last executing test programs: 7m35.442170849s ago: executing program 0 (id=447): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) acct(&(0x7f00000000c0)='./file0/file0\x00') read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x800000000, 0x0, 0x0, 0x10, 0x1}) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', 0x0, 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) 7m34.575428911s ago: executing program 0 (id=451): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) inotify_init1(0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a4", 0x24}], 0x1) 7m34.144364475s ago: executing program 0 (id=455): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setfsgid(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40400, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf250900020070797a310000000008004100736977001400330076657468305f746f5f627269646765006b9a8e035b14a54ea9d85595f3c17e0282f52c2d066148b59c153ab241e4926ef835a097b52937e4689947bbc0131d7cd772b559502f52f58b573d114e1be328affd3db3c42696c418b8f5775ef2cc20f18b753b7b11c27b6adc8f71a00be4fac69cc6e9a99ae0580675463b3996ad3cf566611621aa30a113de2a6d79e7eaf57e48811cd58f64bed0772655ca4192f76861900038b0c0218698afca2ab06973e326d269ce981eb577294e2b1b3549b7ce50345c"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 7m32.967222309s ago: executing program 0 (id=460): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x64, 0x30, 0x9, 0xe4ff, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001380)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0xfffbfffd}}, 0x2da, 0x0, 0x500, 0x0, 0x54, 0xa, 0x2}, 0x9c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) write$binfmt_script(r5, &(0x7f0000020280)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r6 = syz_open_dev$loop(&(0x7f00000003c0), 0x200, 0x10c000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000480)={'\x00', 0x3, 0x1, 0x0, 0x80000001, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(0xffffffffffffffff) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x0, 0x0, r7}, &(0x7f00000003c0), &(0x7f0000000140)) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4000000) 7m31.549992864s ago: executing program 0 (id=463): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20048094) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r4], 0x1c}}, 0x24044080) 7m30.665661649s ago: executing program 0 (id=465): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4010) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x7) r2 = socket(0x2, 0x1, 0xfffffffe) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000f4ffffff00000000000010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRES16=r6, @ANYRES16=r2, @ANYRES32=r5, @ANYRESDEC=r6, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57d62ec}, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r9, {r6}}, './file0\x00'}) read$msr(r8, &(0x7f0000019600)=""/102395, 0x100000000) 7m15.542655964s ago: executing program 32 (id=465): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4010) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x7) r2 = socket(0x2, 0x1, 0xfffffffe) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000f4ffffff00000000000010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRES16=r6, @ANYRES16=r2, @ANYRES32=r5, @ANYRESDEC=r6, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57d62ec}, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r9, {r6}}, './file0\x00'}) read$msr(r8, &(0x7f0000019600)=""/102395, 0x100000000) 16.040176622s ago: executing program 5 (id=1835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$usbmon(0x0, 0xfffffffffffffffe, 0x4c4000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mlockall(0x7) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) getpgid(r2) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x6, 0x80000001, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x64, 0x0, 0x80, 0x29, 0x0, @local, @loopback, {[@ra={0x94, 0x4}]}}}}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @random="895dda2bd1f3"}, 0x10) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) 11.349284821s ago: executing program 1 (id=1847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x154, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x120, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "526df53170c1617cc6ff8170115115ac"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2fe70656e270af447a44f8fb11af745bd8fd806896f17aeb1f167d4c3dfb439d"}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffcf}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x8, 0x9, 0x1, 0x1, 0x22, 0x0, 0x2}, &(0x7f0000000540)=0x9c) 10.962617633s ago: executing program 2 (id=1848): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x240080d5}, 0x24044040) io_setup(0x8, &(0x7f0000000540)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000140)=0x12) close(0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000800)=ANY=[@ANYRES8=r2, @ANYBLOB="0ba41af5989301a0bca0610e08c9135e2f1cea951f516ff08df0a109502cf85c647b74368bb69d5be23a792fa5fae26be393526b8d3bb03c1f0d9a158439ebfbaf666652e3d22601285eade752ed78266e86c6dbece3ca5f55929868e439e4dc803f87b09329ae9965328ddc8475f38218336bdd3aeec10378803baf30e421939e8273a53ce670609e", @ANYRES32=0x0, @ANYRES64=r2, @ANYRESOCT, @ANYRES16, @ANYRES8=r4]) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r6 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) 10.956274017s ago: executing program 3 (id=1849): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029c00030105e0810904000000010100000a240100000402210e00000000000009000800010924030600000102fc08240703ae026d740b240402002500f3dd64af0724050112c69c09040100000102000009040101010102000009050109000401064207250180fc020009040200000102000009040201010102000007240100400100082402010003000709058209400000000c07250180000500"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fc"], 0x40}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x0) close(0x3) sendmsg$nl_route_sched(r2, 0x0, 0x800) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 10.762353438s ago: executing program 5 (id=1850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xfc, 0xfe, 0x3, 0x0, 0x8, 0xb, 0x0, 0x0, 0xb0, 0xe, 0x0, 0x1, 0x2}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0xf400}}], 0x414, 0x0, 0x0) 10.275017044s ago: executing program 4 (id=1851): mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="100000000000000000000000000000004028a19ed857486d38867c92df3b012e1eafcb46e38a477460c82f8d5fca0ac19fe215e9b6ade1c36d31d401fb110c64e155d0f5e5e57073225e28c8065f988a85582d4555748041c922d1d36c0d0be1b798eefd490908723e57c6930e38340cd92ca8fc1fb99bd56d8888f7503f2b92a3acb97ec55843355236abed4fd518421f43cf408cec684cfe39faed641d3ba4bb280fd3b6107658"], 0x0, 0x0, 0x0}) 9.948327819s ago: executing program 1 (id=1852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000001, &(0x7f0000000a00)=[{&(0x7f0000000c80)=""/197, 0xc5}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/220, 0xdc}, {0x0}, {&(0x7f0000000800)=""/203, 0xcb}, {&(0x7f0000000900)=""/182, 0xb6}, {&(0x7f0000000140)=""/125, 0x7d}, {0x0}], 0x9, 0x12}) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={'veth1_to_bond\x00', {0x2, 0x4e23, @multicast2}}) r7 = openat$cgroup_int(r6, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000140)=0x100000001, 0x12) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r9, @ANYRES32=r8], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) stat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r10}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) 9.300902168s ago: executing program 5 (id=1853): bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0xe670c0c4ba64793e) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002780)="e5", 0x1}], 0x1}}], 0x1, 0x8124) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0x560c89bb) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) r6 = userfaultfd(0x80001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r8, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0xca, 0xca, 0x2, [@func={0x7, 0x0, 0x0, 0xc, 0x1}, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x1}]}, @enum={0x4}, @datasec={0xd, 0xa, 0x0, 0xf, 0x2, [{0x3, 0xf, 0x1000}, {0x4, 0x0, 0xffff0bdd}, {0x2, 0x2e, 0x1}, {0x3, 0x2, 0x81}, {0x5, 0x5fd55f7f, 0xc844}, {0x5, 0x5, 0xfe1e}, {0x5, 0x6, 0xfffffffd}, {0x4, 0x40, 0x3}, {0x2, 0x10, 0x4}, {0x1, 0x2, 0xfffffffb}], 'o['}]}}, 0x0, 0xe6}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f000013d000/0x3000)=nil, 0x3000}, 0x1, 0x2}) 9.151984661s ago: executing program 2 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x71f, 0x70bd25, 0x25dfdbfd, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.70605979s ago: executing program 2 (id=1855): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7395}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x6, 0x3, [0x3, 0x8, 0x7]}, &(0x7f0000000180)=0xe) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000d40)=ANY=[@ANYBLOB="200139"], 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x81, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x11, 0x1, "c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.537735597s ago: executing program 4 (id=1856): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x2000)=nil, 0x2000, 0x1000001, 0x110, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000000, 0x0, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xffffffff, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 7.951838702s ago: executing program 1 (id=1857): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000280)={r11, 0x3ff}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) 7.116475193s ago: executing program 3 (id=1858): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x6c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 7.010791911s ago: executing program 3 (id=1859): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000005}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x2, 0x0, 0x0) 6.908093167s ago: executing program 1 (id=1860): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) syz_open_procfs(r4, &(0x7f0000000180)='smaps_rollup\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) semop(0x0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000300)="b7", 0x1}], 0x1}, 0x4000000) 6.626865203s ago: executing program 3 (id=1861): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001f00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x6, @mcast1, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000580)="8000102ecae26878", 0x8}], 0x1, 0x0, 0x18}}], 0x1, 0x20010080) 6.570237755s ago: executing program 3 (id=1862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181080, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000800)={0x9, 0x0, [{0x80000000, 0x9, 0x2, 0x80000000, 0x1ff, 0x8000, 0x6}, {0x40000000, 0x80000001, 0x7, 0x2, 0xfffffffd, 0xc67, 0x4}, {0x0, 0x81, 0x2, 0xa81f, 0x1, 0x6, 0x7}, {0x40000000, 0x2, 0x0, 0x7, 0x1, 0x2, 0xd58}, {0x80000007, 0x935, 0x6, 0xffffb61e, 0x3, 0x0, 0x8}, {0x4, 0x3, 0x4, 0x8, 0x3, 0x8, 0x4}, {0xc0000001, 0x8, 0x3, 0x8, 0x9, 0x3, 0x7}, {0x40000001, 0x8, 0x7, 0x4, 0x9, 0x2, 0x1}, {0x4, 0x3, 0x1, 0xffff, 0x80000000, 0x0, 0x4}]}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f0000000240)=@raw=[@generic={0x5, 0x0, 0xd, 0x400, 0x7f}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fsmount(r2, 0x1, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000280)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) 5.72543764s ago: executing program 5 (id=1863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x82082, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x3, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x1000}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000500)={0x1ff, 0x40, 0x200, 0x0}) 5.720423682s ago: executing program 3 (id=1864): r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000f3ff0a0000000600010015000000"], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES16=0x0, @ANYBLOB="05002cbd7000fbdb00000000000000000000015b4e3eca1a4954807f59cff93fa8361234529a98267e6c"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x140843, 0x190) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa0000aaffffffffffff86dd608c0c0000200601fe8000000000000000000000000000aafe8000000169efc178d6ab439b08e24d4552640b4fa2b53e8c8cdffbd181f49dcbde8a92da4c61c16e6a81", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020008907800001e0aa007e000000200b70202"], 0x0) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xfffffffd, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 5.446484062s ago: executing program 5 (id=1865): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xfff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe662, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x192, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x800, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x5, 0x9, 0xfffffffc, 0xfff, 0x0, 0x0, 0x2, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x8d, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x3, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x4, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x8, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f0000000280)=[{}, {}, {r1, 0x1000}, {r5, 0x2008}, {r3, 0x400}], 0x5, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000328bd7000ffdbdf251200000008000800060000000800070004000000080009000080000008000900b50f0000080008633dc8a355d3ead100e90900001400018008000300020000000800030002000000200001800800030003000000140002006d6163766c616e300000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x40) r10 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000080)) r11 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb1102030109021b0001000020000904c40101fffd018009058202000200daa3141260e79a0000"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x7}, @in={0x2, 0x100, @broadcast}, @in6={0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, @in={0x2, 0x4e24, @multicast2}], 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x84) r13 = openat$cgroup_int(r12, &(0x7f00000002c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) syz_usb_control_io$uac1(r11, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.068824012s ago: executing program 2 (id=1866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x2f5) 5.031178241s ago: executing program 4 (id=1867): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) (async) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000200)=0x0) sendmsg$alg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040004}, 0x24000090) io_submit(r4, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r3, &(0x7f0000000080)='=', 0x1}]) (async) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0xfffd, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b62d25a80648c25", 0xe}], 0x1}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@getchain={0x64, 0x66, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0xfff3, 0xd}, {0xfff1, 0x6}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xe55}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x7f}]}, 0x64}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x4) (async) socket(0x1d, 0x4, 0x6) 4.671615632s ago: executing program 1 (id=1868): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x86, 0x62500) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x40087) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000440)={0x40980001, 0xb, "000100", 0x7fffffffffffffff, 0x403, 0x7, 0xbb1, 0x8, 0xe, 0x995d, 0x3, [0x2, 0x8, 0x3, 0xffffbc01]}) 4.465113232s ago: executing program 2 (id=1869): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x0) accept4$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x800) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x0, "71da9ef01515b9d18396ead3d469669933a8732a6671d9aa794a9f9b59d035e8", 0x1, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fcffffff0200000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000b0000005f00000108009f00010000000800260076090000275e9f65d559cc36fa3a5536227abac9"], 0xff2e}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000004c0)={0x2, "b1dba67d305c9cb6494f8877ceebd150d59134268aa05c04e0c8a656c374553c", 0x5, 0x20, 0x9, 0x1, 0x10, 0x3, 0x4, 0x7}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r6) sendto$inet6(r5, &(0x7f0000000040)="c22e15846981fd9b494d46ce29a76e8dc5a038ac4d2cc1eaeec599a896f0b25e26d0b131daad6928b7c99cdaca5227cd1f4f1f8c616798fdf6333a", 0x3b, 0x8801, 0x0, 0x0) 3.806813563s ago: executing program 2 (id=1870): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x56054afd47b3f2e, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syslog(0x2, 0xffffffffffffffff, 0xffffffffffffffdb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @empty, 0x8}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x14, 0x80000) timer_create(0x2, 0x0, &(0x7f0000000040)) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r3 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x103040, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'s526\x00', [0x401, 0x181, 0x2, 0xb, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x180, 0x13, 0x100, 0xffffffa7, 0x9, 0x134d, 0x1, 0x3fd, 0x4000009, 0x7, 0xe2df, 0x5, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x8]}) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x1, 0x80000001}) 3.673838754s ago: executing program 1 (id=1871): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1e000, 0x104}, 0x18) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x5a78, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = io_uring_setup(0x67bb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) io_uring_enter(r11, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) pipe(&(0x7f00000000c0)) 3.649335119s ago: executing program 4 (id=1872): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001f00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x6, @mcast1, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000580)="8000102ecae26878", 0x8}], 0x1, 0x0, 0x18}}], 0x1, 0x20010080) 2.060193262s ago: executing program 4 (id=1873): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1.065907748s ago: executing program 5 (id=1874): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x6, 0x7, 0x1, 'queue0\x00', 0x8000}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000040)={&(0x7f0000000440)=""/145, 0x91, 0x0, &(0x7f0000000000)=""/17, 0x11}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0xfffffffffffffd2b) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000}) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00121100631177fbac141416e000030a44079f03fe8000000000000000000000000000222f050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 0s ago: executing program 4 (id=1875): socket(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r3 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0xd000) shmdt(r3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pwritev(r4, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000bb8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000280)="b9780200000f320f09f2f009020fc76d2e0f01c966ba4300b007eef30f09b90e0800000f323e3ed9f50fba31fd", 0x2d}], 0x1, 0x70, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)={0xa6, 0x29, 0x1, {0x0, [{{0x2b, 0x4, 0x2}, 0xc60a, 0x80, 0x7, './file0'}, {{0x0, 0x0, 0x8}, 0x0, 0x6, 0x7, './file0'}, {{0x0, 0x1, 0x1}, 0x7, 0x40, 0x7, './file0'}, {{0x8, 0x4, 0x2}, 0x1, 0x2, 0x7, './file0'}, {{0x0, 0x2, 0x6}, 0x4, 0x6f, 0x7, './file0'}]}}, 0xa6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) timer_create(0x6, &(0x7f0000000180)={0x0, 0x36, 0x0, @thr={0x0, &(0x7f00000003c0)="6163e518de131223f560fcefcda938bf26fd197002000000000000006ec11511afc99fb5d961c1eec6ead2f45dd4bbe1daab572d155e87b38108a3385eb0abde4967dd6ea1618bbfa9d7d0e7d09f404d0c136b39766975cf6af48bba5e70e2049c7d5c1cd02c4fc8fb2f290f4c763d2d6c4eae5ec629d248b7d27f1730af975f31f8d5d3ed3a5912f966a5123d9d920848b0d4c53a14a8b7763b9f16321150e199"}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x80000000004, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x4, 0x8001, 0x1005, 0xc, 0x4db6, 0xfffffffffffffffe, 0xfffffdfffffffffd], 0xf000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_NMI(r6, 0xae9a) kernel console output (not intermixed with test programs): 6313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.713509][ T6313] usb 5-1: Product: syz [ 542.723578][ T6313] usb 5-1: Manufacturer: syz [ 542.751501][ T6313] usb 5-1: SerialNumber: syz [ 542.766568][ T3433] hsr_slave_1: left promiscuous mode [ 542.782930][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.788370][ T9] gspca_stk1135: Sensor write failed [ 542.796258][T11707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 542.812943][ T9] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 542.830936][T11707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 542.854584][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.883097][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.905348][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.989776][ T3433] veth1_macvtap: left promiscuous mode [ 542.998830][ T3433] veth0_macvtap: left promiscuous mode [ 543.018771][ T3433] veth1_vlan: left promiscuous mode [ 543.031099][ T3433] veth0_vlan: left promiscuous mode [ 543.128664][ T6477] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 543.269728][T11707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 543.277310][T11707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 543.299182][ T6477] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 543.314683][ T6477] usb 3-1: can't read configurations, error -71 [ 543.523746][ T9] usb 6-1: USB disconnect, device number 20 [ 543.614600][T11754] misc userio: Invalid payload size [ 543.621353][T11754] misc userio: No port type given on /dev/userio [ 543.936589][ T6313] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 544.060861][ T6313] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 544.206671][ T6477] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 544.814388][ T6477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.825275][ T6477] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 544.845970][ T6477] usb 3-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 544.875573][ T6477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.168521][ T6477] usb 3-1: config 0 descriptor?? [ 545.196983][ T6477] usbhid 3-1:0.0: can't add hid device: -22 [ 545.211370][ T6477] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 545.359984][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 545.373378][ T3433] team0 (unregistering): Port device team_slave_1 removed [ 545.945689][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 545.952688][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 545.961060][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 545.970870][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 545.997737][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 546.017118][ T3433] team0 (unregistering): Port device team_slave_0 removed [ 546.026146][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.048006][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 546.063814][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.387103][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 546.387130][ T30] audit: type=1400 audit(1768418106.392:575): avc: denied { set_context_mgr } for pid=11780 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 546.414862][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.441368][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.452056][T11783] binder: BINDER_SET_CONTEXT_MGR already set [ 546.467302][ T1075] nci: nci_rsp_packet: unsupported rsp opcode 0xf03 [ 546.486191][ T30] audit: type=1400 audit(1768418106.452:576): avc: denied { map } for pid=11780 comm="syz.4.1444" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 546.512269][T11783] binder: 11780:11783 ioctl 4018620d 2000000002c0 returned -16 [ 546.530763][ T9] usb 6-1: usb_control_msg returned -32 [ 546.543904][ T9] usbtmc 6-1:16.0: can't read capabilities [ 546.768060][ T9] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 546.792240][ T6313] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 02:88:34:62:6b:e3 [ 547.237257][ T6313] usb 5-1: USB disconnect, device number 33 [ 547.276453][ T9] usb 4-1: device descriptor read/64, error -71 [ 547.285115][ T6313] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 547.346265][ T6313] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 547.355734][ T6313] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 547.365081][ T6313] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 547.493493][T11781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.535879][ T9] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 547.569734][ T6313] usb 3-1: USB disconnect, device number 38 [ 547.579055][ T8109] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 547.671056][T11809] misc userio: Invalid payload size [ 547.676387][ T9] usb 4-1: device descriptor read/64, error -71 [ 547.683594][T11809] misc userio: No port type given on /dev/userio [ 547.875937][ T9] usb usb4-port1: attempt power cycle [ 547.885870][ T8109] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 547.987936][ T8109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.033438][ T8109] usb 2-1: config 0 descriptor?? [ 548.050078][ T8109] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 548.269492][ T6313] usb 6-1: USB disconnect, device number 21 [ 548.515810][ T6477] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 548.705729][ T6477] usb 5-1: Using ep0 maxpacket: 16 [ 548.731398][ T6477] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 548.754309][ T9] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 548.762362][ T8109] gp8psk: usb in 137 operation failed. [ 548.763461][ T6477] usb 5-1: config 1 has no interface number 0 [ 548.779073][ T8109] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 548.787257][ T6477] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 548.790815][ T8109] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 548.809153][ T9] usb 4-1: device descriptor read/8, error -71 [ 548.838353][ T6477] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 548.842310][ T8109] usb 2-1: USB disconnect, device number 24 [ 548.849712][ T6477] usb 5-1: config 1 interface 105 has no altsetting 0 [ 548.883856][ T6477] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 548.903233][ T6477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.917717][ T6477] usb 5-1: Product: syz [ 548.922095][ T6477] usb 5-1: Manufacturer: syz [ 548.927354][ T6477] usb 5-1: SerialNumber: syz [ 548.938191][T11819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.007171][T11835] binder: BINDER_SET_CONTEXT_MGR already set [ 549.013204][T11835] binder: 11831:11835 ioctl 4018620d 2000000002c0 returned -16 [ 549.055771][T11819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.077999][ T9] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 549.107055][ T30] audit: type=1400 audit(1768418109.112:577): avc: denied { execute } for pid=11838 comm="syz.5.1456" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 549.144088][ T9] usb 4-1: device descriptor read/8, error -71 [ 549.324820][ T9] usb usb4-port1: unable to enumerate USB device [ 549.411659][T11839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1456'. [ 549.527560][T11819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.574819][T11819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 550.353276][ T6477] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 550.386515][ T6477] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 550.654799][ T6477] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:9f:52:8e:68:53 [ 550.692147][ T6477] usb 5-1: USB disconnect, device number 34 [ 551.007798][ T6477] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 551.107140][ T6477] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 551.128683][ T6477] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 551.138533][T11869] syz.5.1461 (11869) used greatest stack depth: 19688 bytes left [ 551.157707][ T6477] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 551.286683][ T8109] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 551.290581][ T30] audit: type=1400 audit(1768418111.292:578): avc: denied { setattr } for pid=11880 comm="syz.4.1466" name="NETLINK" dev="sockfs" ino=32734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 551.316160][T11882] siw: device registration error -23 [ 551.452709][ T8109] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 551.497380][ T8109] usb 4-1: config 0 has no interface number 0 [ 551.620954][ T30] audit: type=1400 audit(1768418111.622:579): avc: denied { listen } for pid=11863 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 551.622654][ T8109] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 551.640968][ T30] audit: type=1400 audit(1768418111.622:580): avc: denied { accept } for pid=11863 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 551.812468][ T9] IPVS: starting estimator thread 0... [ 551.818183][ T8109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.241423][T11888] IPVS: using max 39 ests per chain, 93600 per kthread [ 552.321424][ T8109] usb 4-1: config 0 descriptor?? [ 552.329921][ T8109] usb 4-1: selecting invalid altsetting 1 [ 552.336492][ T8109] dvb_ttusb_budget: ttusb_init_controller: error [ 552.343689][ T8109] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 552.428169][ T8109] DVB: Unable to find symbol cx22700_attach() [ 552.482175][ T8109] DVB: Unable to find symbol tda10046_attach() [ 552.496074][ T8109] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 552.512371][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1468'. [ 552.582362][ T30] audit: type=1400 audit(1768418112.562:581): avc: denied { sys_module } for pid=11897 comm="syz.5.1468" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 552.922706][T11910] netlink: 'syz.3.1464': attribute type 4 has an invalid length. [ 553.420347][ T30] audit: type=1400 audit(1768418113.422:582): avc: denied { call } for pid=11913 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 553.492178][T11915] binder_alloc: 11913: binder_alloc_buf, no vma [ 554.424305][ T6477] usb 4-1: USB disconnect, device number 36 [ 554.656782][T11928] FAULT_INJECTION: forcing a failure. [ 554.656782][T11928] name failslab, interval 1, probability 0, space 0, times 0 [ 554.675681][T11928] CPU: 0 UID: 0 PID: 11928 Comm: syz.3.1472 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.675707][T11928] Tainted: [L]=SOFTLOCKUP [ 554.675713][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.675723][T11928] Call Trace: [ 554.675728][T11928] [ 554.675735][T11928] dump_stack_lvl+0x16c/0x1f0 [ 554.675762][T11928] should_fail_ex+0x512/0x640 [ 554.675786][T11928] ? kmem_cache_alloc_noprof+0x62/0x770 [ 554.675806][T11928] should_failslab+0xc2/0x120 [ 554.675828][T11928] kmem_cache_alloc_noprof+0x83/0x770 [ 554.675843][T11928] ? getname_flags.part.0+0x4c/0x550 [ 554.675865][T11928] ? getname_flags.part.0+0x4c/0x550 [ 554.675881][T11928] getname_flags.part.0+0x4c/0x550 [ 554.675900][T11928] getname_flags+0x93/0xf0 [ 554.675920][T11928] user_path_at+0x24/0x60 [ 554.675941][T11928] __x64_sys_mount+0x1fb/0x310 [ 554.675958][T11928] ? __pfx___x64_sys_mount+0x10/0x10 [ 554.675988][T11928] do_syscall_64+0xcd/0xf80 [ 554.676011][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.676027][T11928] RIP: 0033:0x7f439a98f749 [ 554.676041][T11928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.676057][T11928] RSP: 002b:00007f439b7cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 554.676073][T11928] RAX: ffffffffffffffda RBX: 00007f439abe5fa0 RCX: 00007f439a98f749 [ 554.676083][T11928] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000000000000 [ 554.676093][T11928] RBP: 00007f439b7cd090 R08: 0000200000000500 R09: 0000000000000000 [ 554.676102][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.676112][T11928] R13: 00007f439abe6038 R14: 00007f439abe5fa0 R15: 00007ffffc112918 [ 554.676135][T11928] [ 556.093472][T11949] loop2: detected capacity change from 0 to 7 [ 556.621182][T11949] Dev loop2: unable to read RDB block 7 [ 556.642877][T11949] loop2: unable to read partition table [ 556.654284][T11949] loop2: partition table beyond EOD, truncated [ 556.665446][T11949] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 557.146752][T11966] netlink: zone id is out of range [ 557.152014][T11966] netlink: zone id is out of range [ 557.157306][T11966] netlink: zone id is out of range [ 557.162443][T11966] netlink: zone id is out of range [ 557.167926][T11966] netlink: get zone limit has 4 unknown bytes [ 557.523138][T11970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11970 comm=syz.4.1483 [ 558.599031][T11982] kvm: emulating exchange as write [ 560.585812][ T30] audit: type=1400 audit(1768418120.592:583): avc: denied { connect } for pid=12007 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 561.119542][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 561.128832][T12024] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1494'. [ 561.139838][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 561.150084][T12024] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1494'. [ 561.159201][T12024] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1494'. [ 561.682654][ T30] audit: type=1326 audit(1768418121.682:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 561.742422][ T30] audit: type=1326 audit(1768418121.682:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 561.848659][ T30] audit: type=1326 audit(1768418121.682:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 561.873705][ T6477] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 561.915189][ T30] audit: type=1326 audit(1768418121.682:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 561.940558][ T30] audit: type=1326 audit(1768418121.692:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 562.015718][ T30] audit: type=1326 audit(1768418121.692:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 562.907183][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.925651][ T6477] usb 5-1: Using ep0 maxpacket: 32 [ 562.954594][ T6477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 563.016926][ T6477] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 563.027159][ T30] audit: type=1326 audit(1768418121.702:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 563.097876][ T6477] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 563.127259][ T6477] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 563.140911][ T30] audit: type=1326 audit(1768418121.702:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 563.166407][ T6477] usb 5-1: Product: syz [ 563.170582][ T6477] usb 5-1: Manufacturer: syz [ 563.175171][ T6477] usb 5-1: SerialNumber: syz [ 563.182806][ T6477] usb 5-1: config 0 descriptor?? [ 563.188228][ T30] audit: type=1326 audit(1768418121.702:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd54df8f749 code=0x7ffc0000 [ 563.211967][T12023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.224818][ T6477] hub 5-1:0.0: bad descriptor, ignoring hub [ 563.243825][ T6477] hub 5-1:0.0: probe with driver hub failed with error -5 [ 563.605921][ T6477] usb 5-1: USB disconnect, device number 35 [ 564.325819][ T8109] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 564.343370][T12084] 9p: Bad value for 'rfdno' [ 564.460784][T12085] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1504'. [ 564.537146][ T8109] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 564.551076][ T8109] usb 2-1: config 127 has no interface number 0 [ 564.576433][ T8109] usb 2-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 564.618314][ T8109] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 564.643315][ T8109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.914491][ T8109] peak_usb 2-1:127.124 can0: unable to request usb[type=0 value=1] err=-71 [ 565.027775][T12100] can1: slcan on ttyS3. [ 565.127943][T12101] capability: warning: `syz.5.1505' uses 32-bit capabilities (legacy support in use) [ 565.342539][ T8109] peak_usb 2-1:127.124: unable to read PCAN-Chip USB firmware info (err -71) [ 565.397320][T12100] can1 (unregistered): slcan off ttyS3. [ 565.447181][ T8109] peak_usb 2-1:127.124: probe with driver peak_usb failed with error -71 [ 565.479557][ T8109] usb 2-1: USB disconnect, device number 25 [ 566.258495][ T8109] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 566.415889][ T8109] usb 5-1: device descriptor read/64, error -71 [ 566.448039][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 566.448055][ T30] audit: type=1400 audit(1768418126.452:806): avc: denied { getopt } for pid=12124 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 566.577660][T12130] Sensor B: ================= START STATUS ================= [ 566.585267][T12130] Sensor B: Test Pattern: 75% Colorbar [ 566.591059][T12130] Sensor B: Show Information: All [ 566.596265][T12130] Sensor B: Vertical Flip: false [ 566.601267][T12130] Sensor B: Horizontal Flip: false [ 566.606461][T12130] Sensor B: Brightness: 128 [ 566.611027][T12130] Sensor B: Contrast: 128 [ 566.615424][T12130] Sensor B: Hue: 0 [ 566.619242][T12130] Sensor B: Saturation: 128 [ 566.623809][T12130] Sensor B: ================== END STATUS ================== [ 566.945768][ T8109] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 567.089571][ T8109] usb 5-1: device descriptor read/64, error -71 [ 567.211398][ T8109] usb usb5-port1: attempt power cycle [ 567.265772][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 567.336745][T12147] fuse: Unknown parameter 'user_i00000000000000000000' [ 567.417549][ T9] usb 2-1: device descriptor read/64, error -71 [ 567.565669][ T8109] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 567.575651][ T6477] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 567.616160][ T8109] usb 5-1: device descriptor read/8, error -71 [ 567.655710][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 567.805716][ T9] usb 2-1: device descriptor read/64, error -71 [ 567.886240][ T8109] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 567.916167][ T8109] usb 5-1: device descriptor read/8, error -71 [ 567.936287][ T9] usb usb2-port1: attempt power cycle [ 568.043085][ T8109] usb usb5-port1: unable to enumerate USB device [ 568.046831][ T6477] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.063008][ T6477] usb 4-1: config 0 has no interface number 0 [ 568.080276][ T6477] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 568.100090][ T6477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.117719][ T6477] usb 4-1: config 0 descriptor?? [ 568.138097][ T6477] usb 4-1: selecting invalid altsetting 1 [ 568.154399][ T6477] dvb_ttusb_budget: ttusb_init_controller: error [ 568.174178][ T6477] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 568.285533][ T6477] DVB: Unable to find symbol cx22700_attach() [ 568.306039][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 568.349298][ T9] usb 2-1: device descriptor read/8, error -71 [ 568.502634][ T6477] DVB: Unable to find symbol tda10046_attach() [ 568.510144][ T6477] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 568.647205][T12159] netlink: 'syz.3.1519': attribute type 4 has an invalid length. [ 568.725809][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 568.800936][ T9] usb 2-1: device descriptor read/8, error -71 [ 568.965679][ T6477] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 569.017252][T12164] block nbd0: server does not support multiple connections per device. [ 569.031830][T12164] block nbd0: shutting down sockets [ 569.036112][ T9] usb usb2-port1: unable to enumerate USB device [ 569.115694][ T6477] usb 6-1: Using ep0 maxpacket: 16 [ 569.122756][ T6477] usb 6-1: config 5 has an invalid interface number: 32 but max is 0 [ 569.131329][ T6477] usb 6-1: config 5 has no interface number 0 [ 569.139235][ T6477] usb 6-1: config 5 interface 32 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 569.152173][ T6477] usb 6-1: config 5 interface 32 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 569.162354][ T6477] usb 6-1: config 5 interface 32 has no altsetting 0 [ 569.171162][ T6477] usb 6-1: New USB device found, idVendor=1949, idProduct=6c84, bcdDevice=92.c4 [ 569.180456][ T6477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.188500][ T6477] usb 6-1: Product: syz [ 569.194614][ T6477] usb 6-1: Manufacturer: syz [ 569.199337][ T6477] usb 6-1: SerialNumber: syz [ 569.210396][T12155] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 569.218691][T12155] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 569.494007][T12155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.531218][T12155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.543389][ T6477] usb 6-1: USB disconnect, device number 22 [ 570.337066][ T9] usb 4-1: USB disconnect, device number 37 [ 570.955069][T12189] siw: device registration error -23 [ 570.995965][ T30] audit: type=1400 audit(1768418130.632:807): avc: denied { mount } for pid=12186 comm="syz.4.1530" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 571.122900][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'. [ 571.132033][ T30] audit: type=1400 audit(1768418130.632:808): avc: denied { mounton } for pid=12186 comm="syz.4.1530" path="/301/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 571.532597][ T30] audit: type=1400 audit(1768418131.532:809): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 572.644272][T12224] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1539'. [ 572.700132][ T30] audit: type=1400 audit(1768418132.702:810): avc: denied { ioctl } for pid=12223 comm="syz.3.1539" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34220 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 573.145889][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 573.175973][T12238] netlink: 'syz.1.1544': attribute type 23 has an invalid length. [ 573.184011][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 573.308847][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 573.324025][ T9] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 573.345915][ T9] usb 3-1: config 2 has no interface number 0 [ 573.375890][ T6477] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 573.376627][ T9] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 573.565731][ T6477] usb 4-1: Using ep0 maxpacket: 16 [ 573.576294][ T9] usb 3-1: config 2 interface 88 has no altsetting 0 [ 573.604402][ T9] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 573.615096][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.624356][ T9] usb 3-1: Product: syz [ 573.631773][ T9] usb 3-1: Manufacturer: syz [ 573.633448][ T6477] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 573.637004][ T9] usb 3-1: SerialNumber: syz [ 573.650592][ T6477] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 573.659236][ T6477] usb 4-1: Product: syz [ 573.663698][ T6477] usb 4-1: Manufacturer: syz [ 573.669777][ T6477] usb 4-1: SerialNumber: syz [ 573.812019][ T6477] usb 4-1: config 0 descriptor?? [ 573.883483][T12228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 574.242216][T12251] wireguard0: entered promiscuous mode [ 574.247977][T12251] wireguard0: entered allmulticast mode [ 574.926314][ T30] audit: type=1400 audit(1768418134.632:811): avc: denied { checkpoint_restore } for pid=12233 comm="syz.3.1543" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 574.960198][T12228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.517961][ T8109] kernel write not supported for file /input/event2 (pid: 8109 comm: kworker/0:11) [ 575.803632][T12274] openvswitch: netlink: Flow key attr not present in new flow. [ 576.700665][ T8109] usb 4-1: USB disconnect, device number 38 [ 576.843011][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1555'. [ 576.974212][T12283] : entered promiscuous mode [ 577.006471][ T30] audit: type=1400 audit(1768418137.016:812): avc: denied { append } for pid=12285 comm="syz.3.1557" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 577.491919][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 577.952447][ T9] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 577.974548][ T9] asix 3-1:2.88: probe with driver asix failed with error -71 [ 578.030403][ T9] usb 3-1: USB disconnect, device number 39 [ 580.351420][T12316] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1565'. [ 581.541452][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1571'. [ 581.946352][T12353] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 582.026549][T12353] team0: Port device batadv1 added [ 582.405476][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1576'. [ 582.414549][T12362] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1576'. [ 582.423745][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1576'. [ 582.432771][T12362] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1576'. [ 582.441788][T12362] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1576'. [ 582.459370][T12357] hub 9-0:1.0: USB hub found [ 582.477914][T12357] hub 9-0:1.0: 1 port detected [ 583.211020][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1581'. [ 583.220807][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1581'. [ 583.236514][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1581'. [ 583.245547][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1581'. [ 583.409436][T12386] lo speed is unknown, defaulting to 1000 [ 583.485651][ T30] audit: type=1326 audit(1768418143.266:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 583.602306][T12386] lo speed is unknown, defaulting to 1000 [ 583.934977][ T30] audit: type=1326 audit(1768418143.276:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 584.445771][ T30] audit: type=1326 audit(1768418143.276:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 584.469958][ T30] audit: type=1326 audit(1768418143.276:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 584.493665][ T30] audit: type=1326 audit(1768418143.276:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 584.518046][ T30] audit: type=1326 audit(1768418143.286:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 584.720414][ T30] audit: type=1326 audit(1768418143.286:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 584.877027][ T30] audit: type=1326 audit(1768418143.286:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 584.922486][ T30] audit: type=1326 audit(1768418143.286:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 585.157091][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1586'. [ 585.306770][ T30] audit: type=1326 audit(1768418143.286:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143898f749 code=0x7ffc0000 [ 586.228924][T12425] lo speed is unknown, defaulting to 1000 [ 586.308547][T12425] lo speed is unknown, defaulting to 1000 [ 586.825012][T12432] loop2: detected capacity change from 0 to 7 [ 586.861704][T11310] Dev loop2: unable to read RDB block 7 [ 586.877232][T11310] loop2: AHDI p1 p2 p3 [ 586.907049][T11310] loop2: partition table partially beyond EOD, truncated [ 586.924900][T11310] loop2: p1 start 1601398130 is beyond EOD, truncated [ 586.939557][T11310] loop2: p2 start 1702059890 is beyond EOD, truncated [ 586.976789][T12432] Dev loop2: unable to read RDB block 7 [ 586.992533][T12432] loop2: AHDI p1 p2 p3 [ 587.073785][T12432] loop2: partition table partially beyond EOD, truncated [ 587.265875][T12432] loop2: p1 start 1601398130 is beyond EOD, truncated [ 587.272700][T12432] loop2: p2 start 1702059890 is beyond EOD, truncated [ 587.747603][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580bf000: rx timeout, send abort [ 587.756007][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880580bf000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 588.009444][ T5185] Dev loop2: unable to read RDB block 7 [ 588.016341][ T5185] loop2: AHDI p1 p2 p3 [ 588.020709][ T5185] loop2: partition table partially beyond EOD, truncated [ 588.039233][ T5185] loop2: p1 start 1601398130 is beyond EOD, truncated [ 588.047490][ T5185] loop2: p2 start 1702059890 is beyond EOD, truncated [ 589.426288][ T5185] Dev loop2: unable to read RDB block 7 [ 589.431848][ T5185] loop2: AHDI p1 p2 p3 [ 589.471840][ T5185] loop2: partition table partially beyond EOD, truncated [ 589.498706][ T5185] loop2: p1 start 1601398130 is beyond EOD, truncated [ 589.533109][ T5185] loop2: p2 start 1702059890 is beyond EOD, truncated [ 589.665341][ T5185] Dev loop2: unable to read RDB block 7 [ 589.676803][ T5185] loop2: AHDI p1 p2 p3 [ 589.681647][ T5185] loop2: partition table partially beyond EOD, truncated [ 589.699092][ T5185] loop2: p1 start 1601398130 is beyond EOD, truncated [ 589.718189][ T5185] loop2: p2 start 1702059890 is beyond EOD, truncated [ 591.730205][T12472] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 592.085839][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1600'. [ 592.094824][T12470] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1600'. [ 592.104002][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1600'. [ 592.113066][T12470] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1600'. [ 592.122089][T12470] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1600'. [ 592.279819][T12476] futex_wake_op: syz.2.1603 tries to shift op by -1; fix this program [ 592.672159][T12481] FAULT_INJECTION: forcing a failure. [ 592.672159][T12481] name failslab, interval 1, probability 0, space 0, times 0 [ 592.817260][T12481] CPU: 0 UID: 0 PID: 12481 Comm: syz.1.1604 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.817288][T12481] Tainted: [L]=SOFTLOCKUP [ 592.817293][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.817302][T12481] Call Trace: [ 592.817307][T12481] [ 592.817313][T12481] dump_stack_lvl+0x16c/0x1f0 [ 592.817340][T12481] should_fail_ex+0x512/0x640 [ 592.817363][T12481] ? __kmalloc_cache_noprof+0x5f/0x800 [ 592.817382][T12481] should_failslab+0xc2/0x120 [ 592.817402][T12481] __kmalloc_cache_noprof+0x80/0x800 [ 592.817416][T12481] ? input_allocate_device+0xc5/0x350 [ 592.817439][T12481] ? input_allocate_device+0xc5/0x350 [ 592.817453][T12481] input_allocate_device+0xc5/0x350 [ 592.817470][T12481] uinput_ioctl_handler.isra.0+0x8bb/0x1df0 [ 592.817494][T12481] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 592.817514][T12481] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 592.817537][T12481] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 592.817577][T12481] ? selinux_file_ioctl+0x180/0x270 [ 592.817597][T12481] ? selinux_file_ioctl+0xb4/0x270 [ 592.817619][T12481] ? __pfx_uinput_ioctl+0x10/0x10 [ 592.817643][T12481] __x64_sys_ioctl+0x18e/0x210 [ 592.817670][T12481] do_syscall_64+0xcd/0xf80 [ 592.817694][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.817709][T12481] RIP: 0033:0x7f98f918f749 [ 592.817722][T12481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.817737][T12481] RSP: 002b:00007f98f9f41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.817753][T12481] RAX: ffffffffffffffda RBX: 00007f98f93e5fa0 RCX: 00007f98f918f749 [ 592.817763][T12481] RDX: 0000200000000340 RSI: 00000000401c5504 RDI: 0000000000000003 [ 592.817772][T12481] RBP: 00007f98f9f41090 R08: 0000000000000000 R09: 0000000000000000 [ 592.817781][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.817790][T12481] R13: 00007f98f93e6038 R14: 00007f98f93e5fa0 R15: 00007ffdb5c58548 [ 592.817813][T12481] [ 593.356933][T12486] FAULT_INJECTION: forcing a failure. [ 593.356933][T12486] name failslab, interval 1, probability 0, space 0, times 0 [ 593.407734][T12486] CPU: 0 UID: 0 PID: 12486 Comm: syz.2.1605 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.407762][T12486] Tainted: [L]=SOFTLOCKUP [ 593.407768][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.407777][T12486] Call Trace: [ 593.407783][T12486] [ 593.407789][T12486] dump_stack_lvl+0x16c/0x1f0 [ 593.407816][T12486] should_fail_ex+0x512/0x640 [ 593.407841][T12486] ? kmem_cache_alloc_noprof+0x62/0x770 [ 593.407860][T12486] should_failslab+0xc2/0x120 [ 593.407888][T12486] kmem_cache_alloc_noprof+0x83/0x770 [ 593.407905][T12486] ? vm_area_dup+0x27/0x8d0 [ 593.407933][T12486] ? vm_area_dup+0x27/0x8d0 [ 593.407956][T12486] vm_area_dup+0x27/0x8d0 [ 593.407982][T12486] __split_vma+0x18e/0x1050 [ 593.408002][T12486] ? __pfx___split_vma+0x10/0x10 [ 593.408032][T12486] vms_gather_munmap_vmas+0x3aa/0x1340 [ 593.408054][T12486] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 593.408074][T12486] ? mas_walk+0x6f5/0x980 [ 593.408102][T12486] __mmap_region+0x47c/0x2a00 [ 593.408122][T12486] ? __lock_acquire+0x436/0x2890 [ 593.408141][T12486] ? __pfx___mmap_region+0x10/0x10 [ 593.408169][T12486] ? find_held_lock+0x2b/0x80 [ 593.408194][T12486] ? is_bpf_text_address+0x8a/0x1a0 [ 593.408212][T12486] ? bpf_ksym_find+0x127/0x1c0 [ 593.408234][T12486] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 593.408253][T12486] ? is_bpf_text_address+0x94/0x1a0 [ 593.408321][T12486] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 593.408351][T12486] mmap_region+0x1ab/0x3f0 [ 593.408368][T12486] ? __get_unmapped_area+0x267/0x3f0 [ 593.408392][T12486] do_mmap+0xa3e/0x1210 [ 593.408418][T12486] ? __pfx_do_mmap+0x10/0x10 [ 593.408438][T12486] ? __pfx_down_write_killable+0x10/0x10 [ 593.408468][T12486] vm_mmap_pgoff+0x29e/0x470 [ 593.408494][T12486] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 593.408517][T12486] ? __fget_files+0x20e/0x3c0 [ 593.408548][T12486] ksys_mmap_pgoff+0x7d/0x5c0 [ 593.408568][T12486] ? __pfx_ksys_write+0x10/0x10 [ 593.408592][T12486] __x64_sys_mmap+0x125/0x190 [ 593.408614][T12486] do_syscall_64+0xcd/0xf80 [ 593.408638][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.408654][T12486] RIP: 0033:0x7fd54df8f749 [ 593.408667][T12486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.408683][T12486] RSP: 002b:00007fd54ef0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 593.408699][T12486] RAX: ffffffffffffffda RBX: 00007fd54e1e5fa0 RCX: 00007fd54df8f749 [ 593.408709][T12486] RDX: 000000000000000a RSI: 0000000000fbe000 RDI: 0000200000000000 [ 593.408719][T12486] RBP: 00007fd54ef0b090 R08: ffffffffffffffff R09: 0000000000000000 [ 593.408728][T12486] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 593.408738][T12486] R13: 00007fd54e1e6038 R14: 00007fd54e1e5fa0 R15: 00007ffdb27f2e88 [ 593.408767][T12486] [ 593.939097][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 595.708773][T12529] FAULT_INJECTION: forcing a failure. [ 595.708773][T12529] name failslab, interval 1, probability 0, space 0, times 0 [ 595.721784][T12529] CPU: 1 UID: 0 PID: 12529 Comm: syz.5.1616 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.721810][T12529] Tainted: [L]=SOFTLOCKUP [ 595.721816][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.721826][T12529] Call Trace: [ 595.721832][T12529] [ 595.721838][T12529] dump_stack_lvl+0x16c/0x1f0 [ 595.721870][T12529] should_fail_ex+0x512/0x640 [ 595.721899][T12529] should_failslab+0xc2/0x120 [ 595.721921][T12529] kmem_cache_alloc_noprof+0x83/0x770 [ 595.721939][T12529] ? inet_bind2_bucket_create+0x36/0x5f0 [ 595.721964][T12529] ? inet_bind2_bucket_create+0x36/0x5f0 [ 595.721981][T12529] inet_bind2_bucket_create+0x36/0x5f0 [ 595.722002][T12529] __inet_hash_connect+0x153b/0x1ee0 [ 595.722029][T12529] ? __pfx___inet6_check_established+0x10/0x10 [ 595.722057][T12529] ? __pfx___inet_hash_connect+0x10/0x10 [ 595.722081][T12529] ? inet6_hash_connect+0xe2/0x180 [ 595.722106][T12529] tcp_v6_connect+0x1384/0x21d0 [ 595.722129][T12529] ? lockdep_hardirqs_on+0x7c/0x110 [ 595.722159][T12529] ? __pfx_tcp_v6_connect+0x10/0x10 [ 595.722188][T12529] ? __sys_sendto+0x376/0x520 [ 595.722212][T12529] ? __pfx___schedule+0x10/0x10 [ 595.722239][T12529] ? __inet_stream_connect+0x915/0xf50 [ 595.722254][T12529] __inet_stream_connect+0x915/0xf50 [ 595.722271][T12529] ? irqentry_exit+0x1dd/0x8c0 [ 595.722291][T12529] ? rcu_is_watching+0x12/0xc0 [ 595.722310][T12529] ? __pfx___inet_stream_connect+0x10/0x10 [ 595.722339][T12529] tcp_sendmsg_fastopen+0x3ed/0x750 [ 595.722361][T12529] tcp_sendmsg_locked+0x2410/0x42a0 [ 595.722393][T12529] ? irqentry_exit+0x1dd/0x8c0 [ 595.722414][T12529] ? lockdep_hardirqs_on+0x7c/0x110 [ 595.722435][T12529] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 595.722450][T12529] ? rcu_is_watching+0x12/0xc0 [ 595.722483][T12529] tcp_sendmsg+0x2e/0x50 [ 595.722497][T12529] ? __pfx_tcp_sendmsg+0x10/0x10 [ 595.722512][T12529] inet6_sendmsg+0xb9/0x140 [ 595.722534][T12529] __sys_sendto+0x376/0x520 [ 595.722551][T12529] ? __pfx___sys_sendto+0x10/0x10 [ 595.722565][T12529] ? __schedule+0x114c/0x6150 [ 595.722592][T12529] ? __rcu_read_unlock+0x2b5/0x5a0 [ 595.722626][T12529] ? rcu_is_watching+0x12/0xc0 [ 595.722644][T12529] __x64_sys_sendto+0xe0/0x1c0 [ 595.722659][T12529] ? do_syscall_64+0x91/0xf80 [ 595.722679][T12529] ? lockdep_hardirqs_on+0x7c/0x110 [ 595.722701][T12529] do_syscall_64+0xcd/0xf80 [ 595.722724][T12529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.722741][T12529] RIP: 0033:0x7f3f1cf8f749 [ 595.722755][T12529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.722771][T12529] RSP: 002b:00007f3f1de8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 595.722788][T12529] RAX: ffffffffffffffda RBX: 00007f3f1d1e6180 RCX: 00007f3f1cf8f749 [ 595.722798][T12529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 595.722807][T12529] RBP: 00007f3f1de8f090 R08: 00002000000001c0 R09: 000000000000001c [ 595.722817][T12529] R10: 0000000024008000 R11: 0000000000000246 R12: 0000000000000001 [ 595.722827][T12529] R13: 00007f3f1d1e6218 R14: 00007f3f1d1e6180 R15: 00007ffdf06509f8 [ 595.722857][T12529] [ 595.724874][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 595.724897][ T30] audit: type=1400 audit(1768418155.706:841): avc: denied { name_bind } for pid=12523 comm="syz.5.1616" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 596.714809][T12542] batman_adv: batadv0: Adding interface: gretap1 [ 596.721264][T12542] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.747095][T12542] batman_adv: batadv0: Interface activated: gretap1 [ 598.258673][ T6477] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 598.509346][ T6477] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 598.525694][ T6477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.555859][ T8109] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 598.596249][T12561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'. [ 598.605253][T12561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1622'. [ 598.615092][T12561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'. [ 598.624358][T12561] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1622'. [ 598.633437][T12561] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1622'. [ 598.830395][ T8109] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 598.945126][ T30] audit: type=1400 audit(1768418158.946:842): avc: denied { append } for pid=12548 comm="syz.4.1621" name="event3" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 598.975084][ T8109] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.990686][ T30] audit: type=1400 audit(1768418158.976:843): avc: denied { setattr } for pid=12548 comm="syz.4.1621" name="event3" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 599.014480][ T6477] usb 5-1: string descriptor 0 read error: -32 [ 599.022659][ T6477] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 599.031707][ T8109] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 599.058461][ T8109] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.083653][ T8109] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 599.096958][ T8109] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 599.105133][ T8109] usb 6-1: Product: syz [ 599.110383][ T8109] usb 6-1: Manufacturer: syz [ 599.143123][ T8109] cdc_wdm 6-1:1.0: skipping garbage [ 599.150852][ T8109] cdc_wdm 6-1:1.0: skipping garbage [ 599.158507][ T8109] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 599.164549][ T8109] cdc_wdm 6-1:1.0: Unknown control protocol [ 599.357713][ T6885] usb 6-1: USB disconnect, device number 23 [ 599.703981][T12549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.722826][ T30] audit: type=1400 audit(1768418159.636:844): avc: denied { connect } for pid=12567 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 599.781039][T12549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.014432][ T6477] usb 5-1: USB disconnect, device number 40 [ 600.020456][ T30] audit: type=1400 audit(1768418159.656:845): avc: denied { read write } for pid=12567 comm="syz.3.1628" name="mouse0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 600.048817][ T30] audit: type=1400 audit(1768418159.656:846): avc: denied { open } for pid=12567 comm="syz.3.1628" path="/dev/input/mouse0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 600.133958][T12579] futex_wake_op: syz.1.1632 tries to shift op by -1; fix this program [ 600.701282][T12596] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1634'. [ 600.736871][ T30] audit: type=1400 audit(1768418160.716:847): avc: denied { getopt } for pid=12589 comm="syz.1.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 600.875780][ T6885] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 601.035697][ T6885] usb 4-1: Using ep0 maxpacket: 32 [ 601.043459][ T6885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.110500][ T6885] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 601.144175][ T6885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.176783][ T6885] usb 4-1: config 0 descriptor?? [ 601.204003][ T6885] dvb-usb: found a 'TeVii S662' in warm state. [ 601.219660][ T6885] dw2102: su3000_power_ctrl: 1, initialized 0 [ 601.239591][ T6885] dvb-usb: bulk message failed: -22 (2/0) [ 601.263633][ T6885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 601.291522][ T6885] dvbdev: DVB: registering new adapter (TeVii S662) [ 601.310252][ T6885] usb 4-1: media controller created [ 601.326861][ T6885] dvb-usb: bulk message failed: -22 (6/0) [ 601.345328][ T6885] dw2102: i2c transfer failed. [ 601.360260][ T6885] dvb-usb: bulk message failed: -22 (6/0) [ 601.376610][ T6885] dw2102: i2c transfer failed. [ 601.390161][ T6885] dvb-usb: bulk message failed: -22 (6/0) [ 601.408338][ T6885] dw2102: i2c transfer failed. [ 601.421397][T12588] dvb-usb: bulk message failed: -22 (5/0) [ 601.427898][T12588] dw2102: i2c transfer failed. [ 601.465515][ T6885] dvb-usb: bulk message failed: -22 (6/0) [ 601.489531][ T6885] dw2102: i2c transfer failed. [ 601.532318][ T6885] dvb-usb: bulk message failed: -22 (6/0) [ 601.544144][ T6885] dw2102: i2c transfer failed. [ 601.556401][ T6885] dvb-usb: bulk message failed: -22 (6/0) [ 601.585842][ T6885] dw2102: i2c transfer failed. [ 601.600813][ T6885] dvb-usb: MAC address: 02:02:02:02:02:02 [ 601.665331][ T6885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.732727][ T6885] dvb-usb: bulk message failed: -22 (3/0) [ 601.745622][ T6885] dw2102: command 0x0e transfer failed. [ 601.905457][ T6885] dvb-usb: bulk message failed: -22 (3/0) [ 602.057577][T12608] comedi: valid board names for 8255 driver are: [ 602.065108][T12608] 8255 [ 602.067945][T12608] comedi: valid board names for vmk80xx driver are: [ 602.074559][T12608] vmk80xx [ 602.077658][T12608] comedi: valid board names for usbduxsigma driver are: [ 602.084615][T12608] usbduxsigma [ 602.088030][T12608] comedi: valid board names for usbduxfast driver are: [ 602.094900][T12608] usbduxfast [ 602.098221][T12608] comedi: valid board names for usbdux driver are: [ 602.104739][T12608] usbdux [ 602.113108][T12608] comedi: valid board names for ni6501 driver are: [ 602.119730][T12608] ni6501 [ 602.122733][T12608] comedi: valid board names for dt9812 driver are: [ 602.129319][T12608] dt9812 [ 602.132316][T12608] comedi: valid board names for ni_labpc_cs driver are: [ 602.139331][T12608] ni_labpc_cs [ 602.142765][T12608] comedi: valid board names for ni_daq_700 driver are: [ 602.149691][T12608] ni_daq_700 [ 602.153038][T12608] comedi: valid board names for labpc_pci driver are: [ 602.159878][T12608] labpc_pci [ 602.163138][T12608] comedi: valid board names for adl_pci9118 driver are: [ 602.171150][T12608] pci9118dg [ 602.174419][T12608] pci9118hg [ 602.177691][T12608] pci9118hr [ 602.180963][T12608] comedi: valid board names for 8255_pci driver are: [ 602.187663][T12608] 8255_pci [ 602.190769][T12608] comedi: valid board names for s526 driver are: [ 602.198685][T12608] s526 [ 602.201429][T12608] comedi: valid board names for multiq3 driver are: [ 602.208123][T12608] multiq3 [ 602.211131][T12608] comedi: valid board names for pcmuio driver are: [ 602.217651][T12608] pcmuio48 [ 602.220758][T12608] pcmuio96 [ 602.223855][T12608] comedi: valid board names for pcmmio driver are: [ 602.230387][T12608] pcmmio [ 602.233317][T12608] comedi: valid board names for pcmda12 driver are: [ 602.239909][T12608] pcmda12 [ 602.242920][T12608] comedi: valid board names for pcmad driver are: [ 602.249352][T12608] pcmad12 [ 602.252363][T12608] pcmad16 [ 602.255360][T12608] comedi: valid board names for ni_labpc driver are: [ 602.262043][T12608] lab-pc-1200 [ 602.265394][T12608] lab-pc-1200ai [ 602.269738][T12608] lab-pc+ [ 602.272756][T12608] comedi: valid board names for atmio16 driver are: [ 602.279365][T12608] atmio16 [ 602.282376][T12608] atmio16d [ 602.285472][T12608] comedi: valid board names for ni_at_ao driver are: [ 602.292162][T12608] at-ao-6 [ 602.295156][T12608] at-ao-10 [ 602.298265][T12608] comedi: valid board names for ni_at_a2150 driver are: [ 602.305168][T12608] ni_at_a2150 [ 602.308534][T12608] comedi: valid board names for adq12b driver are: [ 602.315012][T12608] adq12b [ 602.317944][T12608] comedi: valid board names for mpc624 driver are: [ 602.324419][T12608] mpc624 [ 602.327363][T12608] comedi: valid board names for c6xdigio driver are: [ 602.334017][T12608] c6xdigio [ 602.337110][T12608] comedi: valid board names for aio_iiro_16 driver are: [ 602.344012][T12608] aio_iiro_16 [ 602.347662][T12608] comedi: valid board names for aio_aio12_8 driver are: [ 602.354574][T12608] aio_aio12_8 [ 602.357961][T12608] aio_ai12_8 [ 602.361215][T12608] aio_ao12_4 [ 602.364467][T12608] comedi: valid board names for fl512 driver are: [ 602.371564][T12608] fl512 [ 602.374403][T12608] comedi: valid board names for dmm32at driver are: [ 602.381155][T12608] dmm32at [ 602.384149][T12608] comedi: valid board names for dt282x driver are: [ 602.390713][T12608] dt2821 [ 602.393620][T12608] dt2821-f [ 602.396733][T12608] dt2821-g [ 602.399812][T12608] dt2823 [ 602.402717][T12608] dt2824-pgh [ 602.405991][T12608] dt2824-pgl [ 602.409242][T12608] dt2825 [ 602.412148][T12608] dt2827 [ 602.415055][T12608] dt2828 [ 602.417970][T12608] dt2829 [ 602.420873][T12608] dt21-ez [ 602.423866][T12608] dt23-ez [ 602.426909][T12608] dt24-ez [ 602.429907][T12608] dt24-ez-pgl [ 602.433246][T12608] comedi: valid board names for dt2817 driver are: [ 602.439747][T12608] dt2817 [ 602.442658][T12608] comedi: valid board names for dt2815 driver are: [ 602.449160][T12608] dt2815 [ 602.452079][T12608] comedi: valid board names for dt2814 driver are: [ 602.458980][T12608] dt2814 [ 602.461896][T12608] comedi: valid board names for dt2811 driver are: [ 602.468407][T12608] dt2811-pgh [ 602.472402][T12608] dt2811-pgl [ 602.475699][T12608] comedi: valid board names for dt2801 driver are: [ 602.482179][T12608] dt2801 [ 602.485083][T12608] comedi: valid board names for das6402 driver are: [ 602.491653][T12608] das6402-12 [ 602.494906][T12608] das6402-16 [ 602.498187][T12608] comedi: valid board names for das1800 driver are: [ 602.504742][T12608] das-1701st [ 602.508029][T12608] das-1701st-da [ 602.511542][T12608] das-1702st [ 602.514792][T12608] das-1702st-da [ 602.518326][T12608] das-1702hr [ 602.521576][T12608] das-1702hr-da [ 602.525087][T12608] das-1701ao [ 602.528365][T12608] das-1702ao [ 602.531618][T12608] das-1801st [ 602.534873][T12608] das-1801st-da [ 602.538399][T12608] das-1802st [ 602.541652][T12608] das-1802st-da [ 602.545162][T12608] das-1802hr [ 602.548445][T12608] das-1802hr-da [ 602.551960][T12608] das-1801hc [ 602.555213][T12608] das-1802hc [ 602.558486][T12608] das-1801ao [ 602.561741][T12608] das-1802ao [ 602.564994][T12608] comedi: valid board names for das800 driver are: [ 602.571491][T12608] das-800 [ 602.575163][T12608] cio-das800 [ 602.578484][T12608] das-801 [ 602.581493][T12608] cio-das801 [ 602.584763][T12608] das-802 [ 602.587913][T12608] cio-das802 [ 602.591427][T12608] cio-das802/16 [ 602.594960][T12608] comedi: valid board names for isa-das08 driver are: [ 602.601759][T12608] isa-das08 [ 602.604939][T12608] das08-pgm [ 602.608168][T12608] das08-pgh [ 602.611346][T12608] das08-pgl [ 602.614517][T12608] das08-aoh [ 602.617693][T12608] das08-aol [ 602.620868][T12608] das08-aom [ 602.624031][T12608] das08/jr-ao [ 602.627391][T12608] das08jr-16-ao [ 602.630903][T12608] pc104-das08 [ 602.634238][T12608] das08jr/16 [ 602.637504][T12608] comedi: valid board names for das16m1 driver are: [ 602.644058][T12608] das16m1 [ 602.647071][T12608] comedi: valid board names for dac02 driver are: [ 602.653449][T12608] dac02 [ 602.656314][T12608] comedi: valid board names for rti802 driver are: [ 602.662805][T12608] rti802 [ 602.665893][T12608] comedi: valid board names for rti800 driver are: [ 602.672360][T12608] rti800 [ 602.675264][T12608] rti815 [ 602.678683][T12608] comedi: valid board names for pcm3724 driver are: [ 602.685240][T12608] pcm3724 [ 602.688247][T12608] comedi: valid board names for pcl818 driver are: [ 602.694712][T12608] pcl818l [ 602.697730][T12608] pcl818h [ 602.700721][T12608] pcl818hd [ 602.703798][T12608] pcl818hg [ 602.706911][T12608] pcl818 [ 602.709825][T12608] pcl718 [ 602.712728][T12608] pcm3718 [ 602.715732][T12608] comedi: valid board names for pcl816 driver are: [ 602.722196][T12608] pcl816 [ 602.725104][T12608] pcl814b [ 602.728130][T12608] comedi: valid board names for pcl812 driver are: [ 602.734608][T12608] pcl812 [ 602.737569][T12608] pcl812pg [ 602.740647][T12608] acl8112pg [ 602.743811][T12608] acl8112dg [ 602.747105][T12608] acl8112hg [ 602.750271][T12608] a821pgl [ 602.753268][T12608] a821pglnda [ 602.756544][T12608] a821pgh [ 602.759548][T12608] a822pgl [ 602.762541][T12608] a822pgh [ 602.765531][T12608] a823pgl [ 602.768548][T12608] a823pgh [ 602.771538][T12608] pcl813 [ 602.774440][T12608] pcl813b [ 602.777447][T12608] acl8113 [ 602.780926][T12608] iso813 [ 602.783833][T12608] acl8216 [ 602.786842][T12608] a826pg [ 602.789747][T12608] comedi: valid board names for pcl730 driver are: [ 602.796235][T12608] pcl730 [ 602.799147][T12608] iso730 [ 602.802049][T12608] acl7130 [ 602.805044][T12608] pcm3730 [ 602.808052][T12608] pcl725 [ 602.810955][T12608] p8r8dio [ 602.813945][T12608] acl7225b [ 602.817045][T12608] p16r16dio [ 602.820208][T12608] pcl733 [ 602.823109][T12608] pcl734 [ 602.826031][T12608] opmm-1616-xt [ 602.829455][T12608] pearl-mm-p [ 602.832708][T12608] ir104-pbf [ 602.835897][T12608] comedi: valid board names for pcl726 driver are: [ 602.842368][T12608] pcl726 [ 602.845275][T12608] pcl727 [ 602.848210][T12608] pcl728 [ 602.851126][T12608] acl6126 [ 602.854116][T12608] acl6128 [ 602.857148][T12608] comedi: valid board names for pcl724 driver are: [ 602.863613][T12608] pcl724 [ 602.866533][T12608] pcl722 [ 602.869437][T12608] pcl731 [ 602.872348][T12608] acl7122 [ 602.875338][T12608] acl7124 [ 602.878358][T12608] pet48dio [ 602.881926][T12608] pcmio48 [ 602.884920][T12608] onyx-mm-dio [ 602.888296][T12608] comedi: valid board names for pcl711 driver are: [ 602.894763][T12608] pcl711 [ 602.897683][T12608] pcl711b [ 602.900684][T12608] acl8112hg [ 602.903847][T12608] acl8112dg [ 602.907038][T12608] comedi: valid board names for amplc_pc263 driver are: [ 602.913947][T12608] pc263 [ 602.916778][T12608] comedi: valid board names for amplc_pc236 driver are: [ 602.923683][T12608] pc36at [ 602.926607][T12608] comedi: valid board names for amplc_dio200 driver are: [ 602.933594][T12608] pc212e [ 602.936515][T12608] pc214e [ 602.939418][T12608] pc215e [ 602.942322][T12608] pc218e [ 602.945237][T12608] pc272e [ 602.948188][T12608] comedi: valid board names for comedi_parport driver are: [ 602.955349][T12608] comedi_parport [ 602.958963][T12608] comedi: valid board names for comedi_test driver are: [ 602.965882][T12608] comedi_test [ 602.969219][T12608] comedi: valid board names for comedi_bond driver are: [ 602.976135][T12608] comedi_bond [ 602.982114][ T6885] dw2102: command 0x0e transfer failed. [ 603.064833][T12611] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 603.137565][T12613] 9p: Bad value for 'rfdno' [ 603.435833][ T6885] dvb-usb: bulk message failed: -22 (3/0) [ 603.460125][ T6885] dw2102: command 0x0e transfer failed. [ 603.485304][ T6885] dvb-usb: bulk message failed: -22 (3/0) [ 603.520876][ T6885] dw2102: command 0x0e transfer failed. [ 603.541845][ T6885] dvb-usb: bulk message failed: -22 (1/0) [ 603.566587][ T6885] dw2102: command 0x51 transfer failed. [ 603.575891][ T6885] dvb-usb: bulk message failed: -22 (5/0) [ 603.593211][ T6885] dw2102: i2c probe for address 0x68 failed. [ 603.622626][ T6885] dvb-usb: bulk message failed: -22 (5/0) [ 603.644511][ T6885] dw2102: i2c probe for address 0x69 failed. [ 603.665441][ T6885] dvb-usb: bulk message failed: -22 (5/0) [ 603.671571][ T6885] dw2102: i2c probe for address 0x6a failed. [ 603.684065][ T6885] dw2102: probing for demodulator failed. Is the external power switched on? [ 603.714479][ T6885] dvb-usb: no frontend was attached by 'TeVii S662' [ 603.755679][ T8109] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 603.805731][ T6885] rc_core: IR keymap rc-tt-1500 not found [ 603.830586][T12620] loop6: detected capacity change from 0 to 524288000 [ 603.873206][ T6885] Registered IR keymap rc-empty [ 603.909921][ T6885] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 603.917568][ T8109] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.952360][ T8109] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 603.986686][ T8109] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 603.996439][ T6885] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input33 [ 604.041687][ T8109] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 604.069181][ T8109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.098357][T12616] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 604.098966][ T6885] dvb-usb: schedule remote query interval to 250 msecs. [ 604.138941][ T8109] hub 3-1:1.0: bad descriptor, ignoring hub [ 604.153900][ T8109] hub 3-1:1.0: probe with driver hub failed with error -5 [ 604.163512][ T6885] dw2102: su3000_power_ctrl: 0, initialized 1 [ 604.193903][ T8109] cdc_wdm 3-1:1.0: skipping garbage [ 604.208230][ T6885] dvb-usb: TeVii S662 successfully initialized and connected. [ 604.209299][ T8109] cdc_wdm 3-1:1.0: skipping garbage [ 604.243904][ T8109] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 604.256596][ T6885] usb 4-1: USB disconnect, device number 39 [ 604.271482][ T8109] cdc_wdm 3-1:1.0: Unknown control protocol [ 604.327861][T12624] futex_wake_op: syz.1.1644 tries to shift op by -1; fix this program [ 604.340088][ T30] audit: type=1400 audit(1768418164.346:848): avc: denied { read write } for pid=12615 comm="syz.2.1641" name="cdc-wdm0" dev="devtmpfs" ino=3512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 604.621117][ T30] audit: type=1400 audit(1768418164.376:849): avc: denied { open } for pid=12615 comm="syz.2.1641" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 604.631866][ T6885] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 604.738112][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 604.747232][T12629] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1643'. [ 604.758255][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 604.768110][T12629] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1643'. [ 604.777215][T12629] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1643'. [ 605.357575][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 605.364398][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 605.371693][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 605.378299][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 605.384646][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 605.391227][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 605.397520][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 605.404101][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 605.411555][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 605.418156][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 605.427429][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 605.434023][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 605.440102][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 605.677442][ T6885] usb 3-1: USB disconnect, device number 40 [ 608.068440][ T8109] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 608.396954][ T8109] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.407660][ T8109] usb 3-1: config 0 has no interfaces? [ 608.462958][ T8109] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 608.480626][ T8109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.502045][ T8109] usb 3-1: config 0 descriptor?? [ 608.703651][T12680] futex_wake_op: syz.5.1657 tries to shift op by -1; fix this program [ 608.895727][ T6885] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 609.099552][ T8109] usb 3-1: USB disconnect, device number 41 [ 609.176990][ T6885] usb 4-1: Using ep0 maxpacket: 8 [ 609.185457][ T6885] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 609.225344][ T6885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.238652][ T6885] usb 4-1: Product: syz [ 609.240206][ T30] audit: type=1400 audit(1768418169.238:850): avc: denied { mounton } for pid=12695 comm="syz.5.1663" path="/" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 609.242904][ T6885] usb 4-1: Manufacturer: syz [ 609.272359][ T6885] usb 4-1: SerialNumber: syz [ 609.313453][ T6885] usb 4-1: config 0 descriptor?? [ 609.346203][ T6885] gspca_main: sq930x-2.14.0 probing 2770:930c [ 609.479824][ T8109] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 609.515782][ T6477] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 609.649959][ T8109] usb 5-1: Using ep0 maxpacket: 8 [ 609.669722][ T8109] usb 5-1: unable to get BOS descriptor or descriptor too short [ 609.686614][ T8109] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 609.699233][ T6477] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.712752][ T8109] usb 5-1: config 7 has no interface number 0 [ 609.744204][ T6477] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.745378][ T8109] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 609.769718][ T6477] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 609.787935][ T8109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.790458][ T6477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 609.809020][ T8109] usb 5-1: Product: syz [ 609.818928][ T8109] usb 5-1: Manufacturer: syz [ 609.823543][ T8109] usb 5-1: SerialNumber: syz [ 609.832843][ T6477] usb 6-1: SerialNumber: syz [ 609.840805][ T6885] gspca_sq930x: ucbus_write failed -71 [ 609.888211][ T6885] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 609.952526][ T6885] usb 4-1: USB disconnect, device number 40 [ 610.067375][ T6477] usb 6-1: 0:2 : does not exist [ 610.077110][ T6477] usb 6-1: unit 5: unexpected type 0x09 [ 610.099378][ T8109] usbhid 5-1:7.67: couldn't find an input interrupt endpoint [ 610.112160][ T6477] usb 6-1: USB disconnect, device number 24 [ 610.128456][T12711] fuse: Unknown parameter 'fd0x0000000000000009' [ 610.136666][ T8109] usb 5-1: USB disconnect, device number 41 [ 610.181186][T11310] udevd[11310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.865510][T12716] futex_wake_op: syz.4.1669 tries to shift op by -1; fix this program [ 611.569689][ T8109] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 611.830863][T12730] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 611.975648][ T8109] usb 6-1: Using ep0 maxpacket: 8 [ 611.995004][ T8109] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 612.014469][ T8109] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.060277][T12739] tipc: Started in network mode [ 612.067401][T12739] tipc: Node identity 5a23cfd6fdb5, cluster identity 4711 [ 612.074968][T12739] tipc: Enabled bearer , priority 0 [ 612.082152][ T8109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 612.085138][T12739] syzkaller0: entered promiscuous mode [ 612.112453][T12739] syzkaller0: entered allmulticast mode [ 612.117318][ T8109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 612.136812][T12730] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 612.149206][T12730] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 612.224728][ T8109] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 612.235264][ T8109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.243661][ T8109] usb 6-1: Product: syz [ 612.252585][ T8109] usb 6-1: Manufacturer: syz [ 612.260451][ T8109] usb 6-1: SerialNumber: syz [ 612.268095][ T8109] usb 6-1: config 0 descriptor?? [ 612.274993][T12721] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 612.307602][ T30] audit: type=1400 audit(1768418172.313:851): avc: denied { cmd } for pid=12737 comm="syz.4.1674" path="socket:[36249]" dev="sockfs" ino=36249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 612.489426][ T8109] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 612.538603][ T8109] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input34 [ 612.654880][T12737] tipc: Resetting bearer [ 612.674268][T12754] FAULT_INJECTION: forcing a failure. [ 612.674268][T12754] name failslab, interval 1, probability 0, space 0, times 0 [ 612.696070][T12737] tipc: Disabling bearer [ 612.725312][T12754] CPU: 0 UID: 0 PID: 12754 Comm: syz.1.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.725337][T12754] Tainted: [L]=SOFTLOCKUP [ 612.725342][T12754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.725349][T12754] Call Trace: [ 612.725354][T12754] [ 612.725359][T12754] dump_stack_lvl+0x16c/0x1f0 [ 612.725382][T12754] should_fail_ex+0x512/0x640 [ 612.725408][T12754] ? fs_reclaim_acquire+0xae/0x150 [ 612.725425][T12754] should_failslab+0xc2/0x120 [ 612.725438][T12754] __kmalloc_noprof+0xeb/0x910 [ 612.725454][T12754] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 612.725472][T12754] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 612.725490][T12754] tomoyo_realpath_from_path+0xc2/0x6e0 [ 612.725505][T12754] ? tomoyo_profile+0x47/0x60 [ 612.725521][T12754] tomoyo_path_number_perm+0x245/0x580 [ 612.725532][T12754] ? tomoyo_path_number_perm+0x237/0x580 [ 612.725545][T12754] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 612.725557][T12754] ? find_held_lock+0x2b/0x80 [ 612.725597][T12754] ? find_held_lock+0x2b/0x80 [ 612.725619][T12754] ? hook_file_ioctl_common+0x144/0x410 [ 612.725646][T12754] ? __fget_files+0x20e/0x3c0 [ 612.725672][T12754] security_file_ioctl+0x9b/0x240 [ 612.725694][T12754] __x64_sys_ioctl+0xb7/0x210 [ 612.725714][T12754] do_syscall_64+0xcd/0xf80 [ 612.725736][T12754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.725751][T12754] RIP: 0033:0x7f98f918f749 [ 612.725764][T12754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.725779][T12754] RSP: 002b:00007f98f9f41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.725795][T12754] RAX: ffffffffffffffda RBX: 00007f98f93e5fa0 RCX: 00007f98f918f749 [ 612.725805][T12754] RDX: 0000200000000040 RSI: 00000000c02c5625 RDI: 0000000000000003 [ 612.725814][T12754] RBP: 00007f98f9f41090 R08: 0000000000000000 R09: 0000000000000000 [ 612.725822][T12754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.725831][T12754] R13: 00007f98f93e6038 R14: 00007f98f93e5fa0 R15: 00007ffdb5c58548 [ 612.725855][T12754] [ 612.958121][T12721] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 612.959898][T12754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 613.167525][T12759] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1668'. [ 613.256041][ T30] audit: type=1400 audit(1768418173.253:852): avc: denied { getopt } for pid=12761 comm="syz.3.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 613.701592][T12771] futex_wake_op: syz.4.1681 tries to shift op by -1; fix this program [ 614.611120][T12783] FAULT_INJECTION: forcing a failure. [ 614.611120][T12783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.714196][T12783] CPU: 1 UID: 0 PID: 12783 Comm: syz.4.1685 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.714223][T12783] Tainted: [L]=SOFTLOCKUP [ 614.714229][T12783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 614.714236][T12783] Call Trace: [ 614.714242][T12783] [ 614.714248][T12783] dump_stack_lvl+0x16c/0x1f0 [ 614.714275][T12783] should_fail_ex+0x512/0x640 [ 614.714301][T12783] _copy_from_user+0x2e/0xd0 [ 614.714325][T12783] do_sock_getsockopt+0x3a1/0x410 [ 614.714347][T12783] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 614.714365][T12783] ? __fget_files+0x204/0x3c0 [ 614.714394][T12783] __sys_getsockopt+0x12f/0x260 [ 614.714415][T12783] __x64_sys_getsockopt+0xbd/0x160 [ 614.714428][T12783] ? do_syscall_64+0x91/0xf80 [ 614.714449][T12783] ? lockdep_hardirqs_on+0x7c/0x110 [ 614.714470][T12783] do_syscall_64+0xcd/0xf80 [ 614.714491][T12783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.714505][T12783] RIP: 0033:0x7f143898f749 [ 614.714518][T12783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.714533][T12783] RSP: 002b:00007f1439871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 614.714549][T12783] RAX: ffffffffffffffda RBX: 00007f1438be5fa0 RCX: 00007f143898f749 [ 614.714559][T12783] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 614.714569][T12783] RBP: 00007f1439871090 R08: 0000200000000000 R09: 0000000000000000 [ 614.714578][T12783] R10: 0000200000032580 R11: 0000000000000246 R12: 0000000000000001 [ 614.714588][T12783] R13: 00007f1438be6038 R14: 00007f1438be5fa0 R15: 00007ffe876c9058 [ 614.714612][T12783] [ 614.886685][T12785] siw: device registration error -23 [ 614.972715][ C0] powermate: config urb returned -71 [ 614.978260][ C0] powermate: config urb returned -71 [ 614.983716][ C0] powermate: config urb returned -71 [ 615.091668][ T6885] usb 6-1: USB disconnect, device number 25 [ 615.091693][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 616.483946][T12810] FAULT_INJECTION: forcing a failure. [ 616.483946][T12810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.538808][T12810] CPU: 1 UID: 0 PID: 12810 Comm: syz.3.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.538836][T12810] Tainted: [L]=SOFTLOCKUP [ 616.538841][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.538851][T12810] Call Trace: [ 616.538857][T12810] [ 616.538863][T12810] dump_stack_lvl+0x16c/0x1f0 [ 616.538889][T12810] should_fail_ex+0x512/0x640 [ 616.538917][T12810] _copy_to_user+0x32/0xd0 [ 616.538944][T12810] simple_read_from_buffer+0xcb/0x170 [ 616.538969][T12810] proc_fail_nth_read+0x197/0x240 [ 616.538987][T12810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.539006][T12810] ? rw_verify_area+0xcf/0x6c0 [ 616.539025][T12810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.539042][T12810] vfs_read+0x1e4/0xcf0 [ 616.539063][T12810] ? __pfx___mutex_lock+0x10/0x10 [ 616.539088][T12810] ? __pfx_vfs_read+0x10/0x10 [ 616.539115][T12810] ? __fget_files+0x20e/0x3c0 [ 616.539145][T12810] ksys_read+0x12a/0x250 [ 616.539163][T12810] ? __pfx_ksys_read+0x10/0x10 [ 616.539187][T12810] do_syscall_64+0xcd/0xf80 [ 616.539210][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.539224][T12810] RIP: 0033:0x7f439a98e15c [ 616.539236][T12810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 616.539251][T12810] RSP: 002b:00007f439b7cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 616.539267][T12810] RAX: ffffffffffffffda RBX: 00007f439abe5fa0 RCX: 00007f439a98e15c [ 616.539276][T12810] RDX: 000000000000000f RSI: 00007f439b7cd0a0 RDI: 0000000000000004 [ 616.539285][T12810] RBP: 00007f439b7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 616.539295][T12810] R10: 000000000000002e R11: 0000000000000246 R12: 0000000000000001 [ 616.539303][T12810] R13: 00007f439abe6038 R14: 00007f439abe5fa0 R15: 00007ffffc112918 [ 616.539325][T12810] [ 616.786063][T12816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1694'. [ 618.006928][T12832] kvm: user requested TSC rate below hardware speed [ 618.445735][ T9] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 618.680758][ T9] usb 5-1: config 0 has an invalid interface number: 212 but max is 0 [ 618.760571][T12846] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.768786][T12846] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.794896][ T9] usb 5-1: config 0 has no interface number 0 [ 618.859455][T12849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31366 sclass=netlink_route_socket pid=12849 comm=syz.1.1701 [ 618.989608][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 619.070661][T12848] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1695'. [ 619.092288][ T30] audit: type=1400 audit(1768418179.064:853): avc: denied { nlmsg_read } for pid=12817 comm="syz.5.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 619.377588][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.390201][ T9] usb 5-1: Product: syz [ 619.394388][ T9] usb 5-1: Manufacturer: syz [ 619.399036][ T9] usb 5-1: SerialNumber: syz [ 619.425009][ T9] usb 5-1: config 0 descriptor?? [ 619.432597][ T9] ftdi_sio 5-1:0.212: FTDI USB Serial Device converter detected [ 619.441473][ T9] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 619.605233][T12861] bridge0: entered allmulticast mode [ 619.617324][T12861] pim6reg: entered allmulticast mode [ 619.631476][T12861] pim6reg: left allmulticast mode [ 619.642727][T12832] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 619.671331][ T6477] usb 5-1: USB disconnect, device number 42 [ 619.685402][ T6477] ftdi_sio 5-1:0.212: device disconnected [ 619.694694][T12861] bridge0: left allmulticast mode [ 620.144744][T12882] futex_wake_op: syz.2.1709 tries to shift op by -1; fix this program [ 620.964633][T12889] misc userio: Invalid payload size [ 620.990587][T12889] misc userio: No port type given on /dev/userio [ 621.017381][ T30] audit: type=1400 audit(1768418181.024:854): avc: denied { create } for pid=12887 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 621.552384][T12894] batman_adv: batadv0: Adding interface: gretap1 [ 621.558878][T12894] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.584521][T12894] batman_adv: batadv0: Interface activated: gretap1 [ 622.495897][T12924] futex_wake_op: syz.2.1720 tries to shift op by -1; fix this program [ 622.910987][T12926] siw: device registration error -23 [ 623.252479][T12933] misc userio: Invalid payload size [ 623.262121][T12933] misc userio: No port type given on /dev/userio [ 623.628192][ T30] audit: type=1400 audit(1768418183.634:855): avc: denied { write } for pid=12937 comm="syz.4.1724" name="file0" dev="tmpfs" ino=1858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 623.679265][ T30] audit: type=1400 audit(1768418183.634:856): avc: denied { open } for pid=12937 comm="syz.4.1724" path="/343/file0" dev="tmpfs" ino=1858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 623.740460][ T30] audit: type=1400 audit(1768418183.654:857): avc: denied { ioctl } for pid=12937 comm="syz.4.1724" path="/343/file0" dev="tmpfs" ino=1858 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 623.873783][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.938119][ T5812] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 624.237596][ T5812] usb 5-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 624.250749][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 624.257716][ T5812] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 624.504486][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1733'. [ 624.513637][T12961] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1733'. [ 624.522957][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1733'. [ 624.532044][T12961] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1733'. [ 624.533111][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.541114][T12961] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1733'. [ 624.560098][T12967] FAULT_INJECTION: forcing a failure. [ 624.560098][T12967] name failslab, interval 1, probability 0, space 0, times 0 [ 624.563873][ T5812] usb 5-1: config 0 descriptor?? [ 624.579284][T12967] CPU: 1 UID: 0 PID: 12967 Comm: syz.1.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.579310][T12967] Tainted: [L]=SOFTLOCKUP [ 624.579316][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.579324][T12967] Call Trace: [ 624.579330][T12967] [ 624.579336][T12967] dump_stack_lvl+0x16c/0x1f0 [ 624.579370][T12967] should_fail_ex+0x512/0x640 [ 624.579393][T12967] ? __kmalloc_cache_noprof+0x5f/0x800 [ 624.579410][T12967] should_failslab+0xc2/0x120 [ 624.579429][T12967] __kmalloc_cache_noprof+0x80/0x800 [ 624.579440][T12967] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 624.579455][T12967] ? madvise_collapse+0x1a9/0xa40 [ 624.579472][T12967] ? madvise_collapse+0x1a9/0xa40 [ 624.579486][T12967] madvise_collapse+0x1a9/0xa40 [ 624.579503][T12967] ? is_bpf_text_address+0x8a/0x1a0 [ 624.579515][T12967] ? __pfx_madvise_collapse+0x10/0x10 [ 624.579533][T12967] ? mas_prev_slot+0x4c9/0x1a20 [ 624.579548][T12967] madvise_vma_behavior+0xe8a/0x29e0 [ 624.579565][T12967] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 624.579579][T12967] ? mas_prev+0x9b/0xf0 [ 624.579591][T12967] ? __pfx_mas_prev+0x10/0x10 [ 624.579608][T12967] ? find_vma_prev+0xd3/0x150 [ 624.579621][T12967] ? __pfx_find_vma_prev+0x10/0x10 [ 624.579641][T12967] madvise_walk_vmas+0x31f/0xac0 [ 624.579657][T12967] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 624.579674][T12967] madvise_do_behavior+0x1e2/0x530 [ 624.579690][T12967] ? __pfx_madvise_do_behavior+0x10/0x10 [ 624.579704][T12967] ? down_read+0x13d/0x460 [ 624.579726][T12967] do_madvise+0x176/0x240 [ 624.579739][T12967] ? __pfx_do_madvise+0x10/0x10 [ 624.579751][T12967] ? __mutex_unlock_slowpath+0x161/0x790 [ 624.579769][T12967] ? __fget_files+0x20e/0x3c0 [ 624.579788][T12967] ? __pfx_ksys_write+0x10/0x10 [ 624.579803][T12967] __x64_sys_madvise+0xa9/0x110 [ 624.579816][T12967] ? lockdep_hardirqs_on+0x7c/0x110 [ 624.579830][T12967] do_syscall_64+0xcd/0xf80 [ 624.579844][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.579854][T12967] RIP: 0033:0x7f98f918f749 [ 624.579863][T12967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.579873][T12967] RSP: 002b:00007f98f9f41038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 624.579883][T12967] RAX: ffffffffffffffda RBX: 00007f98f93e5fa0 RCX: 00007f98f918f749 [ 624.579890][T12967] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 624.579895][T12967] RBP: 00007f98f9f41090 R08: 0000000000000000 R09: 0000000000000000 [ 624.579901][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.579907][T12967] R13: 00007f98f93e6038 R14: 00007f98f93e5fa0 R15: 00007ffdb5c58548 [ 624.579921][T12967] [ 625.260506][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 625.285362][T12975] batman_adv: batadv0: Adding interface: gretap1 [ 625.359840][T12984] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 625.370264][T12975] batman_adv: batadv0: The MTU of interface gretap1 is too small (1000) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.420412][ T5812] nintendo 0003:057E:2009.000A: unknown main item tag 0x0 [ 625.439137][ T5812] nintendo 0003:057E:2009.000A: unknown main item tag 0x0 [ 625.469675][ T5812] nintendo 0003:057E:2009.000A: hidraw0: USB HID v80.fd Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 625.492489][T12975] batman_adv: batadv0: Interface activated: gretap1 [ 625.618177][ T5812] nintendo 0003:057E:2009.000A: Failed to get joycon info; ret=-71 [ 625.793197][T12996] FAULT_INJECTION: forcing a failure. [ 625.793197][T12996] name failslab, interval 1, probability 0, space 0, times 0 [ 625.807460][T12994] team0 (unregistering): Port device team_slave_0 removed [ 625.816646][ T5812] nintendo 0003:057E:2009.000A: Failed to retrieve controller info; ret=-71 [ 625.817563][T12994] team0 (unregistering): Port device team_slave_1 removed [ 625.833523][T12996] CPU: 0 UID: 0 PID: 12996 Comm: syz.1.1744 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.833547][T12996] Tainted: [L]=SOFTLOCKUP [ 625.833553][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.833562][T12996] Call Trace: [ 625.833568][T12996] [ 625.833574][T12996] dump_stack_lvl+0x16c/0x1f0 [ 625.833600][T12996] should_fail_ex+0x512/0x640 [ 625.833622][T12996] ? fs_reclaim_acquire+0xae/0x150 [ 625.833646][T12996] should_failslab+0xc2/0x120 [ 625.833665][T12996] __kmalloc_noprof+0xeb/0x910 [ 625.833688][T12996] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 625.833714][T12996] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 625.833734][T12996] tomoyo_realpath_from_path+0xc2/0x6e0 [ 625.833756][T12996] ? tomoyo_profile+0x47/0x60 [ 625.833781][T12996] tomoyo_path_number_perm+0x245/0x580 [ 625.833800][T12996] ? tomoyo_path_number_perm+0x237/0x580 [ 625.833818][T12996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 625.833837][T12996] ? find_held_lock+0x2b/0x80 [ 625.833878][T12996] ? find_held_lock+0x2b/0x80 [ 625.833899][T12996] ? hook_file_ioctl_common+0x144/0x410 [ 625.833930][T12996] ? __fget_files+0x20e/0x3c0 [ 625.833956][T12996] security_file_ioctl+0x9b/0x240 [ 625.833983][T12996] __x64_sys_ioctl+0xb7/0x210 [ 625.834003][T12996] do_syscall_64+0xcd/0xf80 [ 625.834025][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.834039][T12996] RIP: 0033:0x7f98f918f749 [ 625.834054][T12996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.834064][ T5812] nintendo 0003:057E:2009.000A: Failed to initialize controller; ret=-71 [ 625.834069][T12996] RSP: 002b:00007f98f9f41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.834086][T12996] RAX: ffffffffffffffda RBX: 00007f98f93e5fa0 RCX: 00007f98f918f749 [ 625.834096][T12996] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 625.834103][T12996] RBP: 00007f98f9f41090 R08: 0000000000000000 R09: 0000000000000000 [ 625.834111][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.834119][T12996] R13: 00007f98f93e6038 R14: 00007f98f93e5fa0 R15: 00007ffdb5c58548 [ 625.834140][T12996] [ 625.834219][T12996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 626.113152][ T5812] nintendo 0003:057E:2009.000A: probe - fail = -71 [ 626.129839][T12996] input: syz1 as /devices/virtual/input/input35 [ 626.157495][ T5812] nintendo 0003:057E:2009.000A: probe with driver nintendo failed with error -71 [ 626.266313][ T5812] usb 5-1: USB disconnect, device number 43 [ 627.081502][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'. [ 627.096298][T13012] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1748'. [ 627.105693][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'. [ 627.114815][T13012] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1748'. [ 627.338991][T13019] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 628.385009][T13033] FAULT_INJECTION: forcing a failure. [ 628.385009][T13033] name failslab, interval 1, probability 0, space 0, times 0 [ 628.398704][T13033] CPU: 0 UID: 0 PID: 13033 Comm: syz.4.1754 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.398731][T13033] Tainted: [L]=SOFTLOCKUP [ 628.398737][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.398746][T13033] Call Trace: [ 628.398752][T13033] [ 628.398758][T13033] dump_stack_lvl+0x16c/0x1f0 [ 628.398785][T13033] should_fail_ex+0x512/0x640 [ 628.398810][T13033] ? fs_reclaim_acquire+0xae/0x150 [ 628.398834][T13033] should_failslab+0xc2/0x120 [ 628.398857][T13033] __kmalloc_noprof+0xeb/0x910 [ 628.398882][T13033] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 628.398911][T13033] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 628.398933][T13033] tomoyo_realpath_from_path+0xc2/0x6e0 [ 628.398958][T13033] ? tomoyo_profile+0x47/0x60 [ 628.398986][T13033] tomoyo_path_number_perm+0x245/0x580 [ 628.399008][T13033] ? tomoyo_path_number_perm+0x237/0x580 [ 628.399030][T13033] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 628.399052][T13033] ? find_held_lock+0x2b/0x80 [ 628.399100][T13033] ? find_held_lock+0x2b/0x80 [ 628.399123][T13033] ? hook_file_ioctl_common+0x144/0x410 [ 628.399154][T13033] ? __fget_files+0x20e/0x3c0 [ 628.399181][T13033] security_file_ioctl+0x9b/0x240 [ 628.399205][T13033] __x64_sys_ioctl+0xb7/0x210 [ 628.399226][T13033] do_syscall_64+0xcd/0xf80 [ 628.399251][T13033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.399267][T13033] RIP: 0033:0x7f143898f749 [ 628.399281][T13033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.399296][T13033] RSP: 002b:00007f1439871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.399311][T13033] RAX: ffffffffffffffda RBX: 00007f1438be5fa0 RCX: 00007f143898f749 [ 628.399322][T13033] RDX: 00002000000002c0 RSI: 000000008010640b RDI: 0000000000000003 [ 628.399332][T13033] RBP: 00007f1439871090 R08: 0000000000000000 R09: 0000000000000000 [ 628.399341][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.399356][T13033] R13: 00007f1438be6038 R14: 00007f1438be5fa0 R15: 00007ffe876c9058 [ 628.399381][T13033] [ 628.399441][T13033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 629.217160][T13046] FAULT_INJECTION: forcing a failure. [ 629.217160][T13046] name failslab, interval 1, probability 0, space 0, times 0 [ 629.526447][T13049] misc userio: Invalid payload size [ 629.577840][T13046] CPU: 1 UID: 0 PID: 13046 Comm: syz.4.1758 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.577871][T13046] Tainted: [L]=SOFTLOCKUP [ 629.577876][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.577886][T13046] Call Trace: [ 629.577892][T13046] [ 629.577899][T13046] dump_stack_lvl+0x16c/0x1f0 [ 629.577926][T13046] should_fail_ex+0x512/0x640 [ 629.577950][T13046] ? fs_reclaim_acquire+0xae/0x150 [ 629.577975][T13046] should_failslab+0xc2/0x120 [ 629.577997][T13046] __kmalloc_noprof+0xeb/0x910 [ 629.578021][T13046] ? rcu_is_watching+0x12/0xc0 [ 629.578038][T13046] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 629.578065][T13046] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 629.578087][T13046] tomoyo_realpath_from_path+0xc2/0x6e0 [ 629.578112][T13046] ? tomoyo_profile+0x47/0x60 [ 629.578139][T13046] tomoyo_path_number_perm+0x245/0x580 [ 629.578157][T13046] ? tomoyo_path_number_perm+0x237/0x580 [ 629.578179][T13046] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 629.578225][T13046] ? find_held_lock+0x2b/0x80 [ 629.578249][T13046] ? hook_file_ioctl_common+0x144/0x410 [ 629.578279][T13046] ? __fget_files+0x20e/0x3c0 [ 629.578306][T13046] security_file_ioctl+0x9b/0x240 [ 629.578330][T13046] __x64_sys_ioctl+0xb7/0x210 [ 629.578351][T13046] do_syscall_64+0xcd/0xf80 [ 629.578375][T13046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.578392][T13046] RIP: 0033:0x7f143898f749 [ 629.578407][T13046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.578423][T13046] RSP: 002b:00007f1439871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.578439][T13046] RAX: ffffffffffffffda RBX: 00007f1438be5fa0 RCX: 00007f143898f749 [ 629.578450][T13046] RDX: 0000200000000040 RSI: 0000000000008b22 RDI: 0000000000000004 [ 629.578460][T13046] RBP: 00007f1439871090 R08: 0000000000000000 R09: 0000000000000000 [ 629.578470][T13046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.578479][T13046] R13: 00007f1438be6038 R14: 00007f1438be5fa0 R15: 00007ffe876c9058 [ 629.578504][T13046] [ 629.578590][T13046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 629.717781][T13049] misc userio: No port type given on /dev/userio [ 629.845866][ T5812] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 630.145957][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 630.157531][ T5812] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 630.211102][ T5812] usb 2-1: config 0 has no interface number 0 [ 630.350318][ T5812] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 630.542601][ T5812] usb 2-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 630.589819][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.626562][ T5812] usb 2-1: Product: syz [ 630.653338][ T5812] usb 2-1: Manufacturer: syz [ 630.685339][ T5812] usb 2-1: SerialNumber: syz [ 630.719546][ T5812] usb 2-1: config 0 descriptor?? [ 630.738964][T13047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 630.756391][ T5812] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 631.007155][T13042] syz_tun: entered allmulticast mode [ 632.054051][T13047] syz_tun: left allmulticast mode [ 632.107368][ T5812] usb 2-1: USB disconnect, device number 30 [ 632.312257][T13083] FAULT_INJECTION: forcing a failure. [ 632.312257][T13083] name failslab, interval 1, probability 0, space 0, times 0 [ 632.345672][T13083] CPU: 1 UID: 0 PID: 13083 Comm: syz.1.1769 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.345700][T13083] Tainted: [L]=SOFTLOCKUP [ 632.345705][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.345713][T13083] Call Trace: [ 632.345719][T13083] [ 632.345726][T13083] dump_stack_lvl+0x16c/0x1f0 [ 632.345752][T13083] should_fail_ex+0x512/0x640 [ 632.345775][T13083] ? fs_reclaim_acquire+0xae/0x150 [ 632.345798][T13083] should_failslab+0xc2/0x120 [ 632.345818][T13083] __kmalloc_noprof+0xeb/0x910 [ 632.345843][T13083] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 632.345869][T13083] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 632.345889][T13083] tomoyo_realpath_from_path+0xc2/0x6e0 [ 632.345911][T13083] ? tomoyo_profile+0x47/0x60 [ 632.345937][T13083] tomoyo_path_number_perm+0x245/0x580 [ 632.345954][T13083] ? tomoyo_path_number_perm+0x237/0x580 [ 632.345973][T13083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 632.345992][T13083] ? find_held_lock+0x2b/0x80 [ 632.346035][T13083] ? find_held_lock+0x2b/0x80 [ 632.346056][T13083] ? hook_file_ioctl_common+0x144/0x410 [ 632.346084][T13083] ? __fget_files+0x20e/0x3c0 [ 632.346110][T13083] security_file_ioctl+0x9b/0x240 [ 632.346132][T13083] __x64_sys_ioctl+0xb7/0x210 [ 632.346151][T13083] do_syscall_64+0xcd/0xf80 [ 632.346172][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.346188][T13083] RIP: 0033:0x7f98f918f749 [ 632.346201][T13083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.346215][T13083] RSP: 002b:00007f98f9f41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.346231][T13083] RAX: ffffffffffffffda RBX: 00007f98f93e5fa0 RCX: 00007f98f918f749 [ 632.346240][T13083] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 632.346250][T13083] RBP: 00007f98f9f41090 R08: 0000000000000000 R09: 0000000000000000 [ 632.346259][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.346267][T13083] R13: 00007f98f93e6038 R14: 00007f98f93e5fa0 R15: 00007ffdb5c58548 [ 632.346289][T13083] [ 632.346296][T13083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.615653][ T5812] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 632.629511][T13093] misc userio: Invalid payload size [ 632.644078][T13093] misc userio: No port type given on /dev/userio [ 632.767968][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 632.786517][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 633.119383][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 633.131648][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 633.143307][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 634.032923][ T5812] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 634.096050][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.104205][ T5812] usb 3-1: Product: syz [ 634.111540][ T5812] usb 3-1: Manufacturer: syz [ 634.118182][ T5812] usb 3-1: SerialNumber: syz [ 634.140927][ T5812] usb 3-1: config 0 descriptor?? [ 634.149926][T13085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 634.385815][ T5812] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 634.416240][ T5812] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 635.158097][T13120] FAULT_INJECTION: forcing a failure. [ 635.158097][T13120] name failslab, interval 1, probability 0, space 0, times 0 [ 635.170924][T13120] CPU: 0 UID: 0 PID: 13120 Comm: syz.3.1779 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.170949][T13120] Tainted: [L]=SOFTLOCKUP [ 635.170954][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 635.170963][T13120] Call Trace: [ 635.170968][T13120] [ 635.170974][T13120] dump_stack_lvl+0x16c/0x1f0 [ 635.170996][T13120] should_fail_ex+0x512/0x640 [ 635.171011][T13120] ? fs_reclaim_acquire+0xae/0x150 [ 635.171031][T13120] should_failslab+0xc2/0x120 [ 635.171053][T13120] __kmalloc_noprof+0xeb/0x910 [ 635.171079][T13120] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 635.171106][T13120] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 635.171125][T13120] tomoyo_realpath_from_path+0xc2/0x6e0 [ 635.171142][T13120] ? tomoyo_profile+0x47/0x60 [ 635.171158][T13120] tomoyo_path_number_perm+0x245/0x580 [ 635.171170][T13120] ? tomoyo_path_number_perm+0x237/0x580 [ 635.171182][T13120] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 635.171198][T13120] ? find_held_lock+0x2b/0x80 [ 635.171244][T13120] ? find_held_lock+0x2b/0x80 [ 635.171264][T13120] ? hook_file_ioctl_common+0x144/0x410 [ 635.171292][T13120] ? __fget_files+0x20e/0x3c0 [ 635.171309][T13120] security_file_ioctl+0x9b/0x240 [ 635.171324][T13120] __x64_sys_ioctl+0xb7/0x210 [ 635.171336][T13120] do_syscall_64+0xcd/0xf80 [ 635.171351][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.171364][T13120] RIP: 0033:0x7f439a98f749 [ 635.171378][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.171394][T13120] RSP: 002b:00007f439b7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.171409][T13120] RAX: ffffffffffffffda RBX: 00007f439abe6090 RCX: 00007f439a98f749 [ 635.171418][T13120] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 635.171426][T13120] RBP: 00007f439b7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 635.171435][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.171443][T13120] R13: 00007f439abe6128 R14: 00007f439abe6090 R15: 00007ffffc112918 [ 635.171463][T13120] [ 635.171478][T13120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.392010][T13120] input: syz1 as /devices/virtual/input/input37 [ 635.930202][ C1] powermate: config urb returned -71 [ 635.930571][ T8109] usb 3-1: USB disconnect, device number 42 [ 635.935537][ C1] powermate: usb_submit_urb(config) failed [ 635.941857][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 636.023124][T13124] __nla_validate_parse: 1 callbacks suppressed [ 636.023141][T13124] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1776'. [ 636.504791][ T8109] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 637.042457][T13135] syzkaller0: entered promiscuous mode [ 637.080611][T13135] syzkaller0: entered allmulticast mode [ 637.141781][T13140] syz.2.1784 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 637.143465][ T8109] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 637.178660][T13135] tipc: Started in network mode [ 637.183525][T13135] tipc: Node identity ee6468ac4649, cluster identity 4711 [ 637.201320][T13135] tipc: Enabled bearer , priority 0 [ 637.221606][ T30] audit: type=1400 audit(1768418197.183:858): avc: denied { relabelfrom } for pid=13134 comm="syz.3.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 637.241735][ T8109] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 637.255852][T13134] tipc: Resetting bearer [ 637.265737][ T8109] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 637.282250][ T30] audit: type=1400 audit(1768418197.183:859): avc: denied { relabelto } for pid=13134 comm="syz.3.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 637.313600][ T8109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.338932][ T30] audit: type=1400 audit(1768418197.263:860): avc: denied { create } for pid=13139 comm="syz.2.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 637.382095][T13134] tipc: Disabling bearer [ 637.459589][T13145] futex_wake_op: syz.4.1786 tries to shift op by -1; fix this program [ 638.065092][ T8109] usb 2-1: can't set config #27, error -71 [ 638.085370][ T8109] usb 2-1: USB disconnect, device number 31 [ 638.136681][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 638.164287][T13162] comedi comedi3: comedi_config --init_data is deprecated [ 638.498818][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.036839][T13172] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 639.268529][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.395081][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 639.404596][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.412794][ T9] usb 6-1: Product: syz [ 639.417140][ T9] usb 6-1: Manufacturer: syz [ 639.421828][ T9] usb 6-1: SerialNumber: syz [ 640.019786][T13185] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1785'. [ 640.570713][T13194] futex_wake_op: syz.4.1798 tries to shift op by -1; fix this program [ 640.842257][T13195] fuse: Bad value for 'user_id' [ 640.847564][T13195] fuse: Bad value for 'user_id' [ 641.549802][ T30] audit: type=1400 audit(1768418201.513:861): avc: denied { ioctl } for pid=13202 comm="syz.3.1801" path="socket:[38231]" dev="sockfs" ino=38231 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 642.576046][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1805'. [ 642.585094][T13224] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1805'. [ 642.595363][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1805'. [ 642.604913][T13224] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1805'. [ 642.614284][T13224] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1805'. [ 643.131525][ T9] usb 6-1: invalid UAC_HEADER (v1) [ 643.154363][T13231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1808'. [ 643.184645][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 643.221756][ T9] usb 6-1: USB disconnect, device number 26 [ 643.258641][ T30] audit: type=1400 audit(1768418203.263:862): avc: denied { connect } for pid=13230 comm="syz.1.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 643.318918][T11310] udevd[11310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.502802][ T30] audit: type=1400 audit(1768418203.503:863): avc: denied { write } for pid=13230 comm="syz.1.1808" path="socket:[38403]" dev="sockfs" ino=38403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 644.024104][T13248] futex_wake_op: syz.3.1812 tries to shift op by -1; fix this program [ 644.467188][T13255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1814'. [ 645.082122][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1816'. [ 645.148124][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 645.462807][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1821'. [ 645.806878][ T30] audit: type=1400 audit(1768418205.372:864): avc: denied { getopt } for pid=13261 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 645.879844][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 646.217277][T13287] syzkaller1: entered promiscuous mode [ 646.234308][T13287] syzkaller1: entered allmulticast mode [ 646.407615][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 646.416076][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 646.424967][ T9] usb 4-1: config index 0 descriptor too short (expected 255, got 18) [ 646.433404][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 646.954117][ T9] usb 4-1: string descriptor 0 read error: -22 [ 646.960590][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 646.980093][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.557443][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 647.596430][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 647.616949][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 647.645272][ T9] usb 4-1: media controller created [ 647.676689][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 647.828108][ T6477] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 648.041849][ T6477] usb 5-1: Using ep0 maxpacket: 16 [ 648.049998][ T6477] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 648.060413][ T6477] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 648.072297][ T6477] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 648.101484][ T6477] usb 5-1: config 0 interface 0 has no altsetting 0 [ 648.114035][ T6477] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 648.123247][ T5812] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 648.133934][ T6477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.144179][ T6477] usb 5-1: Product: syz [ 648.149516][ T6477] usb 5-1: Manufacturer: syz [ 648.181908][ T6477] usb 5-1: SerialNumber: syz [ 648.192383][ T6477] usb 5-1: config 0 descriptor?? [ 648.275696][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 648.282917][ T5812] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 648.291897][ T5812] usb 6-1: config 0 has no interface number 0 [ 648.298482][ T5812] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.309835][ T5812] usb 6-1: config 0 interface 85 has no altsetting 0 [ 648.327314][ T5812] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 648.336720][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.350090][ T5812] usb 6-1: Product: syz [ 648.358139][ T5812] usb 6-1: Manufacturer: syz [ 648.367619][ T5812] usb 6-1: SerialNumber: syz [ 648.389495][ T5812] usb 6-1: config 0 descriptor?? [ 648.616280][ T6477] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 648.748480][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 648.854821][T13308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.864047][T13308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.204613][T13308] __nla_validate_parse: 4 callbacks suppressed [ 649.204627][T13308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1827'. [ 649.594982][ T6477] usb 5-1: USB disconnect, device number 44 [ 649.690202][ T30] audit: type=1400 audit(1768418209.692:865): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 649.749768][ T9] usb 4-1: USB disconnect, device number 41 [ 649.883003][ T30] audit: type=1400 audit(1768418209.722:866): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 649.917297][ T30] audit: type=1400 audit(1768418209.722:867): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 649.949244][ T30] audit: type=1400 audit(1768418209.762:868): avc: denied { bpf } for pid=13317 comm="syz.1.1830" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 651.783822][ T5812] appletouch 6-1:0.85: Failed to read mode from device. [ 651.791557][ T5812] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 651.805256][ T5812] usb 6-1: USB disconnect, device number 27 [ 651.938215][ T30] audit: type=1400 audit(1768418211.942:869): avc: denied { perfmon } for pid=13330 comm="syz.3.1833" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 652.227319][ T8109] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 652.366692][T13344] netlink: 'syz.4.1836': attribute type 10 has an invalid length. [ 652.375481][T13344] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1836'. [ 653.447422][ T8109] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.460105][ T8109] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.472162][ T8109] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.481452][ T8109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.538570][ T8109] usb 3-1: Product: syz [ 653.542763][ T8109] usb 3-1: Manufacturer: syz [ 653.565665][ T8109] usb 3-1: SerialNumber: syz [ 653.892823][ T5812] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 653.951564][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'. [ 653.978990][T13356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1834'. [ 654.203449][ T5812] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.240079][ T5812] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 654.301243][ T5812] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.343518][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.366035][T13354] hsr_slave_1 (unregistering): left promiscuous mode [ 654.389072][T13346] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 654.466958][ T5812] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 654.744162][ T30] audit: type=1400 audit(1768418214.742:870): avc: denied { read } for pid=13357 comm="syz.1.1841" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 654.769266][ T30] audit: type=1400 audit(1768418214.742:871): avc: denied { open } for pid=13357 comm="syz.1.1841" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 654.878032][ T30] audit: type=1400 audit(1768418214.742:872): avc: denied { ioctl } for pid=13357 comm="syz.1.1841" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 654.905978][ T30] audit: type=1400 audit(1768418214.742:873): avc: denied { connect } for pid=13357 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 654.945311][ T30] audit: type=1400 audit(1768418214.932:874): avc: denied { map } for pid=13360 comm="syz.4.1842" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.000856][T13342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.010743][T13342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.463760][T13368] batman_adv: batadv0: Adding interface: gretap1 [ 655.470589][T13368] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.496519][T13368] batman_adv: batadv0: Interface activated: gretap1 [ 655.862201][ T8109] usb 3-1: invalid UAC_HEADER (v1) [ 656.163640][ T8109] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 656.245218][ T8109] usb 3-1: USB disconnect, device number 43 [ 656.357895][T11310] udevd[11310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 657.056717][ T5812] usb 6-1: USB disconnect, device number 28 [ 657.185149][T13386] evm: overlay not supported [ 657.629209][ T30] audit: type=1400 audit(1768418217.592:875): avc: denied { mount } for pid=13381 comm="syz.2.1848" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 657.674019][ T6477] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 657.736168][T13389] program syz.2.1848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.987495][ T6477] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.916594][ T6477] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.937716][ T6477] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.946818][ T6477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.954804][ T6477] usb 4-1: Product: syz [ 659.003658][ T6477] usb 4-1: Manufacturer: syz [ 659.008500][ T6477] usb 4-1: SerialNumber: syz [ 659.041977][ T30] audit: type=1400 audit(1768418218.992:876): avc: denied { create } for pid=13398 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 659.085718][ T30] audit: type=1400 audit(1768418218.992:877): avc: denied { write } for pid=13398 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 659.345335][T13412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1849'. [ 659.595701][ T6885] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 659.755620][ T6885] usb 3-1: Using ep0 maxpacket: 16 [ 659.769806][ T6885] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 659.788119][ T6885] usb 3-1: config 1 has no interface number 0 [ 659.804845][ T6885] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 659.825219][ T6885] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 659.842828][ T6885] usb 3-1: config 1 interface 105 has no altsetting 0 [ 659.871083][ T6885] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 659.895647][ T5812] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 659.904875][ T6885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.916671][ T6885] usb 3-1: Product: syz [ 659.922851][ T6885] usb 3-1: Manufacturer: syz [ 659.930332][ T6885] usb 3-1: SerialNumber: syz [ 659.963481][T13411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 659.974493][T13411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 660.045694][ T5812] usb 5-1: Using ep0 maxpacket: 8 [ 660.053001][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 660.134461][ T5812] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 660.147507][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 660.159877][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 660.176369][ T5812] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 660.243207][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1857'. [ 660.252383][T13421] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1857'. [ 660.262112][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1857'. [ 660.271440][T13421] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1857'. [ 660.280566][T13421] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1857'. [ 660.611599][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.619894][ T5812] usb 5-1: Product: syz [ 660.624249][ T5812] usb 5-1: Manufacturer: syz [ 660.640851][ T5812] usb 5-1: SerialNumber: syz [ 660.662890][ T5812] usb 5-1: config 0 descriptor?? [ 660.672588][T13415] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 660.680048][ T6477] usb 4-1: invalid UAC_HEADER (v1) [ 660.700067][ T6477] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 660.713443][ T6477] usb 4-1: USB disconnect, device number 42 [ 660.737831][T11310] udevd[11310]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 660.912227][T13411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 660.923833][ T5812] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 660.931737][T13411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 660.934157][ T5812] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input40 [ 661.065635][ T5825] Bluetooth: hci5: command 0x0405 tx timeout [ 661.526663][T13415] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 661.597633][ T6885] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 661.653326][ T6885] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 661.766965][ T6885] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:bb:4c:a7:0f:85 [ 661.793502][ T6885] usb 3-1: USB disconnect, device number 44 [ 661.821500][ T6885] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 661.939213][ T6885] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 661.976759][ T6885] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 661.986405][ T6885] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 662.374491][ T30] audit: type=1326 audit(1768418222.372:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.5.1865" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f1cf8f749 code=0x0 [ 662.774495][ C1] powermate: config urb returned -71 [ 662.780001][ C1] powermate: config urb returned -71 [ 662.786292][ C1] powermate: config urb returned -71 [ 662.793526][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 662.803621][ T6885] usb 5-1: USB disconnect, device number 45 [ 662.935627][ T5812] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 663.125787][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 663.138567][ T5812] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 663.149770][ T5812] usb 6-1: config 0 has no interface number 0 [ 663.156286][ T5812] usb 6-1: config 0 interface 196 has no altsetting 0 [ 663.166303][ T5812] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 663.194944][ T5812] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 663.204744][ T5812] usb 6-1: Product: syz [ 663.211027][ T5812] usb 6-1: Manufacturer: syz [ 663.216173][ T5812] usb 6-1: SerialNumber: syz [ 663.226647][ T5812] usb 6-1: config 0 descriptor?? [ 663.468384][T13464] autofs: Bad value for 'fd' [ 663.906826][ T5812] ipheth 6-1:0.196: Unable to find endpoints [ 664.810845][T13471] Driver unsupported XDP return value 0 on prog (id 505) dev N/A, expect packet loss! [ 666.750639][ T5812] usb 6-1: USB disconnect, device number 29 [ 770.745519][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 770.752491][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13471 [ 770.760222][ C0] rcu: (detected by 0, t=10502 jiffies, g=54725, q=750 ncpus=2) [ 770.767907][ C0] task:syz.1.1871 state:R running task stack:26856 pid:13471 tgid:13470 ppid:5814 task_flags:0x400140 flags:0x00080000 [ 770.781896][ C0] Call Trace: [ 770.785163][ C0] [ 770.787980][ C0] sched_show_task+0x423/0x630 [ 770.792722][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 770.797980][ C0] ? rcu_dump_cpu_stacks+0x376/0x530 [ 770.803235][ C0] ? wq_watchdog_touch+0xe2/0x190 [ 770.808230][ C0] rcu_sched_clock_irq+0x2634/0x31f0 [ 770.813507][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 770.819120][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 770.824557][ C0] ? __cgroup_account_cputime_field+0x12c/0x1f0 [ 770.830768][ C0] ? rcu_is_watching+0x12/0xc0 [ 770.835501][ C0] update_process_times+0x178/0x2d0 [ 770.840689][ C0] ? __pfx_update_process_times+0x10/0x10 [ 770.846383][ C0] tick_nohz_handler+0x506/0x720 [ 770.851296][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 770.856722][ C0] ? __hrtimer_run_queues+0x58f/0xc40 [ 770.862068][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 770.867494][ C0] __hrtimer_run_queues+0x64e/0xc40 [ 770.872675][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 770.878377][ C0] ? read_tsc+0x9/0x20 [ 770.882431][ C0] hrtimer_interrupt+0x397/0x8e0 [ 770.887342][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 770.893302][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 770.898915][ C0] [ 770.901816][ C0] [ 770.904719][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 770.910667][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 770.916708][ C0] Code: e6 66 58 00 48 89 df 5b e9 2d 19 5e 00 be 03 00 00 00 5b e9 12 f6 ed 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 38 c4 f3 11 65 8b 05 49 c4 f3 [ 770.936297][ C0] RSP: 0018:ffffc900036d7660 EFLAGS: 00000246 [ 770.942336][ C0] RAX: ffff8880623cf17e RBX: ffff8880623cf170 RCX: ffffc9000c669000 [ 770.950277][ C0] RDX: ffff8880623cf170 RSI: ffffffff8989c0b4 RDI: 0000000000000005 [ 770.958216][ C0] RBP: ffff8880623cf000 R08: 0000000000000005 R09: 0000000000000000 [ 770.966157][ C0] R10: 0000000000000001 R11: ffff88807d8ad4b0 R12: ffff8880623cf170 [ 770.974095][ C0] R13: ffffc90002dee000 R14: dffffc0000000000 R15: ffffc900036d7940 [ 770.982038][ C0] ? xdp_test_run_batch.constprop.0+0x424/0x1f20 [ 770.988339][ C0] xdp_test_run_batch.constprop.0+0x1129/0x1f20 [ 770.994553][ C0] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 771.001115][ C0] ? write_comp_data+0x42/0x90 [ 771.005853][ C0] bpf_test_run_xdp_live+0x365/0x770 [ 771.011118][ C0] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 771.016900][ C0] ? __pfx___schedule+0x10/0x10 [ 771.021723][ C0] ? find_held_lock+0x2b/0x80 [ 771.026377][ C0] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 771.032247][ C0] ? 0xffffffffa0205540 [ 771.036369][ C0] ? 0xffffffffa0205540 [ 771.040489][ C0] ? 0xffffffffa0205540 [ 771.044618][ C0] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 771.050487][ C0] bpf_prog_test_run_xdp+0xcfa/0x1660 [ 771.055920][ C0] ? __fget_files+0x204/0x3c0 [ 771.060570][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 771.066347][ C0] ? __might_fault+0x50/0x190 [ 771.070996][ C0] ? fput+0x70/0xf0 [ 771.074782][ C0] ? __bpf_prog_get+0x97/0x2a0 [ 771.079526][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 771.085301][ C0] __sys_bpf+0x1035/0x4980 [ 771.089709][ C0] ? futex_private_hash_put+0x160/0x1b0 [ 771.095228][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 771.099972][ C0] ? __pfx_futex_wait+0x10/0x10 [ 771.104795][ C0] ? percpu_counter_add_batch+0xca/0x200 [ 771.110399][ C0] ? errseq_sample+0x53/0x70 [ 771.114963][ C0] ? do_futex+0x122/0x350 [ 771.119274][ C0] ? __sys_socket+0xac/0x260 [ 771.123854][ C0] ? xfd_validate_state+0x61/0x180 [ 771.128973][ C0] __x64_sys_bpf+0x78/0xc0 [ 771.133378][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.138555][ C0] do_syscall_64+0xcd/0xf80 [ 771.143039][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.148902][ C0] RIP: 0033:0x7f98f918f749 [ 771.153294][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.172878][ C0] RSP: 002b:00007f98f9f41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 771.181261][ C0] RAX: ffffffffffffffda RBX: 00007f98f93e5fa0 RCX: 00007f98f918f749 [ 771.189215][ C0] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 771.197170][ C0] RBP: 00007f98f9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 771.205117][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.213061][ C0] R13: 00007f98f93e6038 R14: 00007f98f93e5fa0 R15: 00007ffdb5c58548 [ 771.221009][ C0] [ 771.224000][ C0] rcu: rcu_preempt kthread starved for 10335 jiffies! g54725 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 771.235159][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 771.245098][ C0] rcu: RCU grace-period kthread stack dump: [ 771.250955][ C0] task:rcu_preempt state:R running task stack:27792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 771.264392][ C0] Call Trace: [ 771.267641][ C0] [ 771.270545][ C0] ? __schedule+0x10b9/0x6150 [ 771.275195][ C0] __schedule+0x1139/0x6150 [ 771.279673][ C0] ? __lock_acquire+0x436/0x2890 [ 771.284583][ C0] ? __mod_timer+0x8f2/0xd30 [ 771.289147][ C0] ? __pfx___schedule+0x10/0x10 [ 771.293965][ C0] ? find_held_lock+0x2b/0x80 [ 771.298624][ C0] ? schedule+0x2d7/0x3a0 [ 771.302926][ C0] schedule+0xe7/0x3a0 [ 771.306964][ C0] schedule_timeout+0x123/0x290 [ 771.311783][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 771.317123][ C0] ? __pfx_process_timeout+0x10/0x10 [ 771.322380][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 771.328155][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 771.333587][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 771.338326][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 771.343584][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 771.348494][ C0] ? rcu_is_watching+0x12/0xc0 [ 771.353227][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 771.359006][ C0] rcu_gp_kthread+0x26d/0x380 [ 771.363651][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 771.368819][ C0] ? rcu_is_watching+0x12/0xc0 [ 771.373554][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.378724][ C0] ? __kthread_parkme+0x19e/0x250 [ 771.383717][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 771.388885][ C0] kthread+0x3c5/0x780 [ 771.392923][ C0] ? __pfx_kthread+0x10/0x10 [ 771.397485][ C0] ? rcu_is_watching+0x12/0xc0 [ 771.402216][ C0] ? __pfx_kthread+0x10/0x10 [ 771.406777][ C0] ret_from_fork+0x983/0xb10 [ 771.411337][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 771.416417][ C0] ? __switch_to+0x7af/0x10d0 [ 771.421066][ C0] ? __pfx_kthread+0x10/0x10 [ 771.425641][ C0] ret_from_fork_asm+0x1a/0x30 [ 771.430383][ C0] [ 771.433374][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 771.439663][ C0] Sending NMI from CPU 0 to CPUs 1: [ 771.444841][ C1] NMI backtrace for cpu 1 [ 771.444854][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.444870][ C1] Tainted: [L]=SOFTLOCKUP [ 771.444875][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.444882][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 771.444900][ C1] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 771.444911][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 771.444922][ C1] RAX: 0000000002e0a1d1 RBX: 0000000000000001 RCX: ffffffff8b7866d9 [ 771.444930][ C1] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480 [ 771.444937][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 771.444945][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 771.444953][ C1] R13: ffff88801dac24c0 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 771.444961][ C1] FS: 0000000000000000(0000) GS:ffff8881249f4000(0000) knlGS:0000000000000000 [ 771.444974][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.444982][ C1] CR2: 00007f14397156c0 CR3: 0000000036b3b000 CR4: 00000000003526f0 [ 771.444990][ C1] Call Trace: [ 771.444994][ C1] [ 771.444998][ C1] default_idle+0x13/0x20 [ 771.445015][ C1] default_idle_call+0x6c/0xb0 [ 771.445031][ C1] do_idle+0x38d/0x510 [ 771.445049][ C1] ? __pfx_do_idle+0x10/0x10 [ 771.445066][ C1] ? do_idle+0x2e3/0x510 [ 771.445083][ C1] cpu_startup_entry+0x4f/0x60 [ 771.445100][ C1] start_secondary+0x21d/0x2d0 [ 771.445113][ C1] ? __pfx_start_secondary+0x10/0x10 [ 771.445127][ C1] common_startup_64+0x13e/0x148 [ 771.445146][ C1]