last executing test programs:

10.429645379s ago: executing program 0 (id=724):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x0, 0x4, 0x101, 0x0})

10.118650587s ago: executing program 0 (id=725):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009050700000000000009058973"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) (fail_nth: 4)

8.757310244s ago: executing program 2 (id=731):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x18b502, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x14004001}, 0x0)
write$binfmt_script(r0, &(0x7f0000000980)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
r2 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x800, 0x1, 0xbfdffddc}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

8.040748485s ago: executing program 3 (id=732):
getpgrp(0x0)
prlimit64(0x0, 0x4, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173"], 0x5c}}, 0x0)

7.274624529s ago: executing program 0 (id=733):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c0000000b0a010100000000000000000a0000030900010073797a31000000000c0010400000000000000005140000001104010000000000000000000500000a767b1ee03e8777cf0de56a7c4582f34bd2493eba573e49dbc328384dbbd3b23fe67cea3c01141577ba09467e0ba4c3a55e2917"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000040000000060a010400000000000000000500000008000b000000000018002480140001800b00010074756e6e656c00000400028009000375f2cef42d0073797a1a00000000140000001100010000000000000000000000000a03706587d77512c957dd0227826b84fccb5829cc60c0ccba4cb4213f39f2a17e7f64ee69e4216fa64835a77923244cdea4872e810cb76a3356"], 0xb4}}, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000340)=[{0x8, 0x10, 0x0, 0x0}, {0x3ff, 0xa201, 0x0, 0x0}], 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0)
r5 = io_uring_setup(0x1a26, &(0x7f0000000000)={0x0, 0x2d00, 0x10, 0x3, 0x3b1})
io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, 0xffffffffffffffff, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000100)={0x80, 0x7fffffff, 0xc8, 0xd, 0xe85, 0x7fe})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x27, 0xe, 0x0, &(0x7f0000000300)="0300f90ffac42324e8797dadd1eb", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x4, 0x70bd28, 0x25dfdbfb, {0x1, 0x1}, ["", ""]}, 0x20}}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10)

7.202781989s ago: executing program 4 (id=734):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
fallocate(r5, 0x0, 0x0, 0x1001ed)
fallocate(r5, 0x3, 0xf00, 0x10000)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000440)={{0x3, 0x0, 0x2, 0x10000, 'syz1\x00', 0x95}, 0x3, 0x1, 0x5, r0, 0x3, 0x5, 'syz1\x00', &(0x7f0000000180)=['/dev/sg#\x00', '^\x00', '\\\x00'], 0xd})
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4})
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d0000000400000004000000a800000000000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000500"/28], 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0)

6.7354291s ago: executing program 2 (id=735):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x0, 0x4, 0x101, 0x0})

6.690550317s ago: executing program 3 (id=736):
r0 = landlock_create_ruleset(&(0x7f0000003840)={0x0, 0xc, 0x4}, 0x18, 0x1)
landlock_restrict_self(r0, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045009, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$sock(r1, &(0x7f00000035c0)=[{{&(0x7f0000000280)=@in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5605}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}], 0x30}}, {{&(0x7f0000000300)=@caif=@util={0x25, "3e5d5805915ffefb9ee3b47ff58b3f7c"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)="a1bb9053360cba032019b99f9517b1642e234d74dd99d357977ebe3129cfefd9cd3072447fe7b430a02f27d0cc4f427e9736390e1d636a002c28cbdb9434f8b5d311789a50df5a904157896302262bf03932a3054b9492", 0x57}, {&(0x7f0000000400)="d1a6a0b05d133ef3b1b0fa598f637a1a84c4d85c3957ccb42a257b3062290fe9d6342063692b27af3d8a422c3fe0598b2f8eed43d0fe8c61741981f4bfd861e8ff4a5ab8be685adead7d7ce6ccc373c2ff4823ff556dc34c4ea78c", 0x5b}, {&(0x7f0000000480)="69817afd97e9fb9d38be1b4a4b8da721815e94290eddca46e582aea84008bc7e38f3272aa68ec3dca921da28e962049e8fb60d5077927db3b584afe5b7618c242924", 0x42}, {&(0x7f0000000500)="9367f90bb761051b50b2215ca524f783b311cc2d06a7e51a4efcd6cf117929ed19a1e76c968aede0c495ddad963089dbea913e17cdd86f7146e61e7b2683bf7fced78dade61d46774e0e349fee4823e3ba83485cd729c5461b8e6150a1f08448ab0c6d67f1cdaecfe4a4178a5962a215da9e9cdc1923637e7186954279f687362c9563d7fe939f", 0x87}, {&(0x7f00000005c0)="45cbb2c13378530b2058733a4db0c5a3ff2fd4a158cd47e5780cb35a8b9440fe38bb1b", 0x23}, {&(0x7f0000000600)="6e2f86ce90da8cd4e4416ee7cdb8c8fd88c80d4c661f0ee5cdaf8f3a30cc6cdb4acbd284f8bae697f7fcbad520a06b2cb38823f4a47afe4edc92c2959e7fa4a857f9e8b6c3c1c1a9afb5a17d111d97a91596a861c04ae70399ad06472529ff11a53275716675a80217fb003d544c0ac5b035c16cd775225438c1efd6ed6638a0405d0f4e5b38988e5c3452180ef990ea8f9cc89fa72dfaca17b558598f64e1188460368ba88400faf64399731cea9699741125", 0xb3}, {&(0x7f00000006c0)="60d1011eaf7b0940869cf90f3b91b566ab48a23b3c96498a8b7104b36bcd4e5ea24a33a127c46a4ac2d7", 0x2a}], 0x7, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x30}}, {{&(0x7f00000007c0)=@generic={0x2b, "56e456b837a47ef9381eaab0b9a62027c43f948cc1144a11826d798041d4e56348bb896c92902537df94c2768b9b3f47f6bf791164eccf4576f281c183fd12d6d8564505af8eaefdb1158469befcf20db5f3ab95e8d95c66bf53c663403da8757328637d594097ff8259f5b068d7af27db1788c123c1e80d436a348cb1c0"}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000840)="d17e5be88ff71a441a80b52a10b6f9e3fd180cc6641d0630288422fb92fac309255f71226743514c4f8de45c573cde7c99dfeb74807d6beeedaea050ac18a03f97146e4aaa403f2babd345afced7eec0f5332e9f3ee07bd11ba2466fde80", 0x5e}], 0x1, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}}, {{&(0x7f0000000940)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9e3}}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000009c0)="3d7f4f8a67a010785f888bc53f4f98f62fd6efe8ad5e879ce3c0456cf88b357ff3c8bdbb9bb7935615903c628cc1713b45dd40db65ce66bb0e33c2b6d5072ae75d7dd69376bec8", 0x47}, {&(0x7f0000000a40)="3cf145700f1f2f9c488cec8ee4a1f01421e9e45af61b4557c85f0ccebf15be4da55eb71647542dfe0bb4dfc762ee7349b832630e9dff3daa0f71b2ebbebe19cf92bdd34c9862a1c064bf4cd3c9f1ea2dd2b134", 0x53}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="e006", 0x2}, {&(0x7f0000001b00)="342942e90980dea79c27d50632ffd4", 0xf}, {&(0x7f0000001b40)="a198a4715972071c6bfe5add80e6737b47c4a13c3bb13b4db3a791cf0250432309fc75dcb366401a20e0be2893f66dd1d578602cb78da9c3fc292effe237a8e109006f7a29e39bfd0c48f5e7edbbac693e7d93396bae7917332ed497a67fb25fae8c30fbf1c0f2dcd289d55b7cc269e190f096372c62f3a0fa21722109426a13d489d022bd4df103087fbfe3edc54352700cff47306a88847ec9e4811138adc3af91b680e8203044bd423006cf3551d8", 0xb0}, {&(0x7f0000001c00)="20700e149d74e9a71a078340c37f1cdce2fb4a158803700bd075cbb9de34306ae5984c6c8a8283fd4d1ee6e0738fbcdb9bce7036e27904196aa4ee59cce85aa34c71dcc909d31faec3e6304a07878ae186c40bb9703c7d9835cae60c7a017477a6cb464c37dd3cfc3f87004200d46b92eb4316aa205ec1675eeb2e5d8e11c680da852d052b67da5c07c2a771909904b61955307c19f798cddce7f55d8bc4ea9c3e8cb99820aba673", 0xa8}, {&(0x7f0000001cc0)="304987d10d37c750f526fc6507e43585dc0ecde8a26ff1cb3c3c17", 0x1b}], 0x8}}, {{&(0x7f0000001d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x2, {0xa, 0x4e22, 0x3, @local, 0x729b}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e00)="4addbf1d10d6f788212d1c0384b10abecd037db34ea3ec56435cd7092c14a542226a9affb0766df3867d78abe63e89b0dc10a8112813a41500a99bc1e65a1a50d956494d1e3fdd5196cc0a2584387ba99d934227f4400dbfcb0d357a6c674ac569c7665c7a136879817eeb99313cadca6ea6e896b5a6ed0ab5d72bed702fc1bdddcd04c1d2fa68841f990860eab192080c6d571017f6d1b379a28494c0f15751202997a28c2fa6ff24695bf5b093d6031e", 0xb1}, {&(0x7f0000001ec0)="0d9897780d280d48e9029ea8ce8d340a3579a9e50b43c555d532e65c1cd5e8f2637f0e914c32c63aa3d0d4a0dce8f07fc9f628b2a09f32c7ed21022084a527e67016ff5781a2a6144165364f86abc2f93c5fb93e223e5d798ac2a9363a1f393be07ab88779b7654866785205e0402586f6b8b7c0df147e95571d18adc2e24e87c5f4c9dd0086c4a9166ec2077ac192b949d6d753a6b62983e2169ed8930a5d188370180e483fec7b3399d5f09245ad49ab35048ddca8f031c582f04e367497dc2833f29caaec6484e59dc72f4d6cf3077d961a7cc69073f95da6123ac2f737a9b02cc650dec3e67a3cb3ba6528ba313d4061fe", 0xf3}, {&(0x7f0000001fc0)="28499f7a6294ceb85f618898a9a7749c0f263cfdcbb3401a450bf44f996be3a014515f9322fc6a35ec1f389207baac8b1e4a83db5e4d3779ddaa9ad40fa895024b1c6a1feacc39aac5d7752781ec9c3cdebe818541adc7f7cc4c", 0x5a}], 0x3, &(0x7f0000002080)=[@txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xa32}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0xa8}}, {{&(0x7f0000002140)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="cb3ec1b89942257a64", 0x9}, {&(0x7f0000003200)="4a24f96a3f88c6c4356fde0759849574960d06de0d1b00da99a34c6aa2f671f4a4408f864a2c631e9b2e08283731b92b17d966ded4a48ff2592afed93084c255e9", 0x41}, {&(0x7f0000003280)="0b37503984ee82cd862f5e873a8825358c130f09c125efd67cb2aa77ebea3e827efde9475974215a52cdb7fb4920e53f25887fcb6045c2a11f9f21a80f9b52a5fb9fc81886180e504658b61f97d9fd0b7f003b47145898279d3a7df6b6d2f531b4ed7a34c1a8c07cf762a0a18462471baad8e41c", 0x74}, {&(0x7f0000003300)="fb710d74345cfb97291aaa4830", 0xd}, {&(0x7f0000003340)="8499247e595afd9fedff7c9c26246afcbd9e9932c4be6b84c885dd6ddf7eb94e924376c436236b5ca3149e00e4fce4a300d9c6a13ef618b96a0718308323584c", 0x40}, {&(0x7f0000003380)="b230ba460602fcb0d20586e062097b64a8e6a11ab5313727f62da879916b9215ffa75582bb362abfde9428328a5cb79dc72129c40044e151a91a13666a198d49e12202aca24787899e4bb111d45ae25a0df3dddf50a904057ed52cddd2845b573e4b2471b01b3ef480b6397af1606f3ee4fc04670180547099303395ef231fd0e7640e3184624a0bcc5c32654d0667ce8b0b276aa1182ea329d5fff7ab35094fd9b9486b0d06f12b0b36dbfc7a197d59d7492af537ff221a774c516a06a897b1bf440b2f0fc23d3b9240849f2c076ec05a3765a8116148f86348981272173af5ec1b0f6aa6a09bd319e1817976a9cf43d859e4ca", 0xf4}, {&(0x7f0000003480)="a46997f5a2517280e19cd970fd8de5d1135403ca400ce88a43dc57d4b0229abf28d85b864ced465d24f2e1a23f43693c7163db37", 0x34}], 0x8, &(0x7f0000003540)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x62d7}}], 0x60}}], 0x6, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x3}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x1e, @local, 0x9a4}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0xffffff9d, @mcast2, 0x4}, @in={0x2, 0x4e22, @multicast1}], 0xa0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x10)

6.029497094s ago: executing program 4 (id=737):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000004c0)=@assoc_value={<r2=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={r2, 0x1ff}, &(0x7f0000000380)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e01854")
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8000000000000002, 0x9, 0xfffffffff7ffffed, 0x4e, 0x9, 0x0, 0x4002004c8, 0x4e9, 0x45c5, 0x20000c595, 0xfffffffffffffff9, 0xffffffffffffffff, 0x4, 0x0, 0x80000004000000, 0x8003], 0x100000, 0x2010d3})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
close_range(r0, 0xffffffffffffffff, 0x0)

5.643750148s ago: executing program 2 (id=738):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c0000000b0a010100000000000000000a0000030900010073797a31000000000c0010400000000000000005140000001104010000000000000000000500000a767b1ee03e8777cf0de56a7c4582f34bd2493eba573e49dbc328384dbbd3b23fe67cea3c01141577ba09467e0ba4c3a55e2917"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000040000000060a010400000000000000000500000008000b000000000018002480140001800b00010074756e6e656c00000400028009000375f2cef42d0073797a1a00000000140000001100010000000000000000000000000a03706587d77512c957dd0227826b84fccb5829cc60c0ccba4cb4213f39f2a17e7f64ee69e4216fa64835a77923244cdea4872e810cb76a3356"], 0xb4}}, 0x0)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000340)=[{0x8, 0x10, 0x0, 0x0}, {0x3ff, 0xa201, 0x0, 0x0}], 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0)
io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000100)={0x80, 0x7fffffff, 0xc8, 0xd, 0xe85, 0x7fe})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x27, 0xe, 0x0, &(0x7f0000000300)="0300f90ffac42324e8797dadd1eb", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5.375077827s ago: executing program 1 (id=739):
prlimit64(0x0, 0xf, 0x0, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x3, 0x4, 0x9, 0x1, 0x1}, 0x50)
mknod$loop(0x0, 0x800, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unlink(0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = epoll_create1(0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a})
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0xa000032a)

5.001684182s ago: executing program 3 (id=740):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
pipe2(&(0x7f0000000340)={<r4=>0xffffffffffffffff}, 0x80000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x4, 0x4, 0x2}, 0x50)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x10c00)
r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0)
bind$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xb38, 0x1f480, 0x0, 0x399})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c)
ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000})
io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

4.537604453s ago: executing program 1 (id=741):
openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x5, 0xffffffc0, 0x6, 0x6, 0x6, 0x3, 0x8, {<r5=>0x0, @in={{0x2, 0x4e21, @remote}}, 0x80000001, 0x79f, 0x6f, 0x76, 0x9}}, &(0x7f0000000140)=0xb0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000480)={r5, 0x2, 0xb8, "0310883a831006223ad6f2a332a8305ab41f44ba72465a579322c87b94511de471462b931c0ceef68d7c220a3fc1377b7d03ccf42c51f635da866725c0c1d27734ffc19b2f85f3ce452d3339a1debae22003a17211f8ca680e94dc27ba1fad653fe0da65cd3628049c6f7405206a7bd82ef56503fefe0742f1f882af3dd5a7e30e43bbe08a038156fae678f671509e839b22f1abc9f7666029fd570eae856f50eeb032b91e2fdb39e5841032d94d15dc9410b06f8f6411d1"}, 0xc0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

4.470596267s ago: executing program 4 (id=742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket$inet6(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0})
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x10001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005294e01312f1914c0002ea132c1100"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)

3.597415075s ago: executing program 0 (id=743):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x12, 0xb05, 0x0, 0x0, {0xa}}, 0x14}}, 0x800)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r4, @ANYRES64=r2], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0294641e802eaac54eba2209530204b6ad00000004000000f5ff0000030200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
lseek(r8, 0x0, 0x1)
r9 = syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00')
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
setitimer(0x0, &(0x7f0000000140), &(0x7f0000001180))
preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

3.531274641s ago: executing program 4 (id=744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket$inet6(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0})
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x10001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005294e01312f1914c0002ea132c1100"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf8082f1a", 0x57)

3.049028492s ago: executing program 2 (id=745):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x5, 0x40000000}, 0x8)
connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0xd2f2, 0x9, 0x1], 0x1000, 0x450})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.004882707s ago: executing program 1 (id=746):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000004c0)=@assoc_value={<r2=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={r2, 0x1ff}, &(0x7f0000000380)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e01854")
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8000000000000002, 0x9, 0xfffffffff7ffffed, 0x4e, 0x9, 0x0, 0x4002004c8, 0x4e9, 0x45c5, 0x20000c595, 0xfffffffffffffff9, 0xffffffffffffffff, 0x4, 0x0, 0x80000004000000, 0x8003], 0x100000, 0x2010d3})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r7, r8, 0x0, 0x201f00)
close_range(r0, 0xffffffffffffffff, 0x0)

2.401293726s ago: executing program 3 (id=747):
prlimit64(0x0, 0xf, 0x0, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x3, 0x4, 0x9, 0x1, 0x1}, 0x50)
mknod$loop(0x0, 0x800, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unlink(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = epoll_create1(0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a})
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0xa000032a)

1.94066479s ago: executing program 0 (id=748):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x0, 0x4, 0x101, 0x0})

1.810964199s ago: executing program 1 (id=749):
prlimit64(0x0, 0xf, 0x0, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x3, 0x4, 0x9, 0x1, 0x1}, 0x50)
mknod$loop(0x0, 0x800, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unlink(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = epoll_create1(0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a})
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0xa000032a)

1.788894864s ago: executing program 3 (id=750):
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000380)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0x3, 0x12)

1.77699907s ago: executing program 0 (id=751):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0x6, 0x0, 0x100, "bc3e09910000f4ff070000000000000000000000400000ffff99ffffffffec00", 0x59565955})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
gettid()
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x5)

1.652962762s ago: executing program 4 (id=752):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904", @ANYRES32=r0, @ANYRES16=r1], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4e, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) (async)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000"], 0x7c}}, 0x2000c450) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
close(0x3)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x5d6, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0x1000f) (async)
sendto$packet(r3, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x6e09, 0x24, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143f"}], 0x1}) (async)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r8, 0x5421, 0x0)
connect$netrom(r8, 0x0, 0x0) (async)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000ac0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8000001, @private0, 0x2003}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x5, @private1, 0x5f}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="b3", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f00000002c0)={r11, 0x4}, 0x8)

1.34789946s ago: executing program 3 (id=753):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c0000000b0a010100000000000000000a0000030900010073797a31000000000c0010400000000000000005140000001104010000000000000000000500000a767b1ee03e8777cf0de56a7c4582f34bd2493eba573e49dbc328384dbbd3b23fe67cea3c01141577ba09467e0ba4c3a55e2917"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000040000000060a010400000000000000000500000008000b000000000018002480140001800b00010074756e6e656c00000400028009000375f2cef42d0073797a1a00000000140000001100010000000000000000000000000a03706587d77512c957dd0227826b84fccb5829cc60c0ccba4cb4213f39f2a17e7f64ee69e4216fa64835a77923244cdea4872e810cb76a3356"], 0xb4}}, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000340)=[{0x8, 0x10, 0x0, 0x0}, {0x3ff, 0xa201, 0x0, 0x0}], 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0)
r5 = io_uring_setup(0x1a26, &(0x7f0000000000)={0x0, 0x2d00, 0x10, 0x3, 0x3b1})
io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, 0xffffffffffffffff, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000100)={0x80, 0x7fffffff, 0xc8, 0xd, 0xe85, 0x7fe})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x27, 0xe, 0x0, &(0x7f0000000300)="0300f90ffac42324e8797dadd1eb", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x4, 0x70bd28, 0x25dfdbfb, {0x1, 0x1}, ["", ""]}, 0x20}}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10)

1.317716405s ago: executing program 2 (id=754):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r3, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) (fail_nth: 4)

1.301365821s ago: executing program 1 (id=755):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x10201, 0x5, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r3 = eventfd2(0x44, 0x1)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x44840)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28)
bind$unix(r4, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
sendmmsg(r9, &(0x7f00000029c0), 0x400006d, 0x20000004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x20000006, 0x10000, 0x0, r3, 0x13})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)

106.534553ms ago: executing program 4 (id=756):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000180)={0x8, 0x1})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x9, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xc1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0x9500, 0x3000, [0x9, 0x204, 0x5b, 0x8]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

106.256671ms ago: executing program 2 (id=757):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8000000000000002, 0x9, 0xfffffffff7ffffed, 0x4e, 0x9, 0x0, 0x4002004c8, 0x4e9, 0x45c5, 0x20000c595, 0xfffffffffffffff9, 0xffffffffffffffff, 0x4, 0x0, 0x80000004000000, 0x8003], 0x100000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=758):
fcntl$setlease(0xffffffffffffffff, 0x400, 0x861e50d92583e6f8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001040"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x32, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94)
read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40401)
ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f)
ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x3ff8, 0x1ff, 0x6, 0x4, 0xe}, &(0x7f0000000100)=0x98)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000280)=ANY=[], 0x16)

kernel console output (not intermixed with test programs):

[  185.744864][ T7456]  ? clear_bhb_loop+0x40/0x90
[  185.744878][ T7456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.744890][ T7456] RIP: 0033:0x7f487eb9bf79
[  185.744900][ T7456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.744911][ T7456] RSP: 002b:00007f487fa35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  185.744922][ T7456] RAX: ffffffffffffffda RBX: 00007f487ee16090 RCX: 00007f487eb9bf79
[  185.744929][ T7456] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000
[  185.744936][ T7456] RBP: 00007f487fa35090 R08: 0000200000000280 R09: 0000000000000000
[  185.744942][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.744949][ T7456] R13: 00007f487ee16128 R14: 00007f487ee16090 R15: 00007ffe0a64cd18
[  185.744963][ T7456]  </TASK>
[  185.747950][ T7456] ERROR: Out of memory at tomoyo_realpath_from_path.
[  185.923673][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  186.022766][ T5815] Bluetooth: hci3: command 0x0406 tx timeout
[  186.028817][ T5815] Bluetooth: hci1: command 0x0406 tx timeout
[  186.066258][  T791] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  186.223944][  T791] usb 4-1: Using ep0 maxpacket: 32
[  186.265884][  T791] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  186.285215][  T791] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  186.333367][  T791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  186.349834][ T5898] usb 2-1: USB disconnect, device number 9
[  186.382845][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  186.431771][  T791] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  186.453006][  T791] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  186.469008][  T791] usb 4-1: New USB device found, idVendor=03f0, idProduct=8317, bcdDevice= 0.40
[  186.480686][ T7468] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  186.505299][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.539686][  T791] usb 4-1: config 0 descriptor??
[  186.817407][  T791] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x8317
[  187.235243][   T30] audit: type=1400 audit(1771083755.509:376): avc:  denied  { read write } for  pid=7450 comm="syz.3.394" name="lp0" dev="devtmpfs" ino=3025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  187.235567][ T7452] overlayfs: missing 'lowerdir'
[  187.273846][ T7474] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  187.294658][   T30] audit: type=1400 audit(1771083755.509:377): avc:  denied  { open } for  pid=7450 comm="syz.3.394" path="/dev/usb/lp0" dev="devtmpfs" ino=3025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  187.347083][   T30] audit: type=1400 audit(1771083755.719:378): avc:  denied  { ioctl } for  pid=7450 comm="syz.3.394" path="/dev/usb/lp0" dev="devtmpfs" ino=3025 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  187.397692][ T7485] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  187.800523][ T7492] geneve2: entered promiscuous mode
[  187.805851][ T7492] geneve2: entered allmulticast mode
[  188.368277][ T1821] usb 4-1: USB disconnect, device number 10
[  188.423283][ T1821] usblp0: removed
[  188.686322][ T7500] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  188.999435][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  189.010747][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  190.441872][  T791] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  191.066315][  T791] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  191.100457][  T791] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  191.121903][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.130091][  T791] usb 1-1: Product: syz
[  191.134405][  T791] usb 1-1: Manufacturer: syz
[  191.139496][  T791] usb 1-1: SerialNumber: syz
[  191.147211][  T791] usb 1-1: config 0 descriptor??
[  191.156886][  T791] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  191.272498][  T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  191.411102][  T791] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  191.423785][  T791] usb 1-1: media controller created
[  191.434798][ T7511] dvb-usb: bulk message failed: -22 (7/0)
[  191.437907][  T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  191.769893][  T791] DVB: Unable to find symbol mt352_attach()
[  191.835271][  T791] DVB: Unable to find symbol nxt6000_attach()
[  191.936288][  T791] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  192.040793][  T791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8
[  192.070076][   T30] audit: type=1400 audit(1771083760.559:379): avc:  denied  { read } for  pid=5161 comm="acpid" name="event4" dev="devtmpfs" ino=3032 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  192.121040][  T791] dvb-usb: schedule remote query interval to 1000 msecs.
[  192.156865][  T791] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  192.212781][   T30] audit: type=1400 audit(1771083760.559:380): avc:  denied  { open } for  pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3032 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  192.275241][  T791] dvb-usb: bulk message failed: -22 (7/0)
[  192.302018][  T791] dvb-usb: bulk message failed: -22 (7/0)
[  192.312115][  T791] usb 1-1: USB disconnect, device number 11
[  193.085389][   T30] audit: type=1400 audit(1771083760.559:381): avc:  denied  { ioctl } for  pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3032 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  193.203429][   T30] audit: type=1400 audit(1771083761.629:382): avc:  denied  { kexec_image_load } for  pid=7543 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  193.232870][  T791] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  193.748131][   T30] audit: type=1400 audit(1771083762.239:383): avc:  denied  { bind } for  pid=7551 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  193.778155][   T30] audit: type=1400 audit(1771083762.249:384): avc:  denied  { name_bind } for  pid=7552 comm="syz.0.424" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  194.048770][ T7558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7558 comm=syz.0.424
[  194.147656][   T30] audit: type=1400 audit(1771083762.559:385): avc:  denied  { lock } for  pid=7551 comm="syz.3.426" path="socket:[16702]" dev="sockfs" ino=16702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  195.287401][  T791] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  195.544717][  T791] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  195.590609][  T791] usb 1-1: config 0 has no interface number 0
[  195.774887][  T791] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  195.867634][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.034375][  T791] usb 1-1: config 0 descriptor??
[  196.240572][  T791] usb 1-1: selecting invalid altsetting 1
[  196.324419][  T791] dvb_ttusb_budget: ttusb_init_controller: error
[  196.444878][  T791] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  196.715903][ T7580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7580 comm=syz.0.430
[  197.220875][  T791] DVB: Unable to find symbol cx22700_attach()
[  197.386014][  T791] DVB: Unable to find symbol tda10046_attach()
[  197.394346][  T791] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  197.539408][   T30] audit: type=1400 audit(1771083766.029:386): avc:  denied  { shutdown } for  pid=7585 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  197.561294][ T7587] netlink: 48 bytes leftover after parsing attributes in process `syz.1.428'.
[  197.718235][  T791] usb 1-1: USB disconnect, device number 12
[  199.713847][   T30] audit: type=1400 audit(1771083768.129:387): avc:  denied  { bind } for  pid=7608 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  199.751960][   T30] audit: type=1400 audit(1771083768.129:388): avc:  denied  { write } for  pid=7608 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  199.816306][   T30] audit: type=1400 audit(1771083768.309:389): avc:  denied  { unmount } for  pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  200.191105][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'.
[  200.515019][ T5867] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  200.652067][ T5882] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  200.740799][ T7632] netlink: 52 bytes leftover after parsing attributes in process `syz.4.439'.
[  200.816333][ T5882] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  200.826495][ T5882] usb 1-1: config 0 has no interface number 0
[  200.835232][ T5882] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  200.850494][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.858700][ T5867] usb 3-1: Using ep0 maxpacket: 8
[  200.868775][ T5867] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  200.881726][ T5867] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.892937][ T5882] usb 1-1: config 0 descriptor??
[  200.942848][ T5882] usb 1-1: selecting invalid altsetting 1
[  200.950601][ T5882] dvb_ttusb_budget: ttusb_init_controller: error
[  200.961982][ T5882] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  200.962865][ T5867] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  200.993021][ T7637] overlayfs: overlapping lowerdir path
[  201.072809][ T5867] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  201.150863][ T5867] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  201.506977][ T7646] FAULT_INJECTION: forcing a failure.
[  201.506977][ T7646] name failslab, interval 1, probability 0, space 0, times 0
[  201.516657][ T5882] DVB: Unable to find symbol cx22700_attach()
[  201.519823][ T5867] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  201.535655][  T792] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  201.550025][ T5882] DVB: Unable to find symbol tda10046_attach()
[  201.565944][ T5882] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  201.582095][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.591566][ T7646] CPU: 1 UID: 0 PID: 7646 Comm: syz.4.444 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  201.591593][ T7646] Tainted: [L]=SOFTLOCKUP
[  201.591599][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  201.591608][ T7646] Call Trace:
[  201.591614][ T7646]  <TASK>
[  201.591619][ T7646]  dump_stack_lvl+0x100/0x190
[  201.591654][ T7646]  should_fail_ex.cold+0x5/0xa
[  201.591675][ T7646]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  201.591698][ T7646]  should_failslab+0xc2/0x120
[  201.591723][ T7646]  __kmalloc_noprof+0xe0/0x850
[  201.591749][ T7646]  genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  201.591776][ T7646]  genl_family_rcv_msg_doit+0xc7/0x300
[  201.591800][ T7646]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.591832][ T7646]  ? bpf_lsm_capable+0x9/0x10
[  201.591855][ T7646]  ? security_capable+0x80/0x260
[  201.591886][ T7646]  genl_rcv_msg+0x560/0x800
[  201.591909][ T7646]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.591931][ T7646]  ? __pfx_ieee802154_llsec_add_seclevel+0x10/0x10
[  201.591956][ T7646]  ? __lock_acquire+0x4a5/0x2630
[  201.591989][ T7646]  netlink_rcv_skb+0x159/0x420
[  201.592009][ T7646]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.592030][ T7646]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.592057][ T7646]  ? netlink_deliver_tap+0x1ae/0xcc0
[  201.592078][ T7646]  genl_rcv+0x28/0x40
[  201.592097][ T7646]  netlink_unicast+0x5aa/0x870
[  201.592120][ T7646]  ? __pfx_netlink_unicast+0x10/0x10
[  201.592150][ T7646]  netlink_sendmsg+0x8b0/0xda0
[  201.592175][ T7646]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.592193][ T7646]  ? __might_fault+0x20/0x140
[  201.592224][ T7646]  ____sys_sendmsg+0xa54/0xc30
[  201.592250][ T7646]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.592283][ T7646]  ___sys_sendmsg+0x190/0x1e0
[  201.592308][ T7646]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.592359][ T7646]  __sys_sendmsg+0x170/0x220
[  201.592393][ T7646]  ? __pfx___sys_sendmsg+0x10/0x10
[  201.592435][ T7646]  do_syscall_64+0x106/0xf80
[  201.592452][ T7646]  ? clear_bhb_loop+0x40/0x90
[  201.592475][ T7646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.592493][ T7646] RIP: 0033:0x7fef85d9bf79
[  201.592509][ T7646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.592525][ T7646] RSP: 002b:00007fef86d32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.592542][ T7646] RAX: ffffffffffffffda RBX: 00007fef86015fa0 RCX: 00007fef85d9bf79
[  201.592554][ T7646] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  201.592565][ T7646] RBP: 00007fef86d32090 R08: 0000000000000000 R09: 0000000000000000
[  201.592575][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.592584][ T7646] R13: 00007fef86016038 R14: 00007fef86015fa0 R15: 00007ffc5a933e18
[  201.592609][ T7646]  </TASK>
[  201.596056][ T5882] usb 1-1: USB disconnect, device number 13
[  201.692039][  T792] usb 4-1: Using ep0 maxpacket: 16
[  201.928017][ T5867] usb 3-1: GET_CAPABILITIES returned 0
[  201.941970][ T5867] usbtmc 3-1:16.0: can't read capabilities
[  202.000277][  T792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.032866][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  202.049150][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  202.061647][  T792] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  202.105807][  T792] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  202.509533][  T792] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  202.522714][  T792] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  202.530903][  T792] usb 4-1: Manufacturer: syz
[  202.544240][ T7622] usbtmc 3-1:16.0: usb_control_msg returned -71
[  202.545969][ T5867] usb 3-1: USB disconnect, device number 15
[  202.560808][  T792] usb 4-1: config 0 descriptor??
[  203.145432][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'.
[  203.276549][ T7667] bridge0: port 3(vlan2) entered blocking state
[  203.285009][ T7667] bridge0: port 3(vlan2) entered disabled state
[  203.292749][ T7667] vlan2: entered allmulticast mode
[  203.300890][ T7667] bridge0: entered allmulticast mode
[  203.608540][  T792] rc_core: IR keymap rc-hauppauge not found
[  203.623281][  T792] Registered IR keymap rc-empty
[  203.634634][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  203.738403][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  203.763779][  T792] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  203.779482][  T792] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9
[  203.792020][ T7667] vlan2: left allmulticast mode
[  203.800694][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  203.813287][ T7667] bridge0: left allmulticast mode
[  203.849788][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.010893][   T30] audit: type=1400 audit(1771083772.469:391): avc:  denied  { connect } for  pid=7670 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  204.191692][   T30] audit: type=1400 audit(1771083772.319:390): avc:  denied  { map } for  pid=7674 comm="syz.2.451" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  204.214815][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.242057][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.262086][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.340867][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.372121][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.392611][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.638538][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.692586][  T792] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  204.908459][ T7689] overlayfs: overlapping lowerdir path
[  205.063733][  T792] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  205.081979][  T792] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  205.094314][  T792] usb 4-1: USB disconnect, device number 11
[  206.053388][ T5867] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  206.072780][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'.
[  206.433624][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.441182][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.454352][ T5867] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  206.481996][ T5867] usb 2-1: config 0 has no interface number 0
[  206.488171][ T5867] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  206.502235][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.564290][ T5867] usb 2-1: config 0 descriptor??
[  206.587020][ T5867] usb 2-1: selecting invalid altsetting 1
[  206.614393][ T5867] dvb_ttusb_budget: ttusb_init_controller: error
[  206.629926][ T5867] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  206.711948][  T792] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  206.738443][ T5867] DVB: Unable to find symbol cx22700_attach()
[  206.868366][ T7726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7726 comm=syz.1.458
[  206.916541][  T792] usb 1-1: Using ep0 maxpacket: 8
[  206.976250][  T792] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  207.111180][  T792] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  207.140078][ T5867] DVB: Unable to find symbol tda10046_attach()
[  207.150530][  T792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  207.166229][ T5867] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  207.188866][  T792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  207.212657][ T5867] usb 2-1: USB disconnect, device number 10
[  207.229260][  T792] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.290222][  T792] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  207.322015][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.586108][  T792] usb 1-1: GET_CAPABILITIES returned 0
[  207.596569][  T792] usbtmc 1-1:16.0: can't read capabilities
[  207.635157][ T7724] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  207.971504][  T792] usb 1-1: USB disconnect, device number 14
[  207.979344][ T7709] usbtmc 1-1:16.0: usb_control_msg returned -71
[  208.431367][ T7742] FAULT_INJECTION: forcing a failure.
[  208.431367][ T7742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.448887][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.1.469 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  208.448920][ T7742] Tainted: [L]=SOFTLOCKUP
[  208.448927][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  208.448937][ T7742] Call Trace:
[  208.448943][ T7742]  <TASK>
[  208.448950][ T7742]  dump_stack_lvl+0x100/0x190
[  208.448981][ T7742]  should_fail_ex.cold+0x5/0xa
[  208.449005][ T7742]  _copy_from_user+0x2e/0xd0
[  208.449033][ T7742]  kstrtouint_from_user+0xd6/0x1d0
[  208.449053][ T7742]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  208.449072][ T7742]  ? __lock_acquire+0x4a5/0x2630
[  208.449103][ T7742]  ? lock_acquire+0x1cf/0x380
[  208.449136][ T7742]  proc_fail_nth_write+0x83/0x220
[  208.449156][ T7742]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  208.449181][ T7742]  vfs_write+0x2aa/0x1070
[  208.449206][ T7742]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  208.449228][ T7742]  ? __pfx_vfs_write+0x10/0x10
[  208.449250][ T7742]  ? __fget_files+0x215/0x3d0
[  208.449283][ T7742]  ? __fget_files+0x21f/0x3d0
[  208.449316][ T7742]  ksys_write+0x12a/0x250
[  208.449339][ T7742]  ? __pfx_ksys_write+0x10/0x10
[  208.449369][ T7742]  do_syscall_64+0x106/0xf80
[  208.449387][ T7742]  ? clear_bhb_loop+0x40/0x90
[  208.449409][ T7742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.449426][ T7742] RIP: 0033:0x7fe77135c84e
[  208.449441][ T7742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  208.449458][ T7742] RSP: 002b:00007fe772240fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  208.449476][ T7742] RAX: ffffffffffffffda RBX: 00007fe7722416c0 RCX: 00007fe77135c84e
[  208.449487][ T7742] RDX: 0000000000000001 RSI: 00007fe7722410a0 RDI: 0000000000000004
[  208.449497][ T7742] RBP: 00007fe772241090 R08: 0000000000000000 R09: 0000000000000000
[  208.449508][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.449518][ T7742] R13: 00007fe771616038 R14: 00007fe771615fa0 R15: 00007ffc54888be8
[  208.449543][ T7742]  </TASK>
[  209.742124][   T30] audit: type=1400 audit(1771083778.069:392): avc:  denied  { module_request } for  pid=7756 comm="syz.0.473" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  211.121222][ T7781] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  211.824384][   T30] audit: type=1400 audit(1771083780.319:393): avc:  denied  { setopt } for  pid=7784 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  211.952733][   T30] audit: type=1400 audit(1771083780.349:394): avc:  denied  { setopt } for  pid=7784 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  212.019214][ T7789] Bluetooth: MGMT ver 1.23
[  212.123697][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'.
[  212.556944][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.564276][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.941995][  T792] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  213.562129][  T792] usb 5-1: Using ep0 maxpacket: 8
[  213.577432][  T792] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  213.586105][  T792] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  213.596348][  T792] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  213.607877][  T792] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  213.618269][  T792] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.631609][  T792] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  213.641199][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.261274][  T792] usb 5-1: GET_CAPABILITIES returned 0
[  214.289416][  T792] usbtmc 5-1:16.0: can't read capabilities
[  214.485377][  T792] usb 5-1: USB disconnect, device number 13
[  215.154310][ T7828] input: syz1 as /devices/virtual/input/input10
[  215.226765][ T7828] netlink: 'syz.2.490': attribute type 10 has an invalid length.
[  215.251672][ T7828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.267687][ T7828] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  215.298175][ T7829] netlink: 'syz.2.490': attribute type 10 has an invalid length.
[  215.306080][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.490'.
[  215.315620][ T7829] batadv0: entered promiscuous mode
[  216.088968][   T30] audit: type=1400 audit(1771083784.549:395): avc:  denied  { override_creds } for  pid=7830 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  216.217448][ T7829] batadv0: entered allmulticast mode
[  216.268022][ T7841] rdma_rxe: rxe_newlink: failed to add veth1_vlan
[  216.281179][ T7829] bond0: (slave batadv0): Releasing backup interface
[  216.318530][ T7829] bridge0: port 3(batadv0) entered blocking state
[  216.326349][ T7829] bridge0: port 3(batadv0) entered disabled state
[  216.407273][ T7825] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=7825 comm=syz.2.490
[  216.482099][ T5882] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  216.768000][  T993] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  216.777722][  T993] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  216.817369][   T30] audit: type=1400 audit(1771083785.309:396): avc:  denied  { append } for  pid=7847 comm="syz.1.497" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  217.051391][ T5882] usb 4-1: Using ep0 maxpacket: 8
[  217.085108][ T5882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  217.119856][ T5882] usb 4-1: config 0 has no interface number 0
[  217.157260][ T5882] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  217.302134][ T5882] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  217.338155][ T5882] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  217.362690][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.390932][ T5882] usb 4-1: config 0 descriptor??
[  217.946508][ T5882] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  218.488768][   T30] audit: type=1400 audit(1771083786.979:397): avc:  denied  { create } for  pid=7863 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  218.502241][ T7864] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  218.545425][ T7835] iowarrior 4-1:0.1: Error -90 while submitting URB
[  218.581411][   T30] audit: type=1400 audit(1771083786.979:398): avc:  denied  { ioctl } for  pid=7863 comm="syz.2.501" path="socket:[17649]" dev="sockfs" ino=17649 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  218.632578][ T7864] overlayfs: missing 'lowerdir'
[  218.650115][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'.
[  218.669457][ T7868] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  218.680852][   T30] audit: type=1400 audit(1771083787.159:399): avc:  denied  { bind } for  pid=7863 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  218.736629][ T7872] blkio.reset_stats is deprecated
[  218.742480][   T30] audit: type=1400 audit(1771083787.159:400): avc:  denied  { connect } for  pid=7863 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  218.742527][   T30] audit: type=1400 audit(1771083787.159:401): avc:  denied  { write } for  pid=7863 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  218.742565][   T30] audit: type=1326 audit(1771083787.209:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.3.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f834d39bf79 code=0x0
[  218.916126][   T30] audit: type=1400 audit(1771083787.409:403): avc:  denied  { wake_alarm } for  pid=7870 comm="syz.4.502" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  218.948498][   T30] audit: type=1400 audit(1771083787.439:404): avc:  denied  { create } for  pid=7870 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  219.074907][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.101930][ T1821] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  219.161753][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.265641][ T1821] usb 1-1: Using ep0 maxpacket: 8
[  219.273243][ T1821] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  219.287464][ T1821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  219.302141][ T1821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  219.313751][ T1821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  219.324356][ T1821] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  219.346382][ T1821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  219.356458][ T1821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.500466][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.508'.
[  219.584624][ T1821] usb 1-1: GET_CAPABILITIES returned 0
[  219.590159][ T1821] usbtmc 1-1:16.0: can't read capabilities
[  219.969232][ T7867] iowarrior 4-1:0.1: Error -90 while submitting URB
[  220.018049][ T7876] iowarrior 4-1:0.1: Error -90 while submitting URB
[  220.029367][ T5882] usb 1-1: USB disconnect, device number 15
[  220.771714][ T1820] usb 4-1: USB disconnect, device number 12
[  222.933689][ T7927] i2c i2c-0: dtv_property_process_set: SET cmd 0x00002000 undefined
[  223.014712][ T7932] overlayfs: missing 'lowerdir'
[  223.099860][ T7932] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  223.322271][ T7942] overlayfs: missing 'lowerdir'
[  223.425862][ T7943] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  223.820150][ T7946] FAULT_INJECTION: forcing a failure.
[  223.820150][ T7946] name failslab, interval 1, probability 0, space 0, times 0
[  223.852069][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.4.520 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  223.852098][ T7946] Tainted: [L]=SOFTLOCKUP
[  223.852104][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  223.852113][ T7946] Call Trace:
[  223.852119][ T7946]  <TASK>
[  223.852126][ T7946]  dump_stack_lvl+0x100/0x190
[  223.852158][ T7946]  should_fail_ex.cold+0x5/0xa
[  223.852181][ T7946]  ? tomoyo_realpath_from_path+0xb6/0x690
[  223.852203][ T7946]  should_failslab+0xc2/0x120
[  223.852229][ T7946]  __kmalloc_noprof+0xe0/0x850
[  223.852255][ T7946]  tomoyo_realpath_from_path+0xb6/0x690
[  223.852281][ T7946]  tomoyo_path_number_perm+0x23c/0x580
[  223.852299][ T7946]  ? tomoyo_path_number_perm+0x22e/0x580
[  223.852317][ T7946]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  223.852343][ T7946]  ? find_held_lock+0x2b/0x80
[  223.852357][ T7946]  ? __fget_files+0x215/0x3d0
[  223.852373][ T7946]  ? hook_file_ioctl_common+0x146/0x410
[  223.852392][ T7946]  ? __fget_files+0x21f/0x3d0
[  223.852411][ T7946]  security_file_ioctl+0xd3/0x230
[  223.852426][ T7946]  __x64_sys_ioctl+0xb7/0x210
[  223.852441][ T7946]  do_syscall_64+0x106/0xf80
[  223.852453][ T7946]  ? clear_bhb_loop+0x40/0x90
[  223.852467][ T7946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.852478][ T7946] RIP: 0033:0x7fef85d9bf79
[  223.852490][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.852501][ T7946] RSP: 002b:00007fef86cf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  223.852513][ T7946] RAX: ffffffffffffffda RBX: 00007fef86016180 RCX: 00007fef85d9bf79
[  223.852520][ T7946] RDX: 00002000000001c0 RSI: 00000000000089e0 RDI: 0000000000000008
[  223.852533][ T7946] RBP: 00007fef86cf0090 R08: 0000000000000000 R09: 0000000000000000
[  223.852539][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.852545][ T7946] R13: 00007fef86016218 R14: 00007fef86016180 R15: 00007ffc5a933e18
[  223.852559][ T7946]  </TASK>
[  223.852565][ T7946] ERROR: Out of memory at tomoyo_realpath_from_path.
[  224.072536][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  224.072560][   T30] audit: type=1400 audit(1771083792.559:408): avc:  denied  { ioctl } for  pid=7933 comm="syz.4.520" path="socket:[18492]" dev="sockfs" ino=18492 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  224.104266][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'.
[  224.195375][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.202858][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.502041][ T5882] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  224.671866][ T5882] usb 2-1: Using ep0 maxpacket: 8
[  224.682615][ T5882] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  224.706843][ T5882] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  224.820714][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  224.847852][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  224.869545][ T5882] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.900086][ T5882] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  224.920794][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.279441][ T5882] usb 2-1: GET_CAPABILITIES returned 0
[  225.290565][ T5882] usbtmc 2-1:16.0: can't read capabilities
[  225.795307][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'.
[  225.826504][ T1820] usb 2-1: USB disconnect, device number 11
[  225.833779][ T7947] usbtmc 2-1:16.0: usb_control_msg returned -71
[  226.916043][ T7988] x_tables: duplicate underflow at hook 1
[  226.938920][   T30] audit: type=1400 audit(1771083795.419:409): avc:  denied  { read } for  pid=7986 comm="syz.4.531" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  226.978720][ T7992] vlan2: entered allmulticast mode
[  226.983946][ T7992] macsec0: entered allmulticast mode
[  226.989234][ T7992] veth1_macvtap: entered allmulticast mode
[  227.010203][   T30] audit: type=1400 audit(1771083795.419:410): avc:  denied  { open } for  pid=7986 comm="syz.4.531" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  227.066702][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv1
[  227.128878][ T7984] team0: Port device batadv1 added
[  227.254647][   T30] audit: type=1400 audit(1771083795.419:411): avc:  denied  { ioctl } for  pid=7986 comm="syz.4.531" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  227.399225][   T30] audit: type=1400 audit(1771083795.889:412): avc:  denied  { map } for  pid=7997 comm="syz.2.535" path="socket:[18590]" dev="sockfs" ino=18590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  227.448549][ T7998] syzkaller0: entered promiscuous mode
[  227.484189][ T1820] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  227.534433][ T7998] syzkaller0: entered allmulticast mode
[  227.716352][ T1820] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  227.766558][ T1820] usb 4-1: config 0 interface 0 has no altsetting 0
[  227.861234][ T1820] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  227.879000][ T1820] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  227.887490][ T8010] cgroup: Need name or subsystem set
[  227.951902][ T1821] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  228.326072][   T30] audit: type=1400 audit(1771083796.819:413): avc:  denied  { read } for  pid=8009 comm="syz.2.539" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  228.332874][ T1820] usb 4-1: Product: syz
[  228.423350][ T1820] usb 4-1: Manufacturer: syz
[  228.436590][ T1820] usb 4-1: SerialNumber: syz
[  228.452414][ T1820] usb 4-1: config 0 descriptor??
[  228.528075][ T1821] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  228.536389][ T1821] usb 1-1: config 0 has no interface number 0
[  228.544694][ T1820] usb 4-1: selecting invalid altsetting 0
[  228.555719][ T1821] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  228.568130][ T1821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.596092][ T1821] usb 1-1: config 0 descriptor??
[  228.610481][ T8021] syzkaller1: entered promiscuous mode
[  228.626991][ T8021] syzkaller1: entered allmulticast mode
[  228.639382][ T1821] usb 1-1: selecting invalid altsetting 1
[  228.670375][ T1821] dvb_ttusb_budget: ttusb_init_controller: error
[  228.705015][ T1821] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  228.759901][ T1820] usb 4-1: USB disconnect, device number 13
[  228.966145][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'.
[  229.067882][ T8006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8006 comm=syz.0.537
[  229.330027][ T1821] DVB: Unable to find symbol cx22700_attach()
[  229.496269][ T8041] overlayfs: overlapping lowerdir path
[  229.927686][ T1821] DVB: Unable to find symbol tda10046_attach()
[  229.934634][ T1821] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  230.027089][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'.
[  230.046370][ T1821] usb 1-1: USB disconnect, device number 16
[  230.548722][  T791] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  230.811937][  T791] usb 4-1: Using ep0 maxpacket: 8
[  230.825164][  T791] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  230.833623][  T791] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  231.051920][  T791] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  231.062977][  T791] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  231.073565][  T791] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.086852][  T791] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  231.096213][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.332274][  T791] usb 4-1: GET_CAPABILITIES returned 0
[  231.338032][  T791] usbtmc 4-1:16.0: can't read capabilities
[  231.818883][  T791] usb 4-1: USB disconnect, device number 14
[  231.834913][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv1
[  231.843625][ T8078] team0: Port device batadv1 added
[  232.019167][ T5128] Bluetooth: hci4: command 0x0406 tx timeout
[  232.442060][ T8089] netlink: 'syz.3.555': attribute type 1 has an invalid length.
[  232.551966][   T30] audit: type=1326 audit(1771083801.009:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  232.669677][  T791] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  232.704077][   T30] audit: type=1326 audit(1771083801.009:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  232.757915][   T30] audit: type=1326 audit(1771083801.009:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  232.831803][   T30] audit: type=1326 audit(1771083801.009:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  232.942514][   T30] audit: type=1326 audit(1771083801.009:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  233.001943][  T791] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  233.014035][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.055516][  T791] usb 2-1: Product: syz
[  233.072279][  T791] usb 2-1: Manufacturer: syz
[  233.077029][   T30] audit: type=1326 audit(1771083801.009:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  233.104685][  T791] usb 2-1: SerialNumber: syz
[  233.162149][   T30] audit: type=1326 audit(1771083801.009:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  233.262033][   T30] audit: type=1326 audit(1771083801.009:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  233.799679][   T30] audit: type=1326 audit(1771083801.009:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  233.936955][ T8101] netlink: 52 bytes leftover after parsing attributes in process `syz.4.558'.
[  233.951323][ T8101] input: syz0 as /devices/virtual/input/input11
[  233.983376][  T791] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  234.017381][  T791] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  234.031903][   T30] audit: type=1326 audit(1771083801.009:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834d39bf79 code=0x7ffc0000
[  234.073133][  T791] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  234.128798][  T791] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  234.171309][  T791] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  234.247144][ T8110] overlayfs: missing 'lowerdir'
[  234.263162][  T791] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  234.287607][ T8110] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  234.321154][ T8111] overlayfs: missing 'lowerdir'
[  234.369700][ T8111] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  234.385960][  T791] usb 2-1: USB disconnect, device number 12
[  234.873358][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'.
[  235.171158][ T8127] overlayfs: overlapping lowerdir path
[  235.291875][  T791] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  235.412493][ T8130] cgroup: fork rejected by pids controller in /syz3
[  235.451920][  T791] usb 2-1: Using ep0 maxpacket: 8
[  235.790365][  T791] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  235.820394][  T791] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  235.859909][  T791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  235.894092][  T791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  235.989817][  T791] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  236.003264][  T791] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  236.012602][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.124980][ T8238] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.568'.
[  236.524440][  T791] usb 2-1: GET_CAPABILITIES returned 0
[  236.529980][  T791] usbtmc 2-1:16.0: can't read capabilities
[  236.573779][ T5807] syz_tun (unregistering): left allmulticast mode
[  237.210231][ T8122] usbtmc 2-1:16.0: usb_control_msg returned -71
[  237.216806][  T791] usb 2-1: USB disconnect, device number 13
[  237.246640][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.581498][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.878307][ T8254] netlink: 'syz.4.574': attribute type 2 has an invalid length.
[  237.898594][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  237.898615][   T30] audit: type=1400 audit(1771083806.389:426): avc:  denied  { ioctl } for  pid=8251 comm="syz.4.574" path="socket:[18945]" dev="sockfs" ino=18945 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  237.902070][ T8253] FAULT_INJECTION: forcing a failure.
[  237.902070][ T8253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.909181][ T1821] hid (null): invalid report_size 43182
[  237.954952][ T1821] hid (null): unknown global tag 0xc
[  237.960973][ T1821] hid (null): report_id 1151910714 is invalid
[  237.967816][ T1821] hid (null): unknown global tag 0xd
[  237.968376][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.0.573 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  237.968401][ T8253] Tainted: [L]=SOFTLOCKUP
[  237.968407][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  237.968415][ T8253] Call Trace:
[  237.968421][ T8253]  <TASK>
[  237.968428][ T8253]  dump_stack_lvl+0x100/0x190
[  237.968461][ T8253]  should_fail_ex.cold+0x5/0xa
[  237.968482][ T8253]  _copy_to_user+0x32/0xd0
[  237.968507][ T8253]  simple_read_from_buffer+0xcb/0x170
[  237.968531][ T8253]  proc_fail_nth_read+0x1af/0x230
[  237.968557][ T8253]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.968583][ T8253]  ? rw_verify_area+0xce/0x6d0
[  237.968602][ T8253]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.968626][ T8253]  vfs_read+0x1e4/0xb30
[  237.968649][ T8253]  ? __pfx_vfs_read+0x10/0x10
[  237.968668][ T8253]  ? __fget_files+0x215/0x3d0
[  237.968695][ T8253]  ? __fget_files+0x21f/0x3d0
[  237.968723][ T8253]  ksys_read+0x12a/0x250
[  237.968742][ T8253]  ? __pfx_ksys_read+0x10/0x10
[  237.968767][ T8253]  do_syscall_64+0x106/0xf80
[  237.968783][ T8253]  ? clear_bhb_loop+0x40/0x90
[  237.968802][ T8253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.968817][ T8253] RIP: 0033:0x7f66b175c84e
[  237.968831][ T8253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  237.968845][ T8253] RSP: 002b:00007f66b26bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  237.968861][ T8253] RAX: ffffffffffffffda RBX: 00007f66b26bb6c0 RCX: 00007f66b175c84e
[  237.968871][ T8253] RDX: 000000000000000f RSI: 00007f66b26bb0a0 RDI: 0000000000000004
[  237.968880][ T8253] RBP: 00007f66b26bb090 R08: 0000000000000000 R09: 0000000000000000
[  237.968889][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.968898][ T8253] R13: 00007f66b1a16038 R14: 00007f66b1a15fa0 R15: 00007fff961d9a28
[  237.968919][ T8253]  </TASK>
[  237.984437][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.999861][ T1821] hid-generic 1000:FFFFFFF7:0006.0004: invalid report_size 43182
[  238.255180][ T1821] hid-generic 1000:FFFFFFF7:0006.0004: item 0 2 1 7 parsing failed
[  238.268600][ T5128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.292703][ T5128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.311518][ T1821] hid-generic 1000:FFFFFFF7:0006.0004: probe with driver hid-generic failed with error -22
[  238.352142][ T5128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.385565][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.508331][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.669275][   T13] bond0: (slave netdevsim0): Releasing backup interface
[  238.691429][ T8268] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.733354][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.504652][ T8284] overlayfs: missing 'lowerdir'
[  239.517760][ T8286] FAULT_INJECTION: forcing a failure.
[  239.517760][ T8286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.542075][ T8286] CPU: 1 UID: 0 PID: 8286 Comm: syz.0.582 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.542105][ T8286] Tainted: [L]=SOFTLOCKUP
[  239.542112][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  239.542121][ T8286] Call Trace:
[  239.542127][ T8286]  <TASK>
[  239.542134][ T8286]  dump_stack_lvl+0x100/0x190
[  239.542167][ T8286]  should_fail_ex.cold+0x5/0xa
[  239.542190][ T8286]  _copy_to_user+0x32/0xd0
[  239.542218][ T8286]  simple_read_from_buffer+0xcb/0x170
[  239.542245][ T8286]  proc_fail_nth_read+0x1af/0x230
[  239.542275][ T8286]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  239.542305][ T8286]  ? rw_verify_area+0xce/0x6d0
[  239.542325][ T8286]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  239.542353][ T8286]  vfs_read+0x1e4/0xb30
[  239.542379][ T8286]  ? __pfx_vfs_read+0x10/0x10
[  239.542401][ T8286]  ? __fget_files+0x215/0x3d0
[  239.542432][ T8286]  ? __fget_files+0x21f/0x3d0
[  239.542464][ T8286]  ksys_read+0x12a/0x250
[  239.542486][ T8286]  ? __pfx_ksys_read+0x10/0x10
[  239.542517][ T8286]  do_syscall_64+0x106/0xf80
[  239.542535][ T8286]  ? clear_bhb_loop+0x40/0x90
[  239.542565][ T8286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.542584][ T8286] RIP: 0033:0x7f66b175c84e
[  239.542599][ T8286] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  239.542616][ T8286] RSP: 002b:00007f66b26bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  239.542634][ T8286] RAX: ffffffffffffffda RBX: 00007f66b26bb6c0 RCX: 00007f66b175c84e
[  239.542645][ T8286] RDX: 000000000000000f RSI: 00007f66b26bb0a0 RDI: 0000000000000004
[  239.542655][ T8286] RBP: 00007f66b26bb090 R08: 0000000000000000 R09: 0000000000000000
[  239.542666][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.542676][ T8286] R13: 00007f66b1a16038 R14: 00007f66b1a15fa0 R15: 00007fff961d9a28
[  239.542700][ T8286]  </TASK>
[  239.554521][ T8288] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  239.873777][   T30] audit: type=1400 audit(1771083808.369:427): avc:  denied  { search } for  pid=5472 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  239.995257][   T30] audit: type=1400 audit(1771083808.369:428): avc:  denied  { search } for  pid=5472 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.622128][   T30] audit: type=1400 audit(1771083808.369:429): avc:  denied  { search } for  pid=5472 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.643830][ T5128] Bluetooth: hci2: command tx timeout
[  240.655052][   T13] bridge_slave_1: left allmulticast mode
[  240.659351][   T30] audit: type=1400 audit(1771083808.369:430): avc:  denied  { read } for  pid=5472 comm="dhcpcd" name="n100" dev="tmpfs" ino=4807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  240.662177][   T13] bridge_slave_1: left promiscuous mode
[  240.774173][   T30] audit: type=1400 audit(1771083808.369:431): avc:  denied  { open } for  pid=5472 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=4807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  240.778659][ T8307] overlayfs: overlapping lowerdir path
[  240.812752][   T30] audit: type=1400 audit(1771083808.369:432): avc:  denied  { getattr } for  pid=5472 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=4807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  240.836310][   T30] audit: type=1400 audit(1771083808.469:433): avc:  denied  { read } for  pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  240.857549][   T30] audit: type=1400 audit(1771083809.209:434): avc:  denied  { read open } for  pid=8305 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.885618][   T30] audit: type=1400 audit(1771083809.209:435): avc:  denied  { getattr } for  pid=8305 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.913013][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.039328][   T13] bridge_slave_0: left allmulticast mode
[  241.051914][   T13] bridge_slave_0: left promiscuous mode
[  241.100843][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.262056][ T5867] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  241.421947][ T5867] usb 1-1: Using ep0 maxpacket: 32
[  241.456015][ T5867] usb 1-1: unable to get BOS descriptor or descriptor too short
[  241.475497][ T5867] usb 1-1: config 14 has an invalid interface number: 239 but max is 1
[  241.504396][ T5867] usb 1-1: config 14 has an invalid interface number: 198 but max is 1
[  241.568466][ T5867] usb 1-1: config 14 has no interface number 0
[  241.630451][ T5867] usb 1-1: config 14 has no interface number 1
[  241.640048][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'.
[  241.646325][ T5867] usb 1-1: config 14 interface 239 has no altsetting 0
[  241.717632][ T5867] usb 1-1: config 14 interface 198 has no altsetting 0
[  241.761559][ T5867] usb 1-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=63.02
[  241.796686][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.831949][ T5867] usb 1-1: Product: syz
[  241.848858][ T5867] usb 1-1: Manufacturer: syz
[  241.872055][ T5867] usb 1-1: SerialNumber: syz
[  242.003116][ T5898] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  242.015982][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.070213][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.072848][ T8339] FAULT_INJECTION: forcing a failure.
[  242.072848][ T8339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.165992][   T13] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  242.186480][ T5867] usb 1-1: USB disconnect, device number 17
[  242.195623][   T13] bond0 (unregistering): Released all slaves
[  242.209883][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.4.590 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  242.209916][ T8339] Tainted: [L]=SOFTLOCKUP
[  242.209922][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  242.209931][ T8339] Call Trace:
[  242.209936][ T8339]  <TASK>
[  242.209942][ T8339]  dump_stack_lvl+0x100/0x190
[  242.209972][ T8339]  should_fail_ex.cold+0x5/0xa
[  242.209988][ T8339]  _copy_to_user+0x32/0xd0
[  242.210008][ T8339]  simple_read_from_buffer+0xcb/0x170
[  242.210028][ T8339]  proc_fail_nth_read+0x1af/0x230
[  242.210050][ T8339]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  242.210070][ T8339]  ? rw_verify_area+0xce/0x6d0
[  242.210083][ T8339]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  242.210102][ T8339]  vfs_read+0x1e4/0xb30
[  242.210119][ T8339]  ? __pfx_vfs_read+0x10/0x10
[  242.210134][ T8339]  ? __fget_files+0x215/0x3d0
[  242.210163][ T8339]  ? __fget_files+0x21f/0x3d0
[  242.210190][ T8339]  ksys_read+0x12a/0x250
[  242.210204][ T8339]  ? __pfx_ksys_read+0x10/0x10
[  242.210224][ T8339]  do_syscall_64+0x106/0xf80
[  242.210236][ T8339]  ? clear_bhb_loop+0x40/0x90
[  242.210250][ T8339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.210261][ T8339] RIP: 0033:0x7fef85d5c84e
[  242.210271][ T8339] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  242.210282][ T8339] RSP: 002b:00007fef86d31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  242.210294][ T8339] RAX: ffffffffffffffda RBX: 00007fef86d326c0 RCX: 00007fef85d5c84e
[  242.210301][ T8339] RDX: 000000000000000f RSI: 00007fef86d320a0 RDI: 0000000000000004
[  242.210308][ T8339] RBP: 00007fef86d32090 R08: 0000000000000000 R09: 0000000000000000
[  242.210315][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.210321][ T8339] R13: 00007fef86016038 R14: 00007fef86015fa0 R15: 00007ffc5a933e18
[  242.210335][ T8339]  </TASK>
[  242.436263][ T5898] usb 3-1: Using ep0 maxpacket: 8
[  242.487322][ T8341] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  242.521329][ T5898] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  242.530184][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  242.540024][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  242.549815][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  242.559769][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  242.574000][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  242.583085][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.722108][ T5810] Bluetooth: hci2: command tx timeout
[  242.816563][ T5898] usb 3-1: GET_CAPABILITIES returned 0
[  242.836426][ T5898] usbtmc 3-1:16.0: can't read capabilities
[  243.013243][  T791] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  243.046205][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  243.046221][   T30] audit: type=1400 audit(1771083811.539:442): avc:  denied  { append } for  pid=8352 comm="syz.0.593" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  243.119173][ T8354] loop5: detected capacity change from 0 to 2640
[  243.153980][ T8329] usbtmc 3-1:16.0: usb_control_msg returned -71
[  243.157618][ T1821] usb 3-1: USB disconnect, device number 16
[  243.203937][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.206246][  T791] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  243.290330][ T8359] overlayfs: missing 'lowerdir'
[  243.329449][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.351546][ T8359] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  243.383556][  T791] usb 5-1: config 0 has no interface number 0
[  243.390599][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.396246][  T791] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  243.409423][ T8259] chnl_net:caif_netlink_parms(): no params data found
[  243.416922][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.430836][  T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.500063][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.514102][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.532874][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.545098][  T791] usb 5-1: config 0 descriptor??
[  243.556008][  T791] usb 5-1: selecting invalid altsetting 1
[  243.584417][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.593608][  T791] dvb_ttusb_budget: ttusb_init_controller: error
[  243.608258][ T5794] ldm_validate_partition_table(): Disk read failed.
[  243.615751][  T791] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  243.647178][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.706525][ T5794] Buffer I/O error on dev loop5, logical block 0, async page read
[  243.719291][   T13] hsr_slave_0: left promiscuous mode
[  243.738293][ T5794] Dev loop5: unable to read RDB block 0
[  243.747543][   T13] hsr_slave_1: left promiscuous mode
[  243.829012][ T8369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8369 comm=syz.4.592
[  243.839222][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.997134][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.067921][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.085346][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.092006][ T5794]  loop5: unable to read partition table
[  244.102244][ T8354] ldm_validate_partition_table(): Disk read failed.
[  244.112102][ T8354] Dev loop5: unable to read RDB block 0
[  244.123431][  T791] DVB: Unable to find symbol cx22700_attach()
[  244.140960][ T8354]  loop5: unable to read partition table
[  244.148975][   T13] dummy0: left allmulticast mode
[  244.174933][ T8354] loop_reread_partitions: partition scan of loop5 (3�����) failed (rc=-5)
[  244.182289][   T13] veth1_macvtap: left promiscuous mode
[  244.199714][   T13] veth0_macvtap: left promiscuous mode
[  244.224966][  T791] DVB: Unable to find symbol tda10046_attach()
[  244.231162][  T791] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  244.232026][   T13] veth1_vlan: left promiscuous mode
[  244.272063][   T13] veth0_vlan: left promiscuous mode
[  244.302202][  T791] usb 5-1: USB disconnect, device number 14
[  244.374676][ T8379] FAULT_INJECTION: forcing a failure.
[  244.374676][ T8379] name failslab, interval 1, probability 0, space 0, times 0
[  244.399413][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.2.597 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  244.399443][ T8379] Tainted: [L]=SOFTLOCKUP
[  244.399449][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  244.399459][ T8379] Call Trace:
[  244.399464][ T8379]  <TASK>
[  244.399471][ T8379]  dump_stack_lvl+0x100/0x190
[  244.399504][ T8379]  should_fail_ex.cold+0x5/0xa
[  244.399526][ T8379]  ? sk_prot_alloc+0x10b/0x2a0
[  244.399552][ T8379]  should_failslab+0xc2/0x120
[  244.399576][ T8379]  __kmalloc_noprof+0xe0/0x850
[  244.399603][ T8379]  sk_prot_alloc+0x10b/0x2a0
[  244.399625][ T8379]  sk_alloc+0x36/0xe80
[  244.399651][ T8379]  bpf_prog_test_run_skb+0x4cd/0x3230
[  244.399676][ T8379]  ? find_held_lock+0x2b/0x80
[  244.399697][ T8379]  ? __fget_files+0x215/0x3d0
[  244.399731][ T8379]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  244.399753][ T8379]  ? fput+0x79/0x100
[  244.399772][ T8379]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  244.399790][ T8379]  __sys_bpf+0x1725/0x4b90
[  244.399810][ T8379]  ? __pfx___sys_bpf+0x10/0x10
[  244.399824][ T8379]  ? proc_fail_nth_write+0x9f/0x220
[  244.399843][ T8379]  ? find_held_lock+0x2b/0x80
[  244.399868][ T8379]  ? find_held_lock+0x2b/0x80
[  244.399888][ T8379]  ? ksys_write+0x190/0x250
[  244.399916][ T8379]  ? __mutex_unlock_slowpath+0x15c/0x790
[  244.399936][ T8379]  ? __fget_files+0x215/0x3d0
[  244.399974][ T8379]  ? fput+0x79/0x100
[  244.399990][ T8379]  ? ksys_write+0x1ac/0x250
[  244.400011][ T8379]  ? __pfx_ksys_write+0x10/0x10
[  244.400039][ T8379]  __x64_sys_bpf+0x7b/0xc0
[  244.400055][ T8379]  ? lockdep_hardirqs_on+0x78/0x100
[  244.400073][ T8379]  do_syscall_64+0x106/0xf80
[  244.400089][ T8379]  ? clear_bhb_loop+0x40/0x90
[  244.400110][ T8379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.400127][ T8379] RIP: 0033:0x7f487eb9bf79
[  244.400143][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.400158][ T8379] RSP: 002b:00007f487fa56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  244.400176][ T8379] RAX: ffffffffffffffda RBX: 00007f487ee15fa0 RCX: 00007f487eb9bf79
[  244.400187][ T8379] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  244.400197][ T8379] RBP: 00007f487fa56090 R08: 0000000000000000 R09: 0000000000000000
[  244.400206][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.400216][ T8379] R13: 00007f487ee16038 R14: 00007f487ee15fa0 R15: 00007ffe0a64cd18
[  244.400240][ T8379]  </TASK>
[  244.712438][   T13] team0 (unregistering): Port device batadv1 removed
[  244.802742][ T5810] Bluetooth: hci2: command 0x040f tx timeout
[  245.128029][ T8395] overlayfs: overlapping lowerdir path
[  245.237052][ T8398] FAULT_INJECTION: forcing a failure.
[  245.237052][ T8398] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  245.254725][ T8398] CPU: 1 UID: 0 PID: 8398 Comm: syz.0.602 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  245.254753][ T8398] Tainted: [L]=SOFTLOCKUP
[  245.254758][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  245.254768][ T8398] Call Trace:
[  245.254773][ T8398]  <TASK>
[  245.254779][ T8398]  dump_stack_lvl+0x100/0x190
[  245.254809][ T8398]  should_fail_ex.cold+0x5/0xa
[  245.254827][ T8398]  ? prepare_alloc_pages+0x16d/0x5f0
[  245.254854][ T8398]  should_fail_alloc_page+0xeb/0x140
[  245.254880][ T8398]  prepare_alloc_pages+0x1f0/0x5f0
[  245.254906][ T8398]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  245.254928][ T8398]  ? arch_stack_walk+0xa6/0xf0
[  245.254954][ T8398]  ? tomoyo_path_number_perm+0x46d/0x580
[  245.254972][ T8398]  ? stack_trace_save+0x8e/0xc0
[  245.254992][ T8398]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  245.255016][ T8398]  ? __lock_acquire+0x4a5/0x2630
[  245.255045][ T8398]  ? tomoyo_path_number_perm+0x46d/0x580
[  245.255060][ T8398]  ? security_file_ioctl+0xd3/0x230
[  245.255079][ T8398]  ? __x64_sys_ioctl+0xb7/0x210
[  245.255103][ T8398]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  245.255126][ T8398]  ? policy_nodemask+0xed/0x4f0
[  245.255151][ T8398]  alloc_pages_mpol+0x1fb/0x550
[  245.255175][ T8398]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  245.255197][ T8398]  ? do_raw_spin_lock+0x128/0x260
[  245.255215][ T8398]  ? find_held_lock+0x2b/0x80
[  245.255233][ T8398]  ? do_proc_control+0x204/0xe50
[  245.255260][ T8398]  alloc_pages_noprof+0x131/0x390
[  245.255285][ T8398]  get_free_pages_noprof+0x10/0xb0
[  245.255306][ T8398]  do_proc_control+0x210/0xe50
[  245.255330][ T8398]  ? __up_read+0xb1/0x700
[  245.255346][ T8398]  ? __pfx_do_proc_control+0x10/0x10
[  245.255376][ T8398]  usbdev_ioctl+0x1474/0x3aa0
[  245.255402][ T8398]  ? __pfx_usbdev_ioctl+0x10/0x10
[  245.255430][ T8398]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  245.255452][ T8398]  ? do_vfs_ioctl+0x226/0x13e0
[  245.255475][ T8398]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  245.255503][ T8398]  ? __fget_files+0x215/0x3d0
[  245.255526][ T8398]  ? hook_file_ioctl_common+0x146/0x410
[  245.255562][ T8398]  ? selinux_file_ioctl+0x139/0x290
[  245.255581][ T8398]  ? selinux_file_ioctl+0xb4/0x290
[  245.255601][ T8398]  ? __pfx_usbdev_ioctl+0x10/0x10
[  245.255626][ T8398]  __x64_sys_ioctl+0x18e/0x210
[  245.255648][ T8398]  do_syscall_64+0x106/0xf80
[  245.255663][ T8398]  ? clear_bhb_loop+0x40/0x90
[  245.255683][ T8398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.255699][ T8398] RIP: 0033:0x7f66b179bf79
[  245.255713][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.255728][ T8398] RSP: 002b:00007f66b26bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  245.255744][ T8398] RAX: ffffffffffffffda RBX: 00007f66b1a15fa0 RCX: 00007f66b179bf79
[  245.255755][ T8398] RDX: 0000200000000140 RSI: 00000000c0105500 RDI: 0000000000000003
[  245.255765][ T8398] RBP: 00007f66b26bb090 R08: 0000000000000000 R09: 0000000000000000
[  245.255774][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.255783][ T8398] R13: 00007f66b1a16038 R14: 00007f66b1a15fa0 R15: 00007fff961d9a28
[  245.255806][ T8398]  </TASK>
[  245.588863][  T792] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  245.603334][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'.
[  245.966643][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'.
[  246.012031][  T792] usb 3-1: Using ep0 maxpacket: 8
[  246.033844][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  246.049148][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.118534][   T13] team0 (unregistering): Port device team_slave_1 removed
[  246.122020][  T792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  246.229595][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  246.336266][   T13] team0 (unregistering): Port device team_slave_0 removed
[  246.347344][  T792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  246.361990][ T5898] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  246.380640][  T792] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  246.398600][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.431160][  T792] usb 3-1: config 0 descriptor??
[  246.437948][ T8392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  246.512493][ T5898] usb 1-1: Using ep0 maxpacket: 8
[  246.520429][ T5898] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  246.529745][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.540098][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  246.562774][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  246.614387][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.684753][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  246.759639][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.827575][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.862454][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.882803][ T5810] Bluetooth: hci2: command 0x040f tx timeout
[  247.017269][ T5898] usb 1-1: GET_CAPABILITIES returned 0
[  247.085678][ T5898] usbtmc 1-1:16.0: can't read capabilities
[  247.094136][ T8259] bridge_slave_0: entered allmulticast mode
[  247.320665][ T5898] usb 1-1: USB disconnect, device number 18
[  247.398069][ T8259] bridge_slave_0: entered promiscuous mode
[  247.431740][  T792] usb 3-1: USB disconnect, device number 17
[  247.433016][ T5128] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  247.456884][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.532624][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.569763][ T8259] bridge_slave_1: entered allmulticast mode
[  247.586066][ T8259] bridge_slave_1: entered promiscuous mode
[  247.654688][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.687437][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.779031][ T8259] team0: Port device team_slave_0 added
[  247.792234][ T8259] team0: Port device team_slave_1 added
[  247.977898][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.001087][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.066276][ T8259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.093908][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.113589][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.177117][   T30] audit: type=1400 audit(1771083816.669:443): avc:  denied  { setopt } for  pid=8437 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  248.207079][ T8259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.241020][   T30] audit: type=1400 audit(1771083816.729:444): avc:  denied  { execute } for  pid=8440 comm="syz.2.612" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  248.252823][ T8442] FAULT_INJECTION: forcing a failure.
[  248.252823][ T8442] name failslab, interval 1, probability 0, space 0, times 0
[  248.318401][ T8442] CPU: 1 UID: 0 PID: 8442 Comm: syz.2.612 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  248.318430][ T8442] Tainted: [L]=SOFTLOCKUP
[  248.318436][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  248.318445][ T8442] Call Trace:
[  248.318451][ T8442]  <TASK>
[  248.318458][ T8442]  dump_stack_lvl+0x100/0x190
[  248.318490][ T8442]  should_fail_ex.cold+0x5/0xa
[  248.318513][ T8442]  should_failslab+0xc2/0x120
[  248.318537][ T8442]  __kmalloc_node_noprof+0xe6/0x850
[  248.318557][ T8442]  ? alloc_slab_obj_exts+0x4e/0x1c0
[  248.318579][ T8442]  alloc_slab_obj_exts+0x4e/0x1c0
[  248.318598][ T8442]  __memcg_slab_post_alloc_hook+0x24a/0x9a0
[  248.318628][ T8442]  ? kasan_save_track+0x14/0x30
[  248.318651][ T8442]  kmem_cache_alloc_noprof+0x58a/0x6e0
[  248.318671][ T8442]  ? alloc_buffer_head+0x21/0x140
[  248.318694][ T8442]  alloc_buffer_head+0x21/0x140
[  248.318711][ T8442]  folio_alloc_buffers+0x2a0/0x8f0
[  248.318735][ T8442]  create_empty_buffers+0x3a/0x660
[  248.318754][ T8442]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  248.318779][ T8442]  ? find_held_lock+0x2b/0x80
[  248.318801][ T8442]  folio_create_buffers+0x13b/0x1a0
[  248.318824][ T8442]  __block_write_full_folio+0xed/0xee0
[  248.318845][ T8442]  ? folio_clear_dirty_for_io+0x178/0x820
[  248.318871][ T8442]  ? __pfx_blkdev_get_block+0x10/0x10
[  248.318893][ T8442]  block_write_full_folio+0x3b5/0x4e0
[  248.318919][ T8442]  ? __pfx_blkdev_get_block+0x10/0x10
[  248.318939][ T8442]  blkdev_writepages+0xc7/0x150
[  248.318958][ T8442]  ? __pfx_blkdev_writepages+0x10/0x10
[  248.318988][ T8442]  ? do_writepages+0x4b5/0x600
[  248.319016][ T8442]  ? __pfx_blkdev_writepages+0x10/0x10
[  248.319037][ T8442]  do_writepages+0x278/0x600
[  248.319066][ T8442]  ? __pfx_do_writepages+0x10/0x10
[  248.319092][ T8442]  ? do_raw_spin_unlock+0x145/0x1e0
[  248.319112][ T8442]  ? _raw_spin_unlock+0x28/0x50
[  248.319139][ T8442]  filemap_writeback+0x22d/0x2e0
[  248.319169][ T8442]  ? __pfx_filemap_writeback+0x10/0x10
[  248.319224][ T8442]  ? __pfx_current_time+0x10/0x10
[  248.319242][ T8442]  ? find_held_lock+0x2b/0x80
[  248.319263][ T8442]  ? get_pid_task+0xfc/0x250
[  248.319300][ T8442]  filemap_write_and_wait_range.part.0+0x88/0x110
[  248.319322][ T8442]  kiocb_invalidate_pages+0xde/0x180
[  248.319343][ T8442]  blkdev_write_iter+0x48f/0xd70
[  248.319368][ T8442]  vfs_write+0x6ac/0x1070
[  248.319392][ T8442]  ? __pfx_blkdev_write_iter+0x10/0x10
[  248.319413][ T8442]  ? __pfx_vfs_write+0x10/0x10
[  248.319438][ T8442]  ? find_held_lock+0x2b/0x80
[  248.319474][ T8442]  ksys_write+0x12a/0x250
[  248.319497][ T8442]  ? __pfx_ksys_write+0x10/0x10
[  248.319527][ T8442]  do_syscall_64+0x106/0xf80
[  248.319543][ T8442]  ? clear_bhb_loop+0x40/0x90
[  248.319564][ T8442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.319582][ T8442] RIP: 0033:0x7f487eb9bf79
[  248.319597][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.319614][ T8442] RSP: 002b:00007f487fa56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  248.319632][ T8442] RAX: ffffffffffffffda RBX: 00007f487ee15fa0 RCX: 00007f487eb9bf79
[  248.319643][ T8442] RDX: 0000000000002000 RSI: 0000200000000080 RDI: 0000000000000005
[  248.319653][ T8442] RBP: 00007f487fa56090 R08: 0000000000000000 R09: 0000000000000000
[  248.319662][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.319672][ T8442] R13: 00007f487ee16038 R14: 00007f487ee15fa0 R15: 00007ffe0a64cd18
[  248.319696][ T8442]  </TASK>
[  248.673282][ T8259] hsr_slave_0: entered promiscuous mode
[  248.679690][ T8259] hsr_slave_1: entered promiscuous mode
[  248.685949][ T8259] debugfs: 'hsr0' already exists in 'hsr'
[  248.691687][ T8259] Cannot create hsr debugfs directory
[  248.981531][ T5128] Bluetooth: hci2: command 0x040f tx timeout
[  248.989562][ T1820] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  249.192414][ T8452] mmap: syz.1.613 (8452) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  249.421550][   T30] audit: type=1400 audit(1771083817.909:445): avc:  denied  { ioctl } for  pid=8445 comm="syz.1.613" path="socket:[19350]" dev="sockfs" ino=19350 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  249.723850][ T8459] overlayfs: overlapping lowerdir path
[  249.807471][ T1820] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  249.832233][ T1820] usb 1-1: config 0 has no interface number 0
[  250.034192][ T1820] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  250.066490][ T1820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.090304][ T8466] netlink: 'syz.4.617': attribute type 1 has an invalid length.
[  250.103627][ T8466] netlink: 224 bytes leftover after parsing attributes in process `syz.4.617'.
[  250.110398][ T1820] usb 1-1: config 0 descriptor??
[  250.158911][ T1820] usb 1-1: selecting invalid altsetting 1
[  250.187344][ T1820] dvb_ttusb_budget: ttusb_init_controller: error
[  250.197173][ T1820] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  250.279098][ T1820] DVB: Unable to find symbol cx22700_attach()
[  250.292728][ T5882] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  250.369416][ T1820] DVB: Unable to find symbol tda10046_attach()
[  250.382104][ T1820] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  250.405010][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  250.411907][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  250.518412][ T8480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8480 comm=syz.0.611
[  250.755588][ T5882] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  250.771913][ T5882] usb 2-1: config 0 has no interface number 0
[  250.778854][ T1820] usb 1-1: USB disconnect, device number 19
[  250.833852][ T5882] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  250.882527][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.912805][ T8259] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  251.157741][ T5882] usb 2-1: config 0 descriptor??
[  251.174623][ T5882] usb 2-1: selecting invalid altsetting 1
[  251.175233][ T8259] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  251.180715][ T5882] dvb_ttusb_budget: ttusb_init_controller: error
[  251.193672][ T5882] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  251.225815][ T8259] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  251.278827][ T8259] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  251.340191][ T5882] DVB: Unable to find symbol cx22700_attach()
[  251.460850][ T8502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8502 comm=syz.1.616
[  251.592062][ T5898] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  251.749478][ T5882] DVB: Unable to find symbol tda10046_attach()
[  251.798891][ T5882] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  251.813142][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.845982][ T5882] usb 2-1: USB disconnect, device number 14
[  251.854280][ T8259] 8021q: adding VLAN 0 to HW filter on device team0
[  251.868398][ T5898] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  251.873492][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.877957][ T5898] usb 5-1: config 0 has no interface number 0
[  251.883565][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.907016][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.912291][ T5898] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  251.914199][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.970961][ T8259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  251.984317][ T8259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  251.985058][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.036722][ T5898] usb 5-1: config 0 descriptor??
[  252.046439][ T5898] usb 5-1: selecting invalid altsetting 1
[  252.061964][  T792] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[  252.062156][ T5898] dvb_ttusb_budget: ttusb_init_controller: error
[  252.078978][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  252.102187][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  252.157675][ T5898] DVB: Unable to find symbol cx22700_attach()
[  252.216688][  T792] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  252.219288][ T5898] DVB: Unable to find symbol tda10046_attach()
[  252.234956][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  252.242548][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  252.260238][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.278725][  T792] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  252.284507][   T10] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  252.389470][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  252.412381][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  252.429155][  T792] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  252.434105][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.612378][   T10] usb 1-1: Product: syz
[  252.616586][   T10] usb 1-1: Manufacturer: syz
[  252.624147][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  252.635154][  T792] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  252.651898][   T10] usb 1-1: SerialNumber: syz
[  252.653592][ T8259] veth0_vlan: entered promiscuous mode
[  252.675036][   T10] usb 1-1: config 0 descriptor??
[  252.695023][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  252.715849][ T8259] veth1_vlan: entered promiscuous mode
[  252.735285][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  252.751668][   T10] gspca_main: sq905c-2.14.0 probing 2770:9052
[  252.774141][  T792] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  252.785542][ T1821] usb 5-1: USB disconnect, device number 15
[  252.794924][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  252.825767][  T792] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  252.839244][ T8259] veth0_macvtap: entered promiscuous mode
[  252.856931][ T8259] veth1_macvtap: entered promiscuous mode
[  252.862934][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  252.874219][   T30] audit: type=1400 audit(1771083821.349:446): avc:  denied  { execute_no_trans } for  pid=8524 comm="syz.1.625" path="/125/file0" dev="tmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  252.909945][  T792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  252.928174][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.938746][  T792] usb 3-1: string descriptor 0 read error: -22
[  252.949136][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.956638][  T792] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  252.967202][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.981259][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.011252][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.012684][  T792] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  253.037529][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.179810][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.247637][ T5898] usb 3-1: USB disconnect, device number 18
[  253.333748][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.356696][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.421390][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.441544][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.476751][   T30] audit: type=1400 audit(1771083821.969:447): avc:  denied  { mounton } for  pid=8259 comm="syz-executor" path="/root/syzkaller.MQrCOZ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  253.556090][   T30] audit: type=1400 audit(1771083821.999:448): avc:  denied  { mounton } for  pid=8259 comm="syz-executor" path="/root/syzkaller.MQrCOZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  253.641478][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.656926][   T30] audit: type=1400 audit(1771083821.999:449): avc:  denied  { mounton } for  pid=8259 comm="syz-executor" path="/root/syzkaller.MQrCOZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  253.695673][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.734144][   T30] audit: type=1400 audit(1771083822.029:450): avc:  denied  { mounton } for  pid=8259 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  253.941937][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  254.134555][ T8559] netlink: 'syz.2.629': attribute type 16 has an invalid length.
[  254.142398][ T8559] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.629'.
[  255.053623][   T10] usb 5-1: Using ep0 maxpacket: 8
[  255.084595][   T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  255.102016][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.118290][   T10] usb 5-1: Product: syz
[  255.120036][   T24] usb 1-1: USB disconnect, device number 20
[  255.427985][ T8556] overlayfs: overlapping lowerdir path
[  255.436092][   T10] usb 5-1: Manufacturer: syz
[  255.464111][   T10] usb 5-1: SerialNumber: syz
[  255.505842][   T10] usb 5-1: config 0 descriptor??
[  255.680427][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  256.125187][   T10] gspca_se401: Bayer format not supported!
[  256.438187][ T8582] 8021q: adding VLAN 0 to HW filter on device batadv2
[  256.474164][   T30] audit: type=1400 audit(1771083824.959:451): avc:  denied  { write } for  pid=8579 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  256.506611][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.627'.
[  256.509595][ T8581] autofs: Unknown parameter 'no9� ��P��G!8�����E�8-�� ����Ŗ�Eeլ(�	Ir�\��u}ib�����T0;��my�[Gc��#�>Qk��bY�&��L��h<y����M�v��^7 !J�>�O�h'���rK1�\kU{!�e���ܚ7���
[  256.509595][ T8581] �U�e�[���%#s'
[  256.555168][ T8582] team0: Port device batadv2 added
[  256.725635][   T24] usb 5-1: USB disconnect, device number 16
[  256.928375][ T8591] sg_write: data in/out 808464396/120 bytes for SCSI command 0x0-- guessing data in;
[  256.928375][ T8591]    program syz.0.635 not setting count and/or reply_len properly
[  257.211901][   T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  257.315526][ T5128] Bluetooth: hci3: unexpected event for opcode 0x1003
[  257.365410][ T8604] FAULT_INJECTION: forcing a failure.
[  257.365410][ T8604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  257.435774][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  257.453156][   T24] usb 2-1: config 0 has no interface number 0
[  257.481482][   T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  257.482661][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.3.638 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  257.482683][ T8604] Tainted: [L]=SOFTLOCKUP
[  257.482688][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  257.482696][ T8604] Call Trace:
[  257.482702][ T8604]  <TASK>
[  257.482707][ T8604]  dump_stack_lvl+0x100/0x190
[  257.482735][ T8604]  should_fail_ex.cold+0x5/0xa
[  257.482755][ T8604]  _copy_from_user+0x2e/0xd0
[  257.482779][ T8604]  copy_msghdr_from_user+0x9f/0x4f0
[  257.482800][ T8604]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  257.482829][ T8604]  ___sys_sendmsg+0x106/0x1e0
[  257.482850][ T8604]  ? __pfx____sys_sendmsg+0x10/0x10
[  257.482894][ T8604]  __sys_sendmsg+0x170/0x220
[  257.482917][ T8604]  ? __pfx___sys_sendmsg+0x10/0x10
[  257.482954][ T8604]  do_syscall_64+0x106/0xf80
[  257.482970][ T8604]  ? clear_bhb_loop+0x40/0x90
[  257.482989][ T8604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.483004][ T8604] RIP: 0033:0x7f511059bf79
[  257.483017][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.483031][ T8604] RSP: 002b:00007f511137c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.483047][ T8604] RAX: ffffffffffffffda RBX: 00007f5110815fa0 RCX: 00007f511059bf79
[  257.483057][ T8604] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  257.483066][ T8604] RBP: 00007f511137c090 R08: 0000000000000000 R09: 0000000000000000
[  257.483075][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.483083][ T8604] R13: 00007f5110816038 R14: 00007f5110815fa0 R15: 00007ffc896d62b8
[  257.483104][ T8604]  </TASK>
[  257.663292][   T30] audit: type=1400 audit(1771083826.159:452): avc:  denied  { map } for  pid=8609 comm="syz.4.641" path="socket:[20440]" dev="sockfs" ino=20440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  257.755925][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.803740][   T30] audit: type=1400 audit(1771083826.179:453): avc:  denied  { create } for  pid=8609 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  257.817303][   T24] usb 2-1: config 0 descriptor??
[  257.971328][   T30] audit: type=1400 audit(1771083826.179:454): avc:  denied  { create } for  pid=8609 comm="syz.4.641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  258.604198][ T8627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8627 comm=syz.1.634
[  259.014057][   T30] audit: type=1400 audit(1771083826.179:455): avc:  denied  { write } for  pid=8609 comm="syz.4.641" name="file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  259.287753][   T30] audit: type=1400 audit(1771083826.189:456): avc:  denied  { open } for  pid=8609 comm="syz.4.641" path="/138/file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  259.574568][   T30] audit: type=1400 audit(1771083826.189:457): avc:  denied  { ioctl } for  pid=8609 comm="syz.4.641" path="/138/file0" dev="tmpfs" ino=757 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  259.832097][   T24] usb 2-1: selecting invalid altsetting 1
[  259.837943][   T24] dvb_ttusb_budget: ttusb_init_controller: error
[  259.844589][   T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  259.929388][   T30] audit: type=1400 audit(1771083826.209:458): avc:  denied  { unlink } for  pid=5802 comm="syz-executor" name="file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  260.042110][   T24] DVB: Unable to find symbol cx22700_attach()
[  260.130013][   T24] DVB: Unable to find symbol tda10046_attach()
[  260.136380][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  260.174082][   T30] audit: type=1400 audit(1771083828.469:459): avc:  denied  { mount } for  pid=8639 comm="syz.1.645" name="/" dev="configfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  260.197060][   T30] audit: type=1400 audit(1771083828.469:460): avc:  denied  { search } for  pid=8639 comm="syz.1.645" name="/" dev="configfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  260.219151][   T30] audit: type=1400 audit(1771083828.469:461): avc:  denied  { search } for  pid=8639 comm="syz.1.645" name="/" dev="configfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  260.275545][   T30] audit: type=1400 audit(1771083828.469:462): avc:  denied  { read open } for  pid=8639 comm="syz.1.645" path="/" dev="configfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  260.340782][ T8652] overlayfs: missing 'lowerdir'
[  260.351955][ T8652] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  260.371898][ T5898] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  260.383444][   T30] audit: type=1400 audit(1771083828.469:463): avc:  denied  { setattr } for  pid=8639 comm="syz.1.645" name="/" dev="configfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  260.400577][   T24] usb 2-1: USB disconnect, device number 15
[  260.454600][   T30] audit: type=1400 audit(1771083828.469:464): avc:  denied  { search } for  pid=8639 comm="syz.1.645" name="/" dev="configfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  260.555411][ T5898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  260.565813][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.575841][ T5898] usb 1-1: Product: syz
[  260.582034][ T5898] usb 1-1: Manufacturer: syz
[  260.593584][ T5898] usb 1-1: SerialNumber: syz
[  261.361963][ T5128] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  261.371473][ T5128] Bluetooth: hci3: Injecting HCI hardware error event
[  261.380130][ T5128] Bluetooth: hci3: hardware error 0x00
[  261.876264][ T5898] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  261.905132][ T5898] cdc_ncm 1-1:1.0: setting rx_max = 16384
[  262.907484][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.928434][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.936313][ T1821] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  263.100086][ T1821] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  263.108323][ T1821] usb 2-1: config 0 has no interface number 0
[  263.125798][ T1821] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  263.231149][ T1821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.246388][ T5898] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  263.279298][ T5898] usb 1-1: USB disconnect, device number 21
[  263.297917][ T5898] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  263.348487][ T1821] usb 2-1: config 0 descriptor??
[  263.365610][ T1821] usb 2-1: selecting invalid altsetting 1
[  263.384395][ T1821] dvb_ttusb_budget: ttusb_init_controller: error
[  263.390760][ T1821] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  263.483618][ T5128] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  264.012810][ T8681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8681 comm=syz.1.655
[  264.352036][ T1821] DVB: Unable to find symbol cx22700_attach()
[  264.445353][ T8705] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.491889][ T1821] DVB: Unable to find symbol tda10046_attach()
[  264.525516][ T1821] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  264.554533][ T1821] usb 2-1: USB disconnect, device number 16
[  264.705751][ T8714] overlayfs: missing 'lowerdir'
[  264.800351][ T8716] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  265.265031][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.272590][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.507918][ T1821] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  265.571962][  T792] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  265.833526][  T792] usb 4-1: Using ep0 maxpacket: 8
[  265.851478][  T792] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  265.922790][  T792] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  266.037745][  T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  266.052441][ T1821] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  266.071938][ T1821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.103479][  T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  266.118198][ T1821] usb 5-1: Product: syz
[  266.127083][ T1821] usb 5-1: Manufacturer: syz
[  266.131763][ T1821] usb 5-1: SerialNumber: syz
[  266.984665][  T792] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  267.002671][  T792] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  267.011909][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.023091][ T1821] usb 5-1: config 0 descriptor??
[  267.054359][ T1821] gspca_main: sq905c-2.14.0 probing 2770:9052
[  267.242511][  T792] usb 4-1: GET_CAPABILITIES returned 0
[  267.271989][  T792] usbtmc 4-1:16.0: can't read capabilities
[  267.639018][  T792] usb 4-1: USB disconnect, device number 15
[  268.233203][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.303039][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.353894][ T5882] usb 5-1: USB disconnect, device number 17
[  269.954669][ T8817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8817 comm=syz.3.680
[  270.781930][ T5882] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  271.005944][ T5882] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  271.016330][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.312940][ T5882] usb 3-1: config 0 descriptor??
[  272.312072][    C0] wlan1: beacon TX faster than countdown (channel/color switch) completion
[  272.533854][  T792] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  272.691911][  T792] usb 4-1: Using ep0 maxpacket: 8
[  272.699979][  T792] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  272.711953][  T792] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  272.727558][  T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  272.740341][ T5882] usb 3-1: Cannot set autoneg
[  272.745207][  T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  272.745741][ T5882] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  272.761891][  T792] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  272.789944][  T792] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  272.805277][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.049322][ T8849] overlayfs: missing 'lowerdir'
[  273.092538][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'.
[  273.101460][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'.
[  273.175310][ T8853] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  273.187720][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.322380][  T792] usb 4-1: GET_CAPABILITIES returned 0
[  273.328063][  T792] usbtmc 4-1:16.0: can't read capabilities
[  273.338217][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.380520][ T5882] usb 3-1: USB disconnect, device number 19
[  273.490514][ T8857] FAULT_INJECTION: forcing a failure.
[  273.490514][ T8857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.505227][  T792] usb 4-1: USB disconnect, device number 16
[  273.506400][ T8835] usbtmc 4-1:16.0: usb_control_msg returned -71
[  273.517787][ T8857] CPU: 1 UID: 0 PID: 8857 Comm: syz.1.688 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  273.517816][ T8857] Tainted: [L]=SOFTLOCKUP
[  273.517821][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  273.517832][ T8857] Call Trace:
[  273.517838][ T8857]  <TASK>
[  273.517843][ T8857]  dump_stack_lvl+0x100/0x190
[  273.517874][ T8857]  should_fail_ex.cold+0x5/0xa
[  273.517896][ T8857]  _copy_from_iter+0x1f4/0x1690
[  273.517925][ T8857]  ? __asan_memset+0x23/0x50
[  273.517945][ T8857]  ? __pfx__copy_from_iter+0x10/0x10
[  273.517968][ T8857]  ? __pfx___alloc_skb+0x10/0x10
[  273.518003][ T8857]  netlink_sendmsg+0x808/0xda0
[  273.518026][ T8857]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.518043][ T8857]  ? __might_fault+0x20/0x140
[  273.518071][ T8857]  ____sys_sendmsg+0xa54/0xc30
[  273.518094][ T8857]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.518123][ T8857]  ___sys_sendmsg+0x190/0x1e0
[  273.518146][ T8857]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.518197][ T8857]  __sys_sendmsg+0x170/0x220
[  273.518223][ T8857]  ? __pfx___sys_sendmsg+0x10/0x10
[  273.518264][ T8857]  do_syscall_64+0x106/0xf80
[  273.518282][ T8857]  ? clear_bhb_loop+0x40/0x90
[  273.518303][ T8857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.518320][ T8857] RIP: 0033:0x7fe77139bf79
[  273.518343][ T8857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.518359][ T8857] RSP: 002b:00007fe772241028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.518377][ T8857] RAX: ffffffffffffffda RBX: 00007fe771615fa0 RCX: 00007fe77139bf79
[  273.518388][ T8857] RDX: 00000000000080d0 RSI: 0000200000000000 RDI: 0000000000000003
[  273.518398][ T8857] RBP: 00007fe772241090 R08: 0000000000000000 R09: 0000000000000000
[  273.518408][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.518418][ T8857] R13: 00007fe771616038 R14: 00007fe771615fa0 R15: 00007ffc54888be8
[  273.518443][ T8857]  </TASK>
[  274.778682][ T8875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8875 comm=syz.0.691
[  274.862001][ T5882] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  275.140504][ T5882] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  275.166318][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.190394][ T5882] usb 3-1: Product: syz
[  275.207547][ T5882] usb 3-1: Manufacturer: syz
[  275.218454][ T5882] usb 3-1: SerialNumber: syz
[  275.233886][ T5882] usb 3-1: config 0 descriptor??
[  275.252505][ T5882] gspca_main: sq905c-2.14.0 probing 2770:9052
[  275.610879][ T8879] dvmrp0: entered allmulticast mode
[  276.327542][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.337437][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.357029][  T792] usb 3-1: USB disconnect, device number 20
[  277.511605][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'.
[  278.042090][ T1821] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  278.245640][ T1821] usb 1-1: Using ep0 maxpacket: 8
[  278.466866][ T1821] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  278.526013][ T1821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  278.619887][ T1821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  278.654081][ T1821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  278.721748][ T8918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8918 comm=syz.2.705
[  279.097178][ T1821] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.138170][ T1821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  279.151867][ T1821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.505856][ T1821] usb 1-1: GET_CAPABILITIES returned 0
[  279.587448][ T1821] usbtmc 1-1:16.0: can't read capabilities
[  279.762101][ T1821] usb 1-1: USB disconnect, device number 22
[  281.471908][  T792] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  281.573010][ T8958] overlayfs: missing 'lowerdir'
[  281.589451][ T8958] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  281.781073][  T792] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  281.790970][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.821640][ T8964] syzkaller0: entered promiscuous mode
[  281.827220][  T792] usb 1-1: Product: syz
[  281.827245][  T792] usb 1-1: Manufacturer: syz
[  281.827259][  T792] usb 1-1: SerialNumber: syz
[  281.831258][  T792] usb 1-1: config 0 descriptor??
[  281.901974][ T8964] syzkaller0: entered allmulticast mode
[  282.203596][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'.
[  282.232818][  T792] gspca_main: sq905c-2.14.0 probing 2770:9052
[  283.025113][ T8991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8991 comm=syz.3.718
[  283.047245][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.512287][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.530237][ T8997] Can't find ip_set type has
[  283.631716][ T9000] netlink: 'syz.2.719': attribute type 3 has an invalid length.
[  283.662219][ T1821] usb 1-1: USB disconnect, device number 23
[  283.776383][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'.
[  283.791956][  T792] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  284.044314][  T792] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  284.057264][  T792] usb 2-1: config 0 has no interface number 0
[  284.071283][  T792] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  284.098075][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.132448][ T1821] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  284.141178][  T792] usb 2-1: config 0 descriptor??
[  284.157247][  T792] usb 2-1: selecting invalid altsetting 1
[  284.170995][  T792] dvb_ttusb_budget: ttusb_init_controller: error
[  284.185370][  T792] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  284.295920][  T792] DVB: Unable to find symbol cx22700_attach()
[  284.305226][ T1821] usb 5-1: Using ep0 maxpacket: 8
[  284.319403][ T1821] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  284.334497][ T1821] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  284.365728][ T1821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  284.391737][  T792] DVB: Unable to find symbol tda10046_attach()
[  284.413749][ T1821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  284.426765][  T792] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  284.436895][ T1821] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  284.468950][ T1821] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  284.491085][ T1821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.539298][   T10] usb 2-1: USB disconnect, device number 17
[  284.749987][ T1821] usb 5-1: GET_CAPABILITIES returned 0
[  284.760733][ T1821] usbtmc 5-1:16.0: can't read capabilities
[  285.002048][   T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  285.099514][ T9002] usbtmc 5-1:16.0: usb_control_msg returned -71
[  285.106098][ T5898] usb 5-1: USB disconnect, device number 18
[  285.174237][   T10] usb 1-1: Using ep0 maxpacket: 16
[  285.180864][   T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  285.190870][   T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  285.209557][   T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  285.322121][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  285.331069][   T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  285.340639][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.451596][   T10] usb 1-1: Product: syz
[  285.467078][   T10] usb 1-1: Manufacturer: syz
[  285.482904][   T10] usb 1-1: SerialNumber: syz
[  285.791089][   T10] usb 1-1: config 0 descriptor??
[  286.005939][   T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  286.093642][ T5161] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  286.159245][ T5161] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  286.241233][ T9016] FAULT_INJECTION: forcing a failure.
[  286.241233][ T9016] name failslab, interval 1, probability 0, space 0, times 0
[  286.263692][ T9016] CPU: 0 UID: 0 PID: 9016 Comm: syz.0.725 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  286.263724][ T9016] Tainted: [L]=SOFTLOCKUP
[  286.263730][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  286.263740][ T9016] Call Trace:
[  286.263746][ T9016]  <TASK>
[  286.263753][ T9016]  dump_stack_lvl+0x100/0x190
[  286.263787][ T9016]  should_fail_ex.cold+0x5/0xa
[  286.263811][ T9016]  should_failslab+0xc2/0x120
[  286.263838][ T9016]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  286.263861][ T9016]  ? security_file_alloc+0x34/0x2c0
[  286.263884][ T9016]  ? trace_kmem_cache_alloc+0xf3/0x120
[  286.263914][ T9016]  security_file_alloc+0x34/0x2c0
[  286.263938][ T9016]  init_file+0x95/0x480
[  286.263956][ T9016]  alloc_empty_file+0x73/0x1c0
[  286.263976][ T9016]  path_openat+0xe8/0x31a0
[  286.264000][ T9016]  ? kasan_save_stack+0x3f/0x50
[  286.264019][ T9016]  ? kasan_save_stack+0x30/0x50
[  286.264039][ T9016]  ? kasan_save_track+0x14/0x30
[  286.264059][ T9016]  ? __kasan_slab_alloc+0x89/0x90
[  286.264080][ T9016]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  286.264098][ T9016]  ? do_getname+0x35/0x390
[  286.264115][ T9016]  ? do_sys_openat2+0xc5/0x1e0
[  286.264133][ T9016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.264154][ T9016]  ? __pfx_path_openat+0x10/0x10
[  286.264189][ T9016]  do_file_open+0x20e/0x430
[  286.264218][ T9016]  ? __pfx_do_file_open+0x10/0x10
[  286.264262][ T9016]  ? alloc_fd+0x476/0x790
[  286.264291][ T9016]  ? do_getname+0x191/0x390
[  286.264312][ T9016]  do_sys_openat2+0x10d/0x1e0
[  286.264330][ T9016]  ? __pfx_do_sys_openat2+0x10/0x10
[  286.264347][ T9016]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  286.264372][ T9016]  ? __fget_files+0x21f/0x3d0
[  286.264401][ T9016]  __x64_sys_openat+0x12d/0x210
[  286.264421][ T9016]  ? __pfx___x64_sys_openat+0x10/0x10
[  286.264439][ T9016]  ? ksys_write+0x1ac/0x250
[  286.264470][ T9016]  do_syscall_64+0x106/0xf80
[  286.264487][ T9016]  ? clear_bhb_loop+0x40/0x90
[  286.264508][ T9016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.264526][ T9016] RIP: 0033:0x7f66b179bf79
[  286.264547][ T9016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.264564][ T9016] RSP: 002b:00007f66b26bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  286.264582][ T9016] RAX: ffffffffffffffda RBX: 00007f66b1a15fa0 RCX: 00007f66b179bf79
[  286.264593][ T9016] RDX: 00000000001ad100 RSI: 0000200000000140 RDI: 00000000ffffff9c
[  286.264604][ T9016] RBP: 00007f66b26bb090 R08: 0000000000000000 R09: 0000000000000000
[  286.264614][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.264624][ T9016] R13: 00007f66b1a16038 R14: 00007f66b1a15fa0 R15: 00007fff961d9a28
[  286.264648][ T9016]  </TASK>
[  286.265500][   T10] usb 1-1: USB disconnect, device number 24
[  286.602952][ T5951] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  286.645543][ T5161] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  286.683750][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  286.683769][   T30] audit: type=1400 audit(1771083855.129:468): avc:  denied  { ioctl } for  pid=9030 comm="syz.3.730" path="socket:[23696]" dev="sockfs" ino=23696 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  286.769176][ T5161] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  286.797292][ T5161] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  286.882276][ T5882] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  287.516143][ T5882] usb 2-1: Using ep0 maxpacket: 16
[  287.538075][ T5882] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  287.571670][ T5882] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  287.582034][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.590210][ T5882] usb 2-1: Product: 娲䑈ǹ뵾ꮍꯀ伝둴悐攤鲋꾽垾졔饵Ფᣵ痈씿曥䩝㺶锊鳆卹䓁ꏫ器譗醙跤၀樣鉩ꂑ⍆栰鿐筄┟杒꘲綍䒋鶐쥓䅠벺㌁엤쨯⊬ᶪ몃칙礘䳅鹟稜잩日雓湹蚰儚⢜嚖绰Ｒ贓鈂䮟ﾞ퓢館驸
[  287.617642][ T5882] usb 2-1: Manufacturer: 
[  288.171725][ T5882] cdc_ncm 2-1:1.0: bind() failure
[  288.222261][   T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  288.279590][ T5882] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  288.302512][ T5882] cdc_ncm 2-1:1.1: bind() failure
[  288.354973][ T5882] usb 2-1: USB disconnect, device number 18
[  288.578164][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  288.775360][   T10] usb 1-1: config 0 has no interface number 0
[  288.897199][   T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  289.006428][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.785666][   T10] usb 1-1: config 0 descriptor??
[  289.806742][   T10] usb 1-1: selecting invalid altsetting 1
[  289.840360][   T10] dvb_ttusb_budget: ttusb_init_controller: error
[  289.844755][ T9064] overlayfs: missing 'lowerdir'
[  289.848197][   T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  289.880189][ T9064] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  290.062135][ T5867] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  290.229592][ T5867] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  290.316101][ T5867] usb 3-1: config 0 has no interface number 0
[  290.348336][ T5867] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  290.376238][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.387420][   T10] DVB: Unable to find symbol cx22700_attach()
[  290.410905][ T5867] usb 3-1: config 0 descriptor??
[  290.492481][ T5867] usb 3-1: selecting invalid altsetting 1
[  290.498322][ T5867] dvb_ttusb_budget: ttusb_init_controller: error
[  290.514476][ T5867] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  290.517358][   T10] DVB: Unable to find symbol tda10046_attach()
[  290.537875][   T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  290.630495][ T5867] DVB: Unable to find symbol cx22700_attach()
[  290.743415][   T10] usb 1-1: USB disconnect, device number 25
[  291.017868][ T5867] DVB: Unable to find symbol tda10046_attach()
[  291.059114][ T5867] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  291.099754][ T5867] usb 3-1: USB disconnect, device number 21
[  291.543242][   T30] audit: type=1400 audit(1771083859.969:469): avc:  denied  { execute } for  pid=9087 comm="syz.0.743" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=23163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  292.531841][ T9110] overlayfs: overlapping lowerdir path
[  293.746702][ T9137] FAULT_INJECTION: forcing a failure.
[  293.746702][ T9137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.762232][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  293.772349][ T9137] CPU: 0 UID: 0 PID: 9137 Comm: syz.2.754 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  293.772381][ T9137] Tainted: [L]=SOFTLOCKUP
[  293.772387][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  293.772397][ T9137] Call Trace:
[  293.772404][ T9137]  <TASK>
[  293.772411][ T9137]  dump_stack_lvl+0x100/0x190
[  293.772444][ T9137]  should_fail_ex.cold+0x5/0xa
[  293.772469][ T9137]  _copy_from_iter+0x1f4/0x1690
[  293.772507][ T9137]  ? __asan_memset+0x23/0x50
[  293.772530][ T9137]  ? __pfx__copy_from_iter+0x10/0x10
[  293.772556][ T9137]  ? __pfx___alloc_skb+0x10/0x10
[  293.772582][ T9137]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  293.772614][ T9137]  netlink_sendmsg+0x808/0xda0
[  293.772640][ T9137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.772657][ T9137]  ? __might_fault+0x20/0x140
[  293.772687][ T9137]  ____sys_sendmsg+0xa54/0xc30
[  293.772712][ T9137]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.772745][ T9137]  ___sys_sendmsg+0x190/0x1e0
[  293.772770][ T9137]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.772821][ T9137]  __sys_sendmsg+0x170/0x220
[  293.772849][ T9137]  ? __pfx___sys_sendmsg+0x10/0x10
[  293.772892][ T9137]  do_syscall_64+0x106/0xf80
[  293.772911][ T9137]  ? clear_bhb_loop+0x40/0x90
[  293.772933][ T9137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.772951][ T9137] RIP: 0033:0x7f487eb9bf79
[  293.772967][ T9137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.772983][ T9137] RSP: 002b:00007f487fa35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.773001][ T9137] RAX: ffffffffffffffda RBX: 00007f487ee16090 RCX: 00007f487eb9bf79
[  293.773013][ T9137] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000006
[  293.773023][ T9137] RBP: 00007f487fa35090 R08: 0000000000000000 R09: 0000000000000000
[  293.773033][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.773043][ T9137] R13: 00007f487ee16128 R14: 00007f487ee16090 R15: 00007ffe0a64cd18
[  293.773067][ T9137]  </TASK>
[  293.988250][  T792] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  294.072068][   T10] usb 5-1: Using ep0 maxpacket: 32
[  294.085058][   T10] usb 5-1: config 0 has an invalid interface number: 3 but max is 0
[  294.097150][   T10] usb 5-1: config 0 has no interface number 0
[  294.108010][   T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  294.117143][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.154459][   T10] usb 5-1: config 0 descriptor??
[  294.390691][   T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  294.493117][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  294.585023][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  294.611937][   T10] usb 5-1: media controller created
[  294.628974][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  294.725124][  T792] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  294.734514][  T792] usb 4-1: config 0 has no interface number 0
[  294.743772][  T792] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  294.743909][   T10] DVB: Unable to find symbol dib7000p_attach()
[  294.753145][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.812571][   T30] audit: type=1400 audit(1771083863.279:470): avc:  denied  { write } for  pid=9143 comm="syz.4.756" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  294.857220][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  294.858672][  T792] usb 4-1: config 0 descriptor??
[  294.883800][  T792] usb 4-1: selecting invalid altsetting 1
[  294.899746][  T792] dvb_ttusb_budget: ttusb_init_controller: error
[  294.916483][  T792] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  294.971919][   T10] rc_core: IR keymap rc-dib0700-rc5 not found
[  294.981220][   T10] Registered IR keymap rc-empty
[  295.130491][   T10] dvb-usb: could not initialize remote control.
[  295.130777][ T9129] ------------[ cut here ]------------
[  295.143262][ T9129] usb 5-1: BOGUS control dir, pipe 80001380 doesn't match bRequestType c0
[  295.152094][ T9129] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x1573/0x1910, CPU#1: syz.3.753/9129
[  295.162711][ T9129] Modules linked in:
[  295.166939][ T9129] CPU: 1 UID: 0 PID: 9129 Comm: syz.3.753 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.177798][ T9129] Tainted: [L]=SOFTLOCKUP
[  295.182288][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.192429][ T9129] RIP: 0010:usb_submit_urb+0x157e/0x1910
[  295.198066][ T9129] Code: d2 74 5d 48 89 54 24 40 e8 af 22 ba fa 4c 89 ef e8 d7 be de fe 48 89 c6 48 8d 3d dd 54 97 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 83 22 ba fa 89 ee bf ff 00 00 00
[  295.217834][ T9129] RSP: 0018:ffffc9000358f968 EFLAGS: 00010283
[  295.223954][ T9129] RAX: ffffffff8c8087a0 RBX: ffff88802cf03300 RCX: 0000000080001380
[  295.231962][ T9129] RDX: ffff88802cd8f5c0 RSI: ffffffff8c8087a0 RDI: ffffffff90e5bb00
[  295.239933][ T9129] RBP: ffff8880335b3058 R08: 00000000000000c0 R09: 0000000000000000
[  295.247972][ T9129] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807e4817e0
[  295.256460][ T9129] R13: ffff8880335b30b0 R14: 0000000080001380 R15: 00000000000000c0
[  295.264774][ T9129] FS:  00007f511137c6c0(0000) GS:ffff888124458000(0000) knlGS:0000000000000000
[  295.273769][ T9129] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.280359][ T9129] CR2: 000000110c42c1de CR3: 00000000342e2000 CR4: 00000000003526f0
[  295.288393][ T9129] Call Trace:
[  295.291684][ T9129]  <TASK>
[  295.294700][ T9129]  ? __init_swait_queue_head+0xca/0x150
[  295.300283][ T9129]  usb_start_wait_urb+0x106/0x4c0
[  295.305361][ T9129]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  295.310901][ T9129]  ? __asan_memset+0x23/0x50
[  295.315562][ T9129]  usb_control_msg+0x326/0x4a0
[  295.320334][ T9129]  ? __pfx_usb_control_msg+0x10/0x10
[  295.325664][ T9129]  dib0700_ctrl_rd+0x1b5/0x320
[  295.330417][ T9129]  dib0700_i2c_xfer+0x460/0xd90
[  295.335286][ T9129]  __i2c_transfer+0x5d9/0x17f0
[  295.340038][ T9129]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  295.345887][ T9129]  ? __pfx___i2c_transfer+0x10/0x10
[  295.351068][ T9129]  ? rt_mutex_slowtrylock+0x93/0x100
[  295.356655][ T9129]  i2c_transfer+0x15f/0x380
[  295.361162][ T9129]  i2cdev_ioctl_rdwr+0x3ec/0x700
[  295.366315][ T9129]  i2cdev_ioctl+0x19d/0x830
[  295.370802][ T9129]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  295.375993][ T9129]  ? selinux_file_ioctl+0x139/0x290
[  295.381178][ T9129]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  295.386239][ T9129]  __x64_sys_ioctl+0x18e/0x210
[  295.391009][ T9129]  do_syscall_64+0x106/0xf80
[  295.395637][ T9129]  ? clear_bhb_loop+0x40/0x90
[  295.400297][ T9129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.406215][ T9129] RIP: 0033:0x7f511059bf79
[  295.410614][ T9129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.430286][ T9129] RSP: 002b:00007f511137c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  295.438718][ T9129] RAX: ffffffffffffffda RBX: 00007f5110815fa0 RCX: 00007f511059bf79
[  295.446744][ T9129] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000007
[  295.455136][ T9129] RBP: 00007f51106327e0 R08: 0000000000000000 R09: 0000000000000000
[  295.463317][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.471291][ T9129] R13: 00007f5110816038 R14: 00007f5110815fa0 R15: 00007ffc896d62b8
[  295.479288][ T9129]  </TASK>
[  295.482313][ T9129] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  295.489571][ T9129] CPU: 1 UID: 0 PID: 9129 Comm: syz.3.753 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.500325][ T9129] Tainted: [L]=SOFTLOCKUP
[  295.504621][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.514664][ T9129] Call Trace:
[  295.517923][ T9129]  <TASK>
[  295.520833][ T9129]  dump_stack_lvl+0x100/0x190
[  295.525494][ T9129]  vpanic+0x552/0x970
[  295.529456][ T9129]  ? __pfx_vpanic+0x10/0x10
[  295.533961][ T9129]  panic+0xd1/0xe0
[  295.537675][ T9129]  ? __pfx_panic+0x10/0x10
[  295.542083][ T9129]  check_panic_on_warn.cold+0x19/0x34
[  295.547452][ T9129]  ? usb_submit_urb+0x1573/0x1910
[  295.552476][ T9129]  __warn.cold+0x191/0x348
[  295.556875][ T9129]  __report_bug+0x296/0x3d0
[  295.561381][ T9129]  ? usb_submit_urb+0x1573/0x1910
[  295.566406][ T9129]  ? __pfx___report_bug+0x10/0x10
[  295.571413][ T9129]  ? mark_held_locks+0x40/0x70
[  295.576275][ T9129]  ? stack_depot_save_flags+0x479/0x9d0
[  295.581819][ T9129]  report_bug_entry+0xe1/0x290
[  295.586588][ T9129]  ? usb_submit_urb+0x157e/0x1910
[  295.591631][ T9129]  handle_bug+0x1c9/0x2a0
[  295.595951][ T9129]  exc_invalid_op+0x17/0x50
[  295.600447][ T9129]  asm_exc_invalid_op+0x1a/0x20
[  295.605364][ T9129] RIP: 0010:usb_submit_urb+0x157e/0x1910
[  295.610986][ T9129] Code: d2 74 5d 48 89 54 24 40 e8 af 22 ba fa 4c 89 ef e8 d7 be de fe 48 89 c6 48 8d 3d dd 54 97 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 83 22 ba fa 89 ee bf ff 00 00 00
[  295.630580][ T9129] RSP: 0018:ffffc9000358f968 EFLAGS: 00010283
[  295.636672][ T9129] RAX: ffffffff8c8087a0 RBX: ffff88802cf03300 RCX: 0000000080001380
[  295.644634][ T9129] RDX: ffff88802cd8f5c0 RSI: ffffffff8c8087a0 RDI: ffffffff90e5bb00
[  295.652602][ T9129] RBP: ffff8880335b3058 R08: 00000000000000c0 R09: 0000000000000000
[  295.660573][ T9129] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807e4817e0
[  295.668526][ T9129] R13: ffff8880335b30b0 R14: 0000000080001380 R15: 00000000000000c0
[  295.676491][ T9129]  ? usb_submit_urb+0x1569/0x1910
[  295.681530][ T9129]  ? __init_swait_queue_head+0xca/0x150
[  295.687065][ T9129]  usb_start_wait_urb+0x106/0x4c0
[  295.692091][ T9129]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  295.697634][ T9129]  ? __asan_memset+0x23/0x50
[  295.702220][ T9129]  usb_control_msg+0x326/0x4a0
[  295.706988][ T9129]  ? __pfx_usb_control_msg+0x10/0x10
[  295.712260][ T9129]  dib0700_ctrl_rd+0x1b5/0x320
[  295.717020][ T9129]  dib0700_i2c_xfer+0x460/0xd90
[  295.721862][ T9129]  __i2c_transfer+0x5d9/0x17f0
[  295.726641][ T9129]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  295.732433][ T9129]  ? __pfx___i2c_transfer+0x10/0x10
[  295.737609][ T9129]  ? rt_mutex_slowtrylock+0x93/0x100
[  295.742875][ T9129]  i2c_transfer+0x15f/0x380
[  295.747359][ T9129]  i2cdev_ioctl_rdwr+0x3ec/0x700
[  295.752386][ T9129]  i2cdev_ioctl+0x19d/0x830
[  295.756869][ T9129]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  295.761884][ T9129]  ? selinux_file_ioctl+0x139/0x290
[  295.767085][ T9129]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  295.772104][ T9129]  __x64_sys_ioctl+0x18e/0x210
[  295.776857][ T9129]  do_syscall_64+0x106/0xf80
[  295.781433][ T9129]  ? clear_bhb_loop+0x40/0x90
[  295.786090][ T9129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.791960][ T9129] RIP: 0033:0x7f511059bf79
[  295.796359][ T9129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.815959][ T9129] RSP: 002b:00007f511137c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  295.824350][ T9129] RAX: ffffffffffffffda RBX: 00007f5110815fa0 RCX: 00007f511059bf79
[  295.832301][ T9129] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000007
[  295.840248][ T9129] RBP: 00007f51106327e0 R08: 0000000000000000 R09: 0000000000000000
[  295.848220][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.856166][ T9129] R13: 00007f5110816038 R14: 00007f5110815fa0 R15: 00007ffc896d62b8
[  295.864135][ T9129]  </TASK>
[  295.867489][ T9129] Kernel Offset: disabled
[  295.871801][ T9129] Rebooting in 86400 seconds..