110 [ 1096.259136][T16700] __cancel_work_sync+0xbe/0x110 [ 1096.259162][T16700] smc_clcsock_release+0x60/0xf0 [ 1096.259195][T16700] __smc_release+0x6a0/0x810 [ 1096.259220][T16700] ? lockdep_hardirqs_on+0x7a/0x110 [ 1096.259250][T16700] smc_close_non_accepted+0xd5/0x1f0 [ 1096.259277][T16700] smc_close_active+0xb9b/0xf40 [ 1096.259308][T16700] ? smc_close_active+0x420/0xf40 [ 1096.259338][T16700] ? __pfx_sock_def_readable+0x10/0x10 [ 1096.259367][T16700] __smc_release+0xa0/0x810 [ 1096.259390][T16700] ? lockdep_hardirqs_on+0x7a/0x110 [ 1096.259420][T16700] smc_release+0x2eb/0x5a0 [ 1096.259446][T16700] sock_close+0xc3/0x240 [ 1096.259472][T16700] ? __pfx_sock_close+0x10/0x10 [ 1096.259498][T16700] __fput+0x45e/0xa80 [ 1096.259524][T16700] task_work_run+0x1d9/0x270 [ 1096.259553][T16700] ? __pfx_task_work_run+0x10/0x10 [ 1096.259586][T16700] exit_to_user_mode_loop+0xed/0x480 [ 1096.259609][T16700] ? rcu_is_watching+0x15/0xb0 [ 1096.259639][T16700] do_syscall_64+0x2b7/0xf80 [ 1096.259666][T16700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.259687][T16700] ? trace_irq_disable+0x37/0x100 [ 1096.259715][T16700] ? clear_bhb_loop+0x60/0xb0 [ 1096.259740][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.259761][T16700] RIP: 0033:0x7f256016aeb9 [ 1096.259781][T16700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.259801][T16700] RSP: 002b:00007fff0de79c18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1096.259824][T16700] RAX: 0000000000000000 RBX: 00007f25603e7da0 RCX: 00007f256016aeb9 [ 1096.259840][T16700] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1096.259854][T16700] RBP: 00007f25603e7da0 R08: 00007f25603e6038 R09: 0000000000000000 [ 1096.259869][T16700] R10: 00000000003ffc70 R11: 0000000000000246 R12: 000000000010bad7 [ 1096.259882][T16700] R13: 00007f25603e609c R14: 000000000010b888 R15: 00007f25603e6090 [ 1096.259906][T16700] [ 1096.377942][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3118'. [ 1096.378690][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3118'. [ 1096.617203][T16470] lo speed is unknown, defaulting to 1000 [ 1099.669994][ T87] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.889034][ T87] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.079854][ T87] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.269095][ T87] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.458202][ T87] bridge_slave_1: left allmulticast mode [ 1100.458229][ T87] bridge_slave_1: left promiscuous mode [ 1100.458412][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.509253][ T87] bridge_slave_0: left allmulticast mode [ 1100.509280][ T87] bridge_slave_0: left promiscuous mode [ 1100.509453][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.668439][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.729100][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.749091][ T87] bond0 (unregistering): Released all slaves [ 1102.958647][ T87] hsr_slave_0: left promiscuous mode [ 1102.997930][ T87] hsr_slave_1: left promiscuous mode [ 1102.998425][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.998440][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.059604][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.059632][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.138946][ T87] veth1_macvtap: left promiscuous mode [ 1103.138989][ T87] veth0_macvtap: left promiscuous mode [ 1103.139061][ T87] veth1_vlan: left promiscuous mode [ 1103.139112][ T87] veth0_vlan: left promiscuous mode [ 1105.139416][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1105.349000][ T87] team0 (unregistering): Port device team_slave_0 removed