last executing test programs:

15m18.066113208s ago: executing program 2 (id=604):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0, 0x500}, 0x0)

15m18.06592879s ago: executing program 2 (id=605):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x20)

15m15.68791487s ago: executing program 2 (id=615):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x800, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000040))
r1 = socket$kcm(0x15, 0x5, 0x0)
fallocate(r1, 0x0, 0x3, 0x8)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x1, @mcast1}, 0x80, 0x0}, 0x40000)

15m13.741594763s ago: executing program 2 (id=623):
syz_emit_ethernet(0x3aa, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x374, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0)

15m12.618325827s ago: executing program 2 (id=635):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x28c800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'})
ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0x5})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4000010, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r7, {0x9, 0xfff3}, {0x3, 0xfff9}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_usb_disconnect(r0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

15m10.306752624s ago: executing program 2 (id=644):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000840), 0x2b0141, 0x0)
ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000800)=0xff)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x3, 0xf5, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4844}, 0x4800)
r7 = syz_usb_connect(0x0, 0x20c, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io(r7, &(0x7f00000004c0)={0x18, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r7], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0xe3d9810e5145b92b, 0x0, 0x0, 0x0, 0x48, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x79, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x14, 0x1, 0x3, 0x1, 0x7, 0x4, {0x9, 0x21, 0xec14, 0x3, 0x1, {0x22, 0xd7a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xd, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xfe, 0x80, 0x3, 0x40, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x427}}, {0xc6, &(0x7f0000000100)=@string={0xc6, 0x3, "ad4f4664b8b98a24975dc3976528fb26e71c6fe2eb9a619e4fc0b8383a9d3a4444e0d223f2245f8051e15f6d5303f96303a517216dc173420622d943c76d10ac14a887c5c47be009c8c010341554885f88c84fded4f84883ff6af30a6b02e5c41def18f5e2a7166da97e499c4c524eaf094a3f51b046f3e9378035ed60e3236f572949c3269804fec047697fadfdce7e65301aca024e670a105f8d687b22525d337945eb133e50a11654289ac2cc0b92d355b2458bf007867e9c6bd00e86668099eca488"}}, {0x2d, &(0x7f0000000200)=@string={0x2d, 0x3, "94176d0badd789128605604100bb9ac67f2f4987d4ef13080ee32bc8ccfb1c3bceb26e76a4db7615f980aa"}}, {0xba, &(0x7f00000002c0)=@string={0xba, 0x3, "19f5f8085099541c13d3aaac5d7c3dde52509c5f6083d0874cc1bf0280007db6df4a86a0b91313662c1b861640b5535c68ebd216837d7e98773020e4cce12d98184b27c60150d3b0d91152739a22a9f0e423fbb44386d063500732de4b4e11e4ea339489d8a0e73f05125a9fe6acb20d61f6899638b00f0fbb7a70dc263cb4b1b366e5fa01af9c0523c596ff7416a196ccd2e6f6c737d59fa59cef1f03607e967f9be16a8005b7239278c1a9253dff1877cee1cf0c03c58f"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "7932bab120f257028e07aa95db2264703fd6e5888730d6ae25d5ead7cbcd699b3050d4abca3f26030a1080a792c6985f7238746654129b21fe5863d443d3e494ca12187569b8c5e5ea93fe4ecd6bc0fe2cca184de831f9a27f9754d2f78756b885faf6603ff5c3251321127303ffdda3f04a4154e5d610ab1853839234d4fc8301cc6bb9c0a353cac9309f7fd356e8dc1b55f7ac6bd8561bcf0c5b069772912ee32a518a06e0e36b45331faab5c0eb696fe66fa78299bc85fe87"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x444}}, {0xcd, &(0x7f0000000500)=@string={0xcd, 0x3, "6a839802cfcf35ee7e32d1a9bf57113435e067400f2c84d178bee9b194585cc784aa67831df7b760221984f95b71112f0f778f0ece4aa29aae26a717d44400993db7c9709d6caaffbf216166befca0f7a03d9b1e2737482f41df291f29e040e2e8676feda57329f06feb202eb043cf0e6bc17da2266541673ccc80e06ab840ece625c5b92d2252cf9965b31e36fe3eaa54e0645f97b0b4a450156d2002c33976693ea6e137e7bb39c7148c526fb8cd7a1da602e76bc4dddad7d89c855849acb912f114723b3e89d6d92093"}}, {0x43, &(0x7f0000000600)=@string={0x43, 0x3, "a4b59e6095187294c4e1dc2f18bb20c5ff5bd717e8486ef442b7bb177fe6007ff8ef4229016caf4bcfbd219b22baf6c6ec2f71331f94f841aca502b95d1bba53ff"}}, {0xbf, &(0x7f0000000680)=@string={0xbf, 0x3, "dc38b30e1ce98bf4948b67ef928833672e13d82254c5d4f8c99b9e6a32efb4f4a5dc350cf150c6c40c417fe422594df44eacab2fce39de6ca373d2b21d1d83398da95823f5a539a2916a0ab8b205d6ec1c33c33f2df68aeade6cad00b5571e9f16a987c4be17b507fc55086121bc97ea8b55884e3f83e0475b31362779ab903ece6b221cf7e7f332824077bf9a2403eb7a7ed5ef954177eb9f54cc61eb12b98e028a46221a23c501e6b0a46f3108c84e30230ef682514644b21b9f8199"}}]})

14m55.210995119s ago: executing program 32 (id=644):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000840), 0x2b0141, 0x0)
ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000800)=0xff)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x3, 0xf5, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4844}, 0x4800)
r7 = syz_usb_connect(0x0, 0x20c, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io(r7, &(0x7f00000004c0)={0x18, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r7], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0xe3d9810e5145b92b, 0x0, 0x0, 0x0, 0x48, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x79, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x14, 0x1, 0x3, 0x1, 0x7, 0x4, {0x9, 0x21, 0xec14, 0x3, 0x1, {0x22, 0xd7a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xd, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xfe, 0x80, 0x3, 0x40, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x427}}, {0xc6, &(0x7f0000000100)=@string={0xc6, 0x3, "ad4f4664b8b98a24975dc3976528fb26e71c6fe2eb9a619e4fc0b8383a9d3a4444e0d223f2245f8051e15f6d5303f96303a517216dc173420622d943c76d10ac14a887c5c47be009c8c010341554885f88c84fded4f84883ff6af30a6b02e5c41def18f5e2a7166da97e499c4c524eaf094a3f51b046f3e9378035ed60e3236f572949c3269804fec047697fadfdce7e65301aca024e670a105f8d687b22525d337945eb133e50a11654289ac2cc0b92d355b2458bf007867e9c6bd00e86668099eca488"}}, {0x2d, &(0x7f0000000200)=@string={0x2d, 0x3, "94176d0badd789128605604100bb9ac67f2f4987d4ef13080ee32bc8ccfb1c3bceb26e76a4db7615f980aa"}}, {0xba, &(0x7f00000002c0)=@string={0xba, 0x3, "19f5f8085099541c13d3aaac5d7c3dde52509c5f6083d0874cc1bf0280007db6df4a86a0b91313662c1b861640b5535c68ebd216837d7e98773020e4cce12d98184b27c60150d3b0d91152739a22a9f0e423fbb44386d063500732de4b4e11e4ea339489d8a0e73f05125a9fe6acb20d61f6899638b00f0fbb7a70dc263cb4b1b366e5fa01af9c0523c596ff7416a196ccd2e6f6c737d59fa59cef1f03607e967f9be16a8005b7239278c1a9253dff1877cee1cf0c03c58f"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "7932bab120f257028e07aa95db2264703fd6e5888730d6ae25d5ead7cbcd699b3050d4abca3f26030a1080a792c6985f7238746654129b21fe5863d443d3e494ca12187569b8c5e5ea93fe4ecd6bc0fe2cca184de831f9a27f9754d2f78756b885faf6603ff5c3251321127303ffdda3f04a4154e5d610ab1853839234d4fc8301cc6bb9c0a353cac9309f7fd356e8dc1b55f7ac6bd8561bcf0c5b069772912ee32a518a06e0e36b45331faab5c0eb696fe66fa78299bc85fe87"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x444}}, {0xcd, &(0x7f0000000500)=@string={0xcd, 0x3, "6a839802cfcf35ee7e32d1a9bf57113435e067400f2c84d178bee9b194585cc784aa67831df7b760221984f95b71112f0f778f0ece4aa29aae26a717d44400993db7c9709d6caaffbf216166befca0f7a03d9b1e2737482f41df291f29e040e2e8676feda57329f06feb202eb043cf0e6bc17da2266541673ccc80e06ab840ece625c5b92d2252cf9965b31e36fe3eaa54e0645f97b0b4a450156d2002c33976693ea6e137e7bb39c7148c526fb8cd7a1da602e76bc4dddad7d89c855849acb912f114723b3e89d6d92093"}}, {0x43, &(0x7f0000000600)=@string={0x43, 0x3, "a4b59e6095187294c4e1dc2f18bb20c5ff5bd717e8486ef442b7bb177fe6007ff8ef4229016caf4bcfbd219b22baf6c6ec2f71331f94f841aca502b95d1bba53ff"}}, {0xbf, &(0x7f0000000680)=@string={0xbf, 0x3, "dc38b30e1ce98bf4948b67ef928833672e13d82254c5d4f8c99b9e6a32efb4f4a5dc350cf150c6c40c417fe422594df44eacab2fce39de6ca373d2b21d1d83398da95823f5a539a2916a0ab8b205d6ec1c33c33f2df68aeade6cad00b5571e9f16a987c4be17b507fc55086121bc97ea8b55884e3f83e0475b31362779ab903ece6b221cf7e7f332824077bf9a2403eb7a7ed5ef954177eb9f54cc61eb12b98e028a46221a23c501e6b0a46f3108c84e30230ef682514644b21b9f8199"}}]})

5.326936545s ago: executing program 4 (id=5413):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (fail_nth: 6)

4.777870469s ago: executing program 4 (id=5415):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
syz_usb_connect$uac1(0x5, 0xc5, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0xff, "17"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x9, "", "ad"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa, 0xfff7, 0x7, "c5701b95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "", 'uH'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x3c, &(0x7f00000002c0)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x7, 0xfffc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e4ef36361642bc9a4d1f80001dfadb85"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x5, 0x2f, 0x5, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x2d, 0x9, 0x0, 0x3}]}, 0x1, [{0x67, &(0x7f0000000300)=@string={0x67, 0x3, "252a7f43ac9eb8c38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ce0bc8f19a0cbadb440a42828ba2a88195a952b8afb6dd70bb98c0646f6db7b885d5dd0a8ecc918f8be"}}]})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xc, 0x0, 0x0, {0x8000, 0x1000, 0x8, 0x6}})

3.825377923s ago: executing program 1 (id=5425):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044014}, 0x4040) (fail_nth: 6)

3.532108296s ago: executing program 1 (id=5427):
syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00')
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair(0x18, 0x5, 0x3, &(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
socket$inet_mptcp(0x2, 0x1, 0x106)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2/file0\x00', 0x10, 0xfffffffe)
r2 = socket(0x10, 0x803, 0x0)
ioctl$PPPOEIOCSFWD(r2, 0x4004b100, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'veth1_virt_wifi\x00'}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x3, [0x84, 0x9, 0x2]}})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000211ec4d44bee185a0425bd700000", @ANYRES32=r5, @ANYBLOB="00000000210b00001800128008000100677265000c000280060011004e240000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4804)
socket$kcm(0x10, 0x2, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00')
read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020)

3.128067119s ago: executing program 4 (id=5428):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x14, 0x29, 0x37, {0x3c}}}], 0x14}, 0xc044)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x93, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) (async)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
sendmsg$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x14, 0x29, 0x37, {0x3c}}}], 0x14}, 0xc044) (async)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0}, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x93, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)

2.966304463s ago: executing program 5 (id=5430):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x0, 0x10, &(0x7f0000000000), 0x45, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x1}, 0x48)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = openat$incfs(r2, &(0x7f0000000100)='.pending_reads\x00', 0x400000, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000012640)={'ip_vti0\x00', &(0x7f0000000140)={'sit0\x00', r5, 0x700, 0x7807, 0xb0, 0x3, {{0xa, 0x4, 0x2, 0x32, 0x28, 0x67, 0x0, 0x5, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @empty, {[@end, @lsrr={0x83, 0x7, 0xc7, [@loopback]}, @lsrr={0x83, 0xb, 0xbe, [@broadcast, @empty]}]}}}}})
write$binfmt_script(r2, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010000)={0x18, r8, 0x301, 0x70bd28, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0xee, 0xfd, 0x9, 0x2, @private1, @loopback, 0x40, 0x40, 0x2, 0xe}})

2.745519992s ago: executing program 5 (id=5433):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
inotify_init()
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x0, 0x0, 0x80000fff, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fc, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]})
close_range(r0, 0xffffffffffffffff, 0x0)

2.395385988s ago: executing program 1 (id=5434):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc728, 0x10108, 0x2}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23})
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x80)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)

2.322505921s ago: executing program 1 (id=5435):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000002240)='-', 0x1, 0x4004085, 0x0, 0x0)
r1 = accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80800)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@private, @multicast1}, &(0x7f0000000180)=0x1)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x8905, &(0x7f0000000080))

2.273121945s ago: executing program 5 (id=5437):
syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0)
unshare(0x24020400)
unshare(0x2a020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

2.108811568s ago: executing program 5 (id=5438):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
syz_usb_connect$uac1(0x5, 0xc5, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0xff, "17"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x9, "", "ad"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa, 0xfff7, 0x7, "c5701b95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "", 'uH'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x3c, &(0x7f00000002c0)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x7, 0xfffc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e4ef36361642bc9a4d1f80001dfadb85"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x5, 0x2f, 0x5, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x2d, 0x9, 0x0, 0x3}]}, 0x1, [{0x67, &(0x7f0000000300)=@string={0x67, 0x3, "252a7f43ac9eb8c38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ce0bc8f19a0cbadb440a42828ba2a88195a952b8afb6dd70bb98c0646f6db7b885d5dd0a8ecc918f8be"}}]})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xc, 0x0, 0x0, {0x8000, 0x1000, 0x8, 0x6}})

2.035397095s ago: executing program 3 (id=5439):
openat$dma_heap(0xffffff9c, 0x0, 0x42006, 0x0)

1.953496784s ago: executing program 3 (id=5440):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000004c0)={0x9, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x84)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000280)=""/58)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r6 = dup(r5)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000))
write(r2, &(0x7f00000003c0)="baca02923a5a5c58c569a5770aea809dbc166f28bafa85e1cbb6154642efc7f87a55fe2820cdcf79f22e763d1c34d1c40cfe7f4562e2c7800aabc04c7e84c02a8e96687213e4f626ac9f09d6e24289cb368a08d442d62a56264991a19ae871787fbbcae6b93c5ac2626504095d45750f91f5d70f000cf0c1256584db1f550db7058a232d998da87c12cdf621cd8fd3543833c7854297bffc2de7717e116dcb3c496aa2c80909b69e0fb97b95b9d442c25c1b8d672d58119439aedd28ca60aabf4462def40363e8386888b9a67c34029a81d6abbda45e2278a123b0de734e6d7107fbfee72fa272a2abf5", 0xea)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x2db004e0]}, 0x8, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r1], 0x4c}}, 0x0)

1.709695691s ago: executing program 3 (id=5442):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1})
r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x9c83, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0)

1.665866405s ago: executing program 4 (id=5443):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0xc0000, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x2}}}], 0x18}, 0x240cf)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000005"], 0xf8}}, 0x0)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_dump={0x20, 0x0, 0x10}})
r5 = msgget(0x1, 0x11)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000007400)={&(0x7f0000007340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000073c0)={&(0x7f0000007380)={0x14, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x6, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0xc3, 0x1, 0xe4, 0x44, 0x8, 0x1, 0x9}, {0xb, 0xa6f3, 0x6, 0x8, 0x9, 0x8, 0x4, 0x3, 0xa, 0x13, 0x7, 0x3, 0x1}, {0x1ff, 0x6, 0xd, 0x10, 0x25, 0x9, 0xfd, 0xfb, 0x1, 0x15, 0x0, 0x1, 0x4}], 0x9})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}], 0x10)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x6, 0xffff, 0x0, 0x10002, 0xfffffffffffffffe, 0x4002004c4, 0x1000, 0x0, 0x0, 0x10, 0x1, 0x7, 0x0, 0x1000000], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
msgrcv(r5, &(0x7f0000000640)={0x0, ""/164}, 0xa8, 0x3, 0x2800)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0xd, 0x1, {0x2}})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x2c, 0x6, 0x0, 0xfffffffc}, {0x14, 0xe, 0x0, 0xe}, {0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x8080}, 0x4040041)
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

1.507088564s ago: executing program 0 (id=5444):
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000) (fail_nth: 6)

1.348924351s ago: executing program 1 (id=5445):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32)
close(r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x87}]}}]}, 0x3c}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async)
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0xc04c561a, &(0x7f00000000c0))
r8 = socket$packet(0x11, 0x2, 0x300) (async)
socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32)
r9 = epoll_create1(0x80000) (rerun: 32)
epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r8) (async)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r10, &(0x7f0000000100)=[{&(0x7f0000000240)=""/189, 0xbd}], 0x1, 0x32, 0x0)

1.30922124s ago: executing program 3 (id=5446):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc728, 0x10108, 0x2}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23})
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x80)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)

1.003624494s ago: executing program 3 (id=5447):
r0 = io_uring_setup(0x516, &(0x7f0000000380)={0x0, 0xddaa, 0x1, 0x2, 0x19b})
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) (fail_nth: 6)
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
close_range(r0, r0, 0x0)

817.565939ms ago: executing program 4 (id=5448):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
unshare(0x24020400)
unshare(0x2a020400)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

605.601166ms ago: executing program 1 (id=5449):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0x5, 0x2, "5c80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000008})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0xc, &(0x7f0000000000)={0x20, 0x24, 0x79, {0x79, 0x23, "3fff52de961753648593243e4228f4e6ee08c6e0699ffdb47b810633955388f3528e0d6ad76f26eb7bb27a915d51a529a3f1c5c133bc8a23e0967a937b28c155997e5bad7fd8ad5f531bcb15160639bcfd68480f6b372d63fd8764a62f35343e5876183cb25c0393af13dc5f6db55d982262d93b044038"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x24, &(0x7f0000000100)={0x0, 0xe, 0xa8, "2b1255af669b8faab51afbe083eed88e004ec602c848e66d38cb9536d41065cc6b70a566c6108c0e1b7b83b5d4fafa598071e521b77cdc64372411d3b692da913c412388ab6d37087054940d1e22203beda2d7d8320d1f39b8b5d8cc4158bbba4c59050ac81e6726cfc5cb502a730cc2597f541b100a978e726bd1a789f8fca56749533722becc932c01e007bc1c80b4e2c308bf38f1920f877768fac108a350c4affefcaf071bf4"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x5f}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xfffb, 0x5, 0x400000, 0x0, 0x189c, 0x0, 0x7ff, 0x4, 0x7fea, 0x1, 0x1, 0x9}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0xf2b}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})

471.102859ms ago: executing program 0 (id=5450):
openat$dma_heap(0xffffff9c, 0x0, 0x42006, 0x0)

442.908422ms ago: executing program 4 (id=5451):
futex(&(0x7f000000cffc), 0x80, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f0000000080)=0x1, 0xd, 0x800, 0x0, &(0x7f0000000040), 0x3)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000)

357.939931ms ago: executing program 0 (id=5452):
r0 = socket$inet6(0xa, 0x2, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12)
r6 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_regs={0x7}})

307.568784ms ago: executing program 5 (id=5453):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x1d961}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xfffffdff, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010100}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x24a4}, @IFLA_MASTER, @IFLA_IFNAME={0x0, 0x3, 'geneve0\x00'}]}, 0x40}}, 0x4080)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000002480)="95", 0x1}], 0x1, 0xed47, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6f75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r4 = socket(0x22, 0x2, 0x3)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0x8008af26, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1)
r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r7 = socket(0x18, 0x800, 0x0)
connect$pppoe(r7, &(0x7f0000000200)={0x18, 0x0, {0x1, @multicast, 'vcan0\x00'}}, 0x1e)
sendfile(r7, r6, 0x0, 0x8)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x58}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8800)

250.448914ms ago: executing program 0 (id=5454):
unshare(0x400)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)="a3", 0x1}], 0x1, 0x2)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)='z', 0x1}], 0x1, 0x10000000)

200.412537ms ago: executing program 0 (id=5455):
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, <r0=>0x0})
sched_setattr(r0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x2f9, 0xfffffff9, 0x2, 0x101, 0x70000000000000, 0x4, 0xfff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100018c89fcc90e6f94681498452d624f2a170275b413698673b1defbd32648560c0fe7b108eb22aab3f172ac046afe50617c51ba4d182439543cf2f058fc06b9cfb627e0116aa22aa702a73049d1789c4d138eb0044c505ca12fb9f85868ecb27980471420220f3debfc590ad4f71d7b966afcd47c79cb3ef18f465ccf347aa49415be66e66986f3c8c987e0277572ae10e35d1e9c26e2335185e54dba7bff491b106cdb5f6dc67fab1b00629d"], 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaf886dd60cb653e00283aff0000000000000000000000000000fe800000498f35b6c05f4891349945d877000000000000000000000d71941fd3c06132000020010000400000000000000000000000fc2200"], 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r3=>0x0)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)=r3)
ptrace$peekuser(0x3, r3, 0x4)

184.667035ms ago: executing program 5 (id=5456):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xfffffffd, 0x4)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x30)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x5, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r5, 0x402, 0x40000029)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000051d82b5e00e000000200000000000000006d7b00a80000000000000008000000a4f900000000000000000000000a"], 0xb8}}, 0x0)
r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
preadv(r7, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde)
r8 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0x3, 0xb, 0x4, 0x10000, 0x2, {}, {0x3, 0x0, 0x80, 0x2, 0x1, 0x7f, "e9383c9c"}, 0x9, 0x2, {0x0}, 0x4})
fcntl$notify(r4, 0x402, 0x1c)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000080)=<r9=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x3, &(0x7f0000000200))
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r10, 0x402, 0x1a)
open(&(0x7f0000000140)='./bus\x00', 0x141bc2, 0x1c0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x309, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'R'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0)

130.743993ms ago: executing program 0 (id=5457):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045731, &(0x7f0000000000))
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/158, 0x9e}], 0x1}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000001080), 0xb, 0x1)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="202f00006800010001001000fdffff7f00000000000000000400020004000b00"], 0x20}, 0x1, 0x0, 0x0, 0x4000008}, 0x4000080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000160000000000000000000a50000000060a0b1600000000000000000200000824000480200001800a0001007175087461000000100002800c00014000000000000000020920010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
close_range(0xffffffffffffffff, r5, 0x2)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0xff0, &(0x7f0000001840)=""/4080, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9e01a0016000500170db90013ce000001000080ff00020005000700f9ff"], 0x1f)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
unshare(0xa060400)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
unshare(0x6020400)
ioctl$TIOCGPTPEER(r8, 0x5441, 0x6)
sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0xfdd7}], 0x1}, 0x4048043)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)

0s ago: executing program 3 (id=5458):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="24200400858d00004c0012800e00010069703665727370616e0000003800028014000600fe8000000000000000000000000000bb0500fa000200000004001200000000000000b53100000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) (fail_nth: 6)

kernel console output (not intermixed with test programs):

3 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1076.017211][T22217] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1076.017229][T22217] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[ 1076.017241][T22217] RDX: 0000000020004800 RSI: 0000000000000000 RDI: 0000000000000000
[ 1076.017252][T22217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1076.017263][T22217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1076.017273][T22217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1076.017299][T22217]  </TASK>
[ 1076.496483][T22220] binder: BINDER_SET_CONTEXT_MGR already set
[ 1076.502513][T22220] binder: 22218:22220 ioctl 4018620d 800000c0 returned -16
[ 1076.916335][    C0] net_ratelimit: 91 callbacks suppressed
[ 1076.916355][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1077.066530][ T5883] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1077.117020][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5182'.
[ 1077.160443][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5182'.
[ 1077.166471][T13903] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1077.196627][ T5883] usb 2-1: device descriptor read/64, error -71
[ 1077.347433][T13903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1077.387149][T13903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1077.423261][T13903] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1077.452931][T13903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.467407][ T5883] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1077.489904][T13903] usb 4-1: Product: syz
[ 1077.494114][T13903] usb 4-1: Manufacturer: syz
[ 1077.516486][T13903] usb 4-1: SerialNumber: syz
[ 1077.537559][T13903] usb 4-1: config 0 descriptor??
[ 1077.626635][ T5883] usb 2-1: device descriptor read/64, error -71
[ 1077.759276][ T5883] usb usb2-port1: attempt power cycle
[ 1077.768287][T22230] fuse: Unknown parameter 'Õ®<˜KÖ½`'
[ 1077.820704][T13903] usb 4-1: USB disconnect, device number 38
[ 1077.853423][T21782] udevd[21782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1077.956309][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1078.186737][ T5883] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1078.227066][ T5883] usb 2-1: device descriptor read/8, error -71
[ 1078.476320][ T5883] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1078.497070][ T5883] usb 2-1: device descriptor read/8, error -71
[ 1078.606705][ T5883] usb usb2-port1: unable to enumerate USB device
[ 1078.902678][   T30] audit: type=1800 audit(1769916623.305:1070): pid=22259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5194" name="file0" dev="tmpfs" ino=2596 res=0 errno=0
[ 1078.981210][T22273] FAULT_INJECTION: forcing a failure.
[ 1078.981210][T22273] name failslab, interval 1, probability 0, space 0, times 0
[ 1078.996150][T22273] CPU: 1 UID: 0 PID: 22273 Comm: syz.5.5198 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1078.996181][T22273] Tainted: [L]=SOFTLOCKUP
[ 1078.996187][T22273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1078.996199][T22273] Call Trace:
[ 1078.996207][T22273]  <TASK>
[ 1078.996219][T22273]  dump_stack_lvl+0xe8/0x150
[ 1078.996244][T22273]  should_fail_ex+0x412/0x560
[ 1078.996266][T22273]  should_failslab+0xa8/0x100
[ 1078.996286][T22273]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 1078.996310][T22273]  ? apparmor_capable+0x137/0x1a0
[ 1078.996341][T22273]  ? skb_clone+0x212/0x3a0
[ 1078.996366][T22273]  skb_clone+0x212/0x3a0
[ 1078.996386][T22273]  ? nfnetlink_rcv+0x4b0/0x27b0
[ 1078.996412][T22273]  nfnetlink_rcv+0x4e2/0x27b0
[ 1078.996444][T22273]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1078.996463][T22273]  ? __dev_queue_xmit+0x274/0x3850
[ 1078.996483][T22273]  ? __local_bh_enable_ip+0xd0/0x130
[ 1078.996499][T22273]  ? __dev_queue_xmit+0x1e6c/0x3850
[ 1078.996518][T22273]  ? __sys_sendmsg+0x183/0x260
[ 1078.996543][T22273]  ? __dev_queue_xmit+0x274/0x3850
[ 1078.996564][T22273]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1078.996597][T22273]  ? ref_tracker_free+0x693/0x840
[ 1078.996616][T22273]  ? __copy_skb_header+0xa3/0x4a0
[ 1078.996639][T22273]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1078.996673][T22273]  ? skb_clone+0x246/0x3a0
[ 1078.996697][T22273]  ? __netlink_deliver_tap+0x807/0x850
[ 1078.996716][T22273]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1078.996748][T22273]  netlink_unicast+0x80f/0x9b0
[ 1078.996780][T22273]  ? __pfx_netlink_unicast+0x10/0x10
[ 1078.996802][T22273]  ? __alloc_skb+0x193/0x390
[ 1078.996819][T22273]  ? netlink_sendmsg+0x650/0xb40
[ 1078.996834][T22273]  ? skb_put+0x11b/0x210
[ 1078.996854][T22273]  netlink_sendmsg+0x813/0xb40
[ 1078.996881][T22273]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1078.996902][T22273]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1078.996925][T22273]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1078.996946][T22273]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1078.996963][T22273]  ____sys_sendmsg+0xa68/0xad0
[ 1078.996992][T22273]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1078.997018][T22273]  ? kstrtoull+0x12f/0x1d0
[ 1078.997045][T22273]  ___sys_sendmsg+0x2a5/0x360
[ 1078.997065][T22273]  ? __lock_acquire+0x6b5/0x2cf0
[ 1078.997091][T22273]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1078.997114][T22273]  ? get_pid_task+0x20/0x1f0
[ 1078.997133][T22273]  ? get_pid_task+0x20/0x1f0
[ 1078.997149][T22273]  ? get_pid_task+0x20/0x1f0
[ 1078.997190][T22273]  ? __fget_files+0x2a/0x420
[ 1078.997208][T22273]  ? __fget_files+0x3a0/0x420
[ 1078.997236][T22273]  __sys_sendmsg+0x183/0x260
[ 1078.997259][T22273]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1078.997292][T22273]  ? __pfx_ksys_write+0x10/0x10
[ 1078.997328][T22273]  __do_fast_syscall_32+0x1d2/0x540
[ 1078.997348][T22273]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1078.997365][T22273]  ? do_fast_syscall_32+0x33/0x70
[ 1078.997382][T22273]  ? asm_int80_emulation+0x1a/0x20
[ 1078.997398][T22273]  ? do_int80_emulation+0x20e/0x400
[ 1078.997421][T22273]  do_fast_syscall_32+0x33/0x70
[ 1078.997441][T22273]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1078.997461][T22273] RIP: 0023:0xf746d539
[ 1078.997478][T22273] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1078.997492][T22273] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1078.997511][T22273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[ 1078.997524][T22273] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1078.997535][T22273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1078.997545][T22273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1078.997556][T22273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1078.997582][T22273]  </TASK>
[ 1079.006333][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1079.785271][T22288] FAULT_INJECTION: forcing a failure.
[ 1079.785271][T22288] name failslab, interval 1, probability 0, space 0, times 0
[ 1079.820269][T22288] CPU: 0 UID: 0 PID: 22288 Comm: syz.1.5203 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1079.820306][T22288] Tainted: [L]=SOFTLOCKUP
[ 1079.820313][T22288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1079.820323][T22288] Call Trace:
[ 1079.820332][T22288]  <TASK>
[ 1079.820340][T22288]  dump_stack_lvl+0xe8/0x150
[ 1079.820367][T22288]  should_fail_ex+0x412/0x560
[ 1079.820392][T22288]  should_failslab+0xa8/0x100
[ 1079.820412][T22288]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1079.820429][T22288]  ? vhost_iotlb_alloc+0x54/0x180
[ 1079.820460][T22288]  vhost_iotlb_alloc+0x54/0x180
[ 1079.820485][T22288]  vhost_dev_ioctl+0xd4b/0x1170
[ 1079.820505][T22288]  ? vhost_vsock_dev_ioctl+0x22c/0xe60
[ 1079.820532][T22288]  ? __pfx___mutex_lock+0x10/0x10
[ 1079.820554][T22288]  ? __pfx_vhost_dev_ioctl+0x10/0x10
[ 1079.820587][T22288]  vhost_vsock_dev_ioctl+0x23a/0xe60
[ 1079.820615][T22288]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1079.820639][T22288]  ? __fget_files+0x3a0/0x420
[ 1079.820663][T22288]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 1079.820687][T22288]  __ia32_compat_sys_ioctl+0x5ea/0x950
[ 1079.820712][T22288]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1079.820738][T22288]  ? __fget_files+0x3a0/0x420
[ 1079.820762][T22288]  ? fput+0xa0/0xd0
[ 1079.820782][T22288]  ? ksys_write+0x242/0x270
[ 1079.820806][T22288]  ? __pfx_ksys_write+0x10/0x10
[ 1079.820853][T22288]  __do_fast_syscall_32+0x1d2/0x540
[ 1079.820872][T22288]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1079.820888][T22288]  ? do_fast_syscall_32+0x33/0x70
[ 1079.820906][T22288]  ? asm_int80_emulation+0x1a/0x20
[ 1079.820920][T22288]  ? do_int80_emulation+0x20e/0x400
[ 1079.820943][T22288]  do_fast_syscall_32+0x33/0x70
[ 1079.820962][T22288]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1079.820982][T22288] RIP: 0023:0xf741d539
[ 1079.820999][T22288] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1079.821014][T22288] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1079.821033][T22288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af03
[ 1079.821045][T22288] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000
[ 1079.821055][T22288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1079.821062][T22288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1079.821071][T22288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1079.821097][T22288]  </TASK>
[ 1080.071373][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1080.695256][T22315] netlink: 'syz.0.5212': attribute type 20 has an invalid length.
[ 1080.703290][T22315] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1080.711803][T22315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1080.719077][T22315] IPv6: NLM_F_CREATE should be set when creating new route
[ 1081.076396][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1081.986355][ T5876] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1082.116378][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1082.168477][ T5876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1082.182580][T22345] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5222'.
[ 1082.198416][ T5876] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1082.249952][ T5876] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1082.303648][ T5876] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1082.335028][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1082.353769][ T5876] usb 6-1: Product: syz
[ 1082.368236][ T5876] usb 6-1: Manufacturer: syz
[ 1082.379760][ T5876] usb 6-1: SerialNumber: syz
[ 1082.443981][T22353] FAULT_INJECTION: forcing a failure.
[ 1082.443981][T22353] name failslab, interval 1, probability 0, space 0, times 0
[ 1082.474650][T22353] CPU: 0 UID: 0 PID: 22353 Comm: syz.3.5225 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1082.474675][T22353] Tainted: [L]=SOFTLOCKUP
[ 1082.474681][T22353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1082.474691][T22353] Call Trace:
[ 1082.474698][T22353]  <TASK>
[ 1082.474716][T22353]  dump_stack_lvl+0xe8/0x150
[ 1082.474740][T22353]  should_fail_ex+0x412/0x560
[ 1082.474763][T22353]  should_failslab+0xa8/0x100
[ 1082.474782][T22353]  __kmalloc_noprof+0xde/0x7e0
[ 1082.474797][T22353]  ? tomoyo_encode+0x28b/0x550
[ 1082.474821][T22353]  tomoyo_encode+0x28b/0x550
[ 1082.474846][T22353]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1082.474877][T22353]  tomoyo_check_open_permission+0x229/0x470
[ 1082.474895][T22353]  ? tomoyo_check_open_permission+0x1d3/0x470
[ 1082.474912][T22353]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1082.474969][T22353]  security_file_open+0xa9/0x240
[ 1082.474988][T22353]  do_dentry_open+0x34e/0x1420
[ 1082.475025][T22353]  vfs_open+0x3b/0x340
[ 1082.475041][T22353]  ? path_openat+0x346e/0x3e20
[ 1082.475066][T22353]  path_openat+0x3486/0x3e20
[ 1082.475114][T22353]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[ 1082.475137][T22353]  ? getname_flags+0xb7/0x540
[ 1082.475155][T22353]  ? __pfx_path_openat+0x10/0x10
[ 1082.475180][T22353]  ? __lock_acquire+0x6b5/0x2cf0
[ 1082.475214][T22353]  do_filp_open+0x22d/0x490
[ 1082.475238][T22353]  ? __pfx_do_filp_open+0x10/0x10
[ 1082.475269][T22353]  ? __pfx_page_put_link+0x10/0x10
[ 1082.475295][T22353]  ? _raw_spin_unlock+0x28/0x50
[ 1082.475316][T22353]  ? alloc_fd+0x64b/0x6c0
[ 1082.475344][T22353]  do_sys_openat2+0x12f/0x220
[ 1082.475366][T22353]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1082.475389][T22353]  ? ksys_write+0x242/0x270
[ 1082.475416][T22353]  __ia32_compat_sys_openat+0x131/0x160
[ 1082.475441][T22353]  __do_fast_syscall_32+0x1d2/0x540
[ 1082.475460][T22353]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1082.475474][T22353]  ? do_fast_syscall_32+0x33/0x70
[ 1082.475490][T22353]  ? asm_int80_emulation+0x1a/0x20
[ 1082.475504][T22353]  ? do_int80_emulation+0x20e/0x400
[ 1082.475526][T22353]  do_fast_syscall_32+0x33/0x70
[ 1082.475545][T22353]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1082.475564][T22353] RIP: 0023:0xf742d539
[ 1082.475580][T22353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1082.475595][T22353] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[ 1082.475614][T22353] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001540
[ 1082.475626][T22353] RDX: 0000000000000400 RSI: 0000000000000128 RDI: 0000000000000000
[ 1082.475638][T22353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1082.475647][T22353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1082.475658][T22353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1082.475685][T22353]  </TASK>
[ 1082.475915][T22353] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1082.627270][ T5876] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1082.842181][ T5876] usb 6-1: USB disconnect, device number 80
[ 1082.861433][ T5876] usblp0: removed
[ 1083.069109][T22369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5228'.
[ 1083.156544][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1083.255964][T22375] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5232'.
[ 1083.302574][T22375] vlan2: entered promiscuous mode
[ 1083.308130][T22375] bond0: entered promiscuous mode
[ 1083.318373][T22375] bond_slave_0: entered promiscuous mode
[ 1083.331692][T22375] bond_slave_1: entered promiscuous mode
[ 1083.525166][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5237'.
[ 1083.556403][ T5883] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1083.710580][ T5883] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[ 1083.732468][ T5883] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[ 1083.762562][ T5883] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1083.777574][ T5883] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[ 1083.788457][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.798055][ T5883] usb 5-1: Product: syz
[ 1083.802374][ T5883] usb 5-1: Manufacturer: syz
[ 1083.818669][ T5883] usb 5-1: SerialNumber: syz
[ 1083.835868][T22381] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1083.849852][T22381] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1083.986962][ T5876] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1084.181298][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1084.194792][ T5876] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1084.206394][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1084.215560][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.231220][ T5876] usb 6-1: config 0 descriptor??
[ 1084.260576][ T5883] rtl8150 5-1:1.0: couldn't reset the device
[ 1084.268179][ T5883] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[ 1084.290981][ T5883] usb 5-1: USB disconnect, device number 55
[ 1084.455028][ T5876] usbhid 6-1:0.0: can't add hid device: -71
[ 1084.467967][ T5876] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1084.483956][ T5876] usb 6-1: USB disconnect, device number 81
[ 1084.826353][ T5876] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1084.996429][ T5876] usb 6-1: Using ep0 maxpacket: 16
[ 1085.008042][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1085.029330][ T5876] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[ 1085.038656][T13903] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1085.056414][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.088400][ T5876] usb 6-1: config 0 descriptor??
[ 1085.233298][T13903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1085.236308][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1085.246300][T13903] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1085.268323][T13903] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1085.285887][T13903] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1085.295498][T13903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1085.304860][T13903] usb 5-1: Product: syz
[ 1085.314699][T13903] usb 5-1: Manufacturer: syz
[ 1085.322282][ T5876] kye 0003:0458:5016.004E: control desc unexpectedly large
[ 1085.330429][T13903] usb 5-1: SerialNumber: syz
[ 1085.347739][ T5876] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.004E/input/input77
[ 1085.396448][  T937] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1085.449262][ T5876] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.004E/input/input78
[ 1085.534910][ T5876] kye 0003:0458:5016.004E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0
[ 1085.579923][  T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1085.598062][  T937] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1085.618237][T13903] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1085.634835][  T937] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1085.657481][  T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.668424][  T937] usb 4-1: Product: syz
[ 1085.672616][  T937] usb 4-1: Manufacturer: syz
[ 1085.677730][  T937] usb 4-1: SerialNumber: syz
[ 1085.702021][  T937] usb 4-1: config 0 descriptor??
[ 1085.714329][  T937] adutux 4-1:0.0: interrupt endpoints not found
[ 1085.812411][  T937] usb 5-1: USB disconnect, device number 56
[ 1085.825053][  T937] usblp1: removed
[ 1086.022112][T15270] usb 6-1: USB disconnect, device number 82
[ 1086.276386][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1086.297301][T22439] binder: BINDER_SET_CONTEXT_MGR already set
[ 1086.305338][T22439] binder: 22438:22439 ioctl 4018620d 80000240 returned -16
[ 1086.616351][T15270] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[ 1086.801332][T15270] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1086.811068][T15270] usb 2-1: config 0 has no interface number 0
[ 1086.817799][T15270] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1086.827174][T15270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.828794][T22450] program syz.5.5258 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1086.863772][T15270] usb 2-1: config 0 descriptor??
[ 1086.903341][T15270] usb 2-1: selecting invalid altsetting 1
[ 1086.914131][T15270] dvb_ttusb_budget: ttusb_init_controller: error
[ 1086.939240][T15270] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1087.079241][T15270] DVB: Unable to find symbol cx22700_attach()
[ 1087.118604][T22455] FAULT_INJECTION: forcing a failure.
[ 1087.118604][T22455] name failslab, interval 1, probability 0, space 0, times 0
[ 1087.131683][T22455] CPU: 0 UID: 0 PID: 22455 Comm: syz.5.5259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1087.131711][T22455] Tainted: [L]=SOFTLOCKUP
[ 1087.131718][T22455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1087.131728][T22455] Call Trace:
[ 1087.131735][T22455]  <TASK>
[ 1087.131742][T22455]  dump_stack_lvl+0xe8/0x150
[ 1087.131769][T22455]  should_fail_ex+0x412/0x560
[ 1087.131796][T22455]  should_failslab+0xa8/0x100
[ 1087.131818][T22455]  __kmalloc_noprof+0xde/0x7e0
[ 1087.131835][T22455]  ? kfree+0x4d/0x650
[ 1087.131855][T22455]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1087.131883][T22455]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1087.131905][T22455]  ? tomoyo_domain+0xd7/0x130
[ 1087.131928][T22455]  ? tomoyo_path_number_perm+0x219/0x630
[ 1087.131945][T22455]  tomoyo_path_number_perm+0x246/0x630
[ 1087.131964][T22455]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1087.131980][T22455]  ? __lock_acquire+0x6b5/0x2cf0
[ 1087.132037][T22455]  ? __fget_files+0x2a/0x420
[ 1087.132060][T22455]  ? __fget_files+0x3a0/0x420
[ 1087.132077][T22455]  ? __fget_files+0x2a/0x420
[ 1087.132097][T22455]  security_file_ioctl_compat+0xc3/0x2a0
[ 1087.132119][T22455]  __ia32_compat_sys_ioctl+0x139/0x950
[ 1087.132144][T22455]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1087.132170][T22455]  ? __fget_files+0x3a0/0x420
[ 1087.132196][T22455]  ? fput+0xa0/0xd0
[ 1087.132216][T22455]  ? ksys_write+0x242/0x270
[ 1087.132242][T22455]  ? __pfx_ksys_write+0x10/0x10
[ 1087.132279][T22455]  __do_fast_syscall_32+0x1d2/0x540
[ 1087.132299][T22455]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1087.132316][T22455]  ? do_fast_syscall_32+0x33/0x70
[ 1087.132334][T22455]  ? asm_int80_emulation+0x1a/0x20
[ 1087.132351][T22455]  ? do_int80_emulation+0x20e/0x400
[ 1087.132373][T22455]  do_fast_syscall_32+0x33/0x70
[ 1087.132393][T22455]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1087.132414][T22455] RIP: 0023:0xf746d539
[ 1087.132430][T22455] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1087.132445][T22455] RSP: 002b:00000000f545450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1087.132466][T22455] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000008933
[ 1087.132479][T22455] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[ 1087.132490][T22455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1087.132501][T22455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1087.132512][T22455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1087.132540][T22455]  </TASK>
[ 1087.389595][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1087.431662][T15270] DVB: Unable to find symbol tda10046_attach()
[ 1087.438249][T22455] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1087.444992][T15270] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1087.457346][T15270] usb 2-1: USB disconnect, device number 62
[ 1087.918247][T22471] FAULT_INJECTION: forcing a failure.
[ 1087.918247][T22471] name failslab, interval 1, probability 0, space 0, times 0
[ 1087.942968][T22471] CPU: 0 UID: 0 PID: 22471 Comm: syz.5.5265 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1087.942998][T22471] Tainted: [L]=SOFTLOCKUP
[ 1087.943004][T22471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1087.943011][T22471] Call Trace:
[ 1087.943016][T22471]  <TASK>
[ 1087.943021][T22471]  dump_stack_lvl+0xe8/0x150
[ 1087.943040][T22471]  should_fail_ex+0x412/0x560
[ 1087.943056][T22471]  should_failslab+0xa8/0x100
[ 1087.943069][T22471]  __kmalloc_noprof+0xde/0x7e0
[ 1087.943086][T22471]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1087.943103][T22471]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1087.943121][T22471]  genl_family_rcv_msg_doit+0xd9/0x330
[ 1087.943137][T22471]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1087.943154][T22471]  ? apparmor_capable+0x137/0x1a0
[ 1087.943171][T22471]  ? bpf_lsm_capable+0x9/0x20
[ 1087.943185][T22471]  ? security_capable+0x7e/0x2c0
[ 1087.943199][T22471]  genl_rcv_msg+0x61c/0x7a0
[ 1087.943216][T22471]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1087.943228][T22471]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1087.943242][T22471]  ? __pfx_nl80211_modify_link_station+0x10/0x10
[ 1087.943255][T22471]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1087.943271][T22471]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1087.943287][T22471]  netlink_rcv_skb+0x232/0x4b0
[ 1087.943298][T22471]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1087.943315][T22471]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1087.943329][T22471]  ? genl_rcv+0x19/0x40
[ 1087.943361][T22471]  ? down_read+0x272/0x2e0
[ 1087.943378][T22471]  ? genl_rcv+0xd/0x40
[ 1087.943398][T22471]  genl_rcv+0x28/0x40
[ 1087.943416][T22471]  netlink_unicast+0x80f/0x9b0
[ 1087.943448][T22471]  ? __pfx_netlink_unicast+0x10/0x10
[ 1087.943470][T22471]  ? __alloc_skb+0x193/0x390
[ 1087.943490][T22471]  ? netlink_sendmsg+0x650/0xb40
[ 1087.943504][T22471]  ? skb_put+0x11b/0x210
[ 1087.943525][T22471]  netlink_sendmsg+0x813/0xb40
[ 1087.943551][T22471]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1087.943572][T22471]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1087.943593][T22471]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1087.943613][T22471]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1087.943630][T22471]  ____sys_sendmsg+0xa68/0xad0
[ 1087.943659][T22471]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1087.943685][T22471]  ? kstrtoull+0x12f/0x1d0
[ 1087.943711][T22471]  ___sys_sendmsg+0x2a5/0x360
[ 1087.943731][T22471]  ? __lock_acquire+0x6b5/0x2cf0
[ 1087.943761][T22471]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1087.943783][T22471]  ? get_pid_task+0x20/0x1f0
[ 1087.943802][T22471]  ? get_pid_task+0x20/0x1f0
[ 1087.943817][T22471]  ? get_pid_task+0x20/0x1f0
[ 1087.943858][T22471]  ? __fget_files+0x2a/0x420
[ 1087.943875][T22471]  ? __fget_files+0x3a0/0x420
[ 1087.943902][T22471]  __sys_sendmsg+0x183/0x260
[ 1087.943926][T22471]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1087.943957][T22471]  ? __pfx_ksys_write+0x10/0x10
[ 1087.943987][T22471]  __do_fast_syscall_32+0x1d2/0x540
[ 1087.944007][T22471]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1087.944022][T22471]  ? do_fast_syscall_32+0x33/0x70
[ 1087.944040][T22471]  ? asm_int80_emulation+0x1a/0x20
[ 1087.944055][T22471]  ? do_int80_emulation+0x20e/0x400
[ 1087.944086][T22471]  do_fast_syscall_32+0x33/0x70
[ 1087.944105][T22471]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1087.944125][T22471] RIP: 0023:0xf746d539
[ 1087.944141][T22471] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1087.944156][T22471] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1087.944176][T22471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[ 1087.944189][T22471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1087.944199][T22471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1087.944209][T22471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1087.944220][T22471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1087.944247][T22471]  </TASK>
[ 1088.436338][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1088.531540][T13903] usb 4-1: USB disconnect, device number 39
[ 1088.556475][  T937] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1088.609651][T22477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5264'.
[ 1088.731481][  T937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1088.741740][  T937] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1088.751717][  T937] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1088.767571][  T937] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1088.777497][  T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1088.785574][  T937] usb 2-1: Product: syz
[ 1088.792186][  T937] usb 2-1: Manufacturer: syz
[ 1088.796900][  T937] usb 2-1: SerialNumber: syz
[ 1088.906536][T13903] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1089.013797][  T937] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1089.056347][T13903] usb 4-1: Using ep0 maxpacket: 32
[ 1089.065129][T13903] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1089.074465][T13903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.083086][T13903] usb 4-1: Product: syz
[ 1089.087325][T13903] usb 4-1: Manufacturer: syz
[ 1089.091925][T13903] usb 4-1: SerialNumber: syz
[ 1089.098154][T13903] usb 4-1: config 0 descriptor??
[ 1089.107246][T13903] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1089.114863][T13903] dvb-usb: bulk message failed: -22 (2/0)
[ 1089.123933][T13903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1089.133740][T13903] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1089.142019][ T5876] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1089.159216][T13903] usb 4-1: media controller created
[ 1089.179143][T13903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1089.207058][T13903] usb 4-1: selecting invalid altsetting 7
[ 1089.212833][T13903] cxusb: set interface failed
[ 1089.220684][T13903] dvb-usb: bulk message failed: -22 (1/0)
[ 1089.220932][   T10] usb 2-1: USB disconnect, device number 63
[ 1089.236670][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5270'.
[ 1089.257893][   T10] usblp0: removed
[ 1089.275721][T13903] DVB: Unable to find symbol lgdt330x_attach()
[ 1089.282983][T13903] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1089.336878][ T5876] usb 5-1: Using ep0 maxpacket: 16
[ 1089.357885][ T5876] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[ 1089.368293][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.385658][T22489] FAULT_INJECTION: forcing a failure.
[ 1089.385658][T22489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1089.402092][ T5876] usb 5-1: config 0 descriptor??
[ 1089.403819][T22489] CPU: 0 UID: 0 PID: 22489 Comm: syz.5.5272 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1089.403846][T22489] Tainted: [L]=SOFTLOCKUP
[ 1089.403853][T22489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1089.403864][T22489] Call Trace:
[ 1089.403872][T22489]  <TASK>
[ 1089.403880][T22489]  dump_stack_lvl+0xe8/0x150
[ 1089.403906][T22489]  should_fail_ex+0x412/0x560
[ 1089.403931][T22489]  _copy_to_iter+0x589/0x17d0
[ 1089.403965][T22489]  ? __pfx__copy_to_iter+0x10/0x10
[ 1089.403986][T22489]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1089.404010][T22489]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1089.404027][T22489]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1089.404050][T22489]  ? __skb_try_recv_datagram+0x3d4/0x4d0
[ 1089.404083][T22489]  __skb_datagram_iter+0xf8/0x980
[ 1089.404106][T22489]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 1089.404135][T22489]  skb_copy_datagram_iter+0xb5/0x210
[ 1089.404160][T22489]  netlink_recvmsg+0x2c3/0xa50
[ 1089.404187][T22489]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1089.404203][T22489]  ? __kmalloc_noprof+0x42d/0x7e0
[ 1089.404223][T22489]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1089.404250][T22489]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1089.404267][T22489]  ? security_socket_recvmsg+0x7e/0x2c0
[ 1089.404290][T22489]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1089.404309][T22489]  sock_recvmsg+0x22c/0x270
[ 1089.404330][T22489]  ____sys_recvmsg+0x1e6/0x4a0
[ 1089.404358][T22489]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1089.404378][T22489]  ? get_compat_msghdr+0x34b/0x4c0
[ 1089.404407][T22489]  ? __lock_acquire+0x6b5/0x2cf0
[ 1089.404439][T22489]  ___sys_recvmsg+0x215/0x590
[ 1089.404459][T22489]  ? ktime_get_ts64+0xa9/0x3f0
[ 1089.404482][T22489]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1089.404508][T22489]  ? __fget_files+0x2a/0x420
[ 1089.404541][T22489]  ? __fget_files+0x3a0/0x420
[ 1089.404567][T22489]  do_recvmmsg+0x3a5/0x800
[ 1089.404595][T22489]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1089.404627][T22489]  ? _copy_from_user+0x94/0xb0
[ 1089.404663][T22489]  __sys_recvmmsg+0x12f/0x290
[ 1089.404686][T22489]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 1089.404705][T22489]  ? ksys_write+0x242/0x270
[ 1089.404729][T22489]  ? __pfx_ksys_write+0x10/0x10
[ 1089.404752][T22489]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 1089.404776][T22489]  __do_fast_syscall_32+0x1d2/0x540
[ 1089.404795][T22489]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1089.404810][T22489]  ? do_fast_syscall_32+0x33/0x70
[ 1089.404827][T22489]  ? asm_int80_emulation+0x1a/0x20
[ 1089.404842][T22489]  ? do_int80_emulation+0x20e/0x400
[ 1089.404863][T22489]  do_fast_syscall_32+0x33/0x70
[ 1089.404881][T22489]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1089.404901][T22489] RIP: 0023:0xf746d539
[ 1089.404917][T22489] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1089.404930][T22489] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 1089.404949][T22489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0
[ 1089.404961][T22489] RDX: 00000000000003b4 RSI: 0000000000002000 RDI: 0000000080003700
[ 1089.404971][T22489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1089.404982][T22489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1089.404992][T22489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1089.405016][T22489]  </TASK>
[ 1089.486305][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1089.488543][T13903] rc_core: IR keymap rc-dvico-portable not found
[ 1089.757325][T13903] Registered IR keymap rc-empty
[ 1089.764607][ T5876] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[ 1089.773866][T13903] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[ 1089.786929][T13903] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input79
[ 1089.802660][T13903] dvb-usb: schedule remote query interval to 100 msecs.
[ 1089.810081][T13903] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1089.823743][T13903] usb 4-1: USB disconnect, device number 40
[ 1089.928735][T13903] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1089.975269][ T5876] usb 5-1: Detected FT232B
[ 1090.078817][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5277'.
[ 1090.182906][T22481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1090.195303][T22481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1090.209679][ T5876] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1090.225159][ T5876] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1090.244985][ T5876] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1090.274959][ T5876] usb 5-1: USB disconnect, device number 57
[ 1090.288502][ T5876] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1090.326481][   T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1090.329209][ T5876] ftdi_sio 5-1:0.0: device disconnected
[ 1090.465033][T22518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5283'.
[ 1090.498655][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1090.509549][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1090.522663][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1090.534151][   T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1090.543764][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.552051][   T10] usb 6-1: Product: syz
[ 1090.558357][   T10] usb 6-1: Manufacturer: syz
[ 1090.562960][   T10] usb 6-1: SerialNumber: syz
[ 1090.573866][T22522] FAULT_INJECTION: forcing a failure.
[ 1090.573866][T22522] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1090.575962][   T10] usb 6-1: config 0 descriptor??
[ 1090.587515][T22522] CPU: 1 UID: 0 PID: 22522 Comm: syz.1.5285 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1090.587542][T22522] Tainted: [L]=SOFTLOCKUP
[ 1090.587549][T22522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1090.587560][T22522] Call Trace:
[ 1090.587568][T22522]  <TASK>
[ 1090.587576][T22522]  dump_stack_lvl+0xe8/0x150
[ 1090.587602][T22522]  should_fail_ex+0x412/0x560
[ 1090.587627][T22522]  _copy_to_user+0x31/0xb0
[ 1090.587653][T22522]  simple_read_from_buffer+0xe1/0x170
[ 1090.587676][T22522]  proc_fail_nth_read+0x1bb/0x230
[ 1090.587702][T22522]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1090.587727][T22522]  ? rw_verify_area+0x2a6/0x4d0
[ 1090.587748][T22522]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1090.587772][T22522]  vfs_read+0x20c/0xa70
[ 1090.587792][T22522]  ? fdget_pos+0x246/0x320
[ 1090.587814][T22522]  ? __pfx___mutex_lock+0x10/0x10
[ 1090.587834][T22522]  ? __pfx_vfs_read+0x10/0x10
[ 1090.587856][T22522]  ? __fget_files+0x2a/0x420
[ 1090.587878][T22522]  ? __fget_files+0x3a0/0x420
[ 1090.587895][T22522]  ? __fget_files+0x2a/0x420
[ 1090.587920][T22522]  ksys_read+0x150/0x270
[ 1090.587944][T22522]  ? __pfx_ksys_read+0x10/0x10
[ 1090.587969][T22522]  ? asm_int80_emulation+0x1a/0x20
[ 1090.587989][T22522]  ? asm_int80_emulation+0x1a/0x20
[ 1090.588005][T22522]  do_int80_emulation+0x111/0x400
[ 1090.588025][T22522]  ? clear_bhb_loop+0x60/0xb0
[ 1090.588040][T22522]  ? clear_bhb_loop+0x60/0xb0
[ 1090.588060][T22522]  asm_int80_emulation+0x1a/0x20
[ 1090.588076][T22522] RIP: 0023:0xf718572b
[ 1090.588093][T22522] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1090.588115][T22522] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1090.588134][T22522] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54465d0
[ 1090.588146][T22522] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 1090.588156][T22522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1090.588166][T22522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1090.588177][T22522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1090.588203][T22522]  </TASK>
[ 1090.756421][ T5876] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1090.879003][   T10] adutux 6-1:0.0: interrupt endpoints not found
[ 1091.015160][ T5876] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1091.035511][ T5876] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 54831, setting to 1024
[ 1091.059519][ T5876] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1091.071722][ T5876] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1091.081756][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.117882][T22516] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1091.132211][ T5904] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1091.154136][ T5876] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1091.191008][T22542] FAULT_INJECTION: forcing a failure.
[ 1091.191008][T22542] name failslab, interval 1, probability 0, space 0, times 0
[ 1091.203962][T22542] CPU: 0 UID: 0 PID: 22542 Comm: syz.0.5294 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1091.203989][T22542] Tainted: [L]=SOFTLOCKUP
[ 1091.203995][T22542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1091.204006][T22542] Call Trace:
[ 1091.204013][T22542]  <TASK>
[ 1091.204020][T22542]  dump_stack_lvl+0xe8/0x150
[ 1091.204056][T22542]  should_fail_ex+0x412/0x560
[ 1091.204079][T22542]  should_failslab+0xa8/0x100
[ 1091.204101][T22542]  __kmalloc_noprof+0xde/0x7e0
[ 1091.204119][T22542]  ? kfree+0x4d/0x650
[ 1091.204138][T22542]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1091.204164][T22542]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1091.204188][T22542]  ? tomoyo_domain+0xd7/0x130
[ 1091.204211][T22542]  ? tomoyo_path_number_perm+0x219/0x630
[ 1091.204228][T22542]  tomoyo_path_number_perm+0x246/0x630
[ 1091.204250][T22542]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1091.204268][T22542]  ? __lock_acquire+0x6b5/0x2cf0
[ 1091.204325][T22542]  ? __fget_files+0x2a/0x420
[ 1091.204344][T22542]  ? __fget_files+0x3a0/0x420
[ 1091.204361][T22542]  ? __fget_files+0x2a/0x420
[ 1091.204382][T22542]  security_file_ioctl_compat+0xc3/0x2a0
[ 1091.204404][T22542]  __ia32_compat_sys_ioctl+0x139/0x950
[ 1091.204430][T22542]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1091.204455][T22542]  ? __fget_files+0x3a0/0x420
[ 1091.204478][T22542]  ? fput+0xa0/0xd0
[ 1091.204497][T22542]  ? ksys_write+0x242/0x270
[ 1091.204521][T22542]  ? __pfx_ksys_write+0x10/0x10
[ 1091.204551][T22542]  __do_fast_syscall_32+0x1d2/0x540
[ 1091.204571][T22542]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1091.204587][T22542]  ? do_fast_syscall_32+0x33/0x70
[ 1091.204604][T22542]  ? asm_int80_emulation+0x1a/0x20
[ 1091.204620][T22542]  ? do_int80_emulation+0x20e/0x400
[ 1091.204643][T22542]  do_fast_syscall_32+0x33/0x70
[ 1091.204662][T22542]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1091.204681][T22542] RIP: 0023:0xf73cd539
[ 1091.204696][T22542] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1091.204709][T22542] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1091.204728][T22542] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80
[ 1091.204740][T22542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1091.204751][T22542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1091.204761][T22542] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1091.204769][T22542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1091.204795][T22542]  </TASK>
[ 1091.204804][T22542] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1091.287205][ T5904] usb 5-1: Using ep0 maxpacket: 32
[ 1091.482872][ T5876] usb 4-1: USB disconnect, device number 41
[ 1091.496030][ T5904] usb 5-1: config 211 has an invalid interface number: 98 but max is 0
[ 1091.504568][ T5904] usb 5-1: config 211 has no interface number 0
[ 1091.519398][ T5904] usb 5-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8
[ 1091.554207][ T5904] usb 5-1: config 211 interface 98 has no altsetting 0
[ 1091.566294][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1091.595620][ T5904] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a
[ 1091.605040][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.620954][ T5904] usb 5-1: Product: syz
[ 1091.632634][ T5904] usb 5-1: Manufacturer: syz
[ 1091.641949][ T5904] usb 5-1: SerialNumber: syz
[ 1091.661574][T22529] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1091.916389][ T5876] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1092.066620][ T5876] usb 4-1: Using ep0 maxpacket: 8
[ 1092.077074][ T5876] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1092.106474][ T5876] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1092.127553][ T5876] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1092.145590][T22529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1092.164971][T22529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1092.177680][ T5876] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1092.191458][ T5876] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1092.202746][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1092.264809][T22529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1092.295627][T22529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1092.366036][ T5904] mct_u232 5-1:211.98: MCT U232 converter detected
[ 1092.378214][ T5904] mct_u232 ttyUSB0: expected endpoint missing
[ 1092.417241][ T5904] usb 5-1: USB disconnect, device number 58
[ 1092.449197][ T5904] mct_u232 5-1:211.98: device disconnected
[ 1092.462608][ T5876] usb 4-1: GET_CAPABILITIES returned 0
[ 1092.500057][ T5876] usbtmc 4-1:16.0: can't read capabilities
[ 1092.571801][T22556] netlink: 'syz.1.5298': attribute type 10 has an invalid length.
[ 1092.581228][T22556] FAULT_INJECTION: forcing a failure.
[ 1092.581228][T22556] name failslab, interval 1, probability 0, space 0, times 0
[ 1092.594332][T22556] CPU: 1 UID: 0 PID: 22556 Comm: syz.1.5298 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1092.594361][T22556] Tainted: [L]=SOFTLOCKUP
[ 1092.594368][T22556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1092.594379][T22556] Call Trace:
[ 1092.594387][T22556]  <TASK>
[ 1092.594395][T22556]  dump_stack_lvl+0xe8/0x150
[ 1092.594422][T22556]  should_fail_ex+0x412/0x560
[ 1092.594447][T22556]  should_failslab+0xa8/0x100
[ 1092.594465][T22556]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[ 1092.594491][T22556]  ? __alloc_skb+0x1d7/0x390
[ 1092.594508][T22556]  ? __local_bh_enable_ip+0xd0/0x130
[ 1092.594524][T22556]  ? __alloc_skb+0x193/0x390
[ 1092.594543][T22556]  __alloc_skb+0x1d7/0x390
[ 1092.594566][T22556]  rtmsg_ifinfo_build_skb+0x84/0x260
[ 1092.594590][T22556]  rtmsg_ifinfo+0x8c/0x1a0
[ 1092.594613][T22556]  __dev_notify_flags+0xf2/0x310
[ 1092.594637][T22556]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1092.594656][T22556]  ? __dev_change_flags+0x4c6/0x690
[ 1092.594690][T22556]  ? __pfx___dev_change_flags+0x10/0x10
[ 1092.594709][T22556]  ? __irq_work_queue_local+0x1f2/0x540
[ 1092.594730][T22556]  ? __pfx___irq_work_queue_local+0x10/0x10
[ 1092.594747][T22556]  ? console_unlock+0x150/0x1c0
[ 1092.594764][T22556]  ? preempt_schedule_thunk+0x16/0x30
[ 1092.594790][T22556]  netif_change_flags+0xe8/0x1a0
[ 1092.594816][T22556]  do_setlink+0xf82/0x4590
[ 1092.594835][T22556]  ? __wake_up_klogd+0xe6/0x120
[ 1092.594859][T22556]  ? __pfx_vprintk_emit+0x10/0x10
[ 1092.594880][T22556]  ? __pfx_do_setlink+0x10/0x10
[ 1092.594912][T22556]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1092.594937][T22556]  ? ___ratelimit+0x58c/0x8d0
[ 1092.594959][T22556]  ? __mutex_trylock_common+0x158/0x260
[ 1092.594980][T22556]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1092.595002][T22556]  ? rcu_is_watching+0x15/0xb0
[ 1092.595020][T22556]  ? trace_contention_end+0x39/0x100
[ 1092.595037][T22556]  ? __mutex_lock+0x319/0x1300
[ 1092.595055][T22556]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1092.595086][T22556]  ? rtnl_newlink+0x8a1/0x1be0
[ 1092.595110][T22556]  ? __pfx___mutex_lock+0x10/0x10
[ 1092.595138][T22556]  ? ns_capable+0x89/0xe0
[ 1092.595166][T22556]  rtnl_newlink+0x15a9/0x1be0
[ 1092.595195][T22556]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1092.595217][T22556]  ? __lock_acquire+0x6b5/0x2cf0
[ 1092.595244][T22556]  ? __lock_acquire+0x6b5/0x2cf0
[ 1092.595267][T22556]  ? __lock_acquire+0x6b5/0x2cf0
[ 1092.595299][T22556]  ? unwind_next_frame+0xa5/0x23c0
[ 1092.595323][T22556]  ? unwind_next_frame+0xa5/0x23c0
[ 1092.595344][T22556]  ? is_bpf_text_address+0x26/0x2b0
[ 1092.595373][T22556]  ? __lock_acquire+0x6b5/0x2cf0
[ 1092.595396][T22556]  ? is_bpf_text_address+0x292/0x2b0
[ 1092.595414][T22556]  ? is_bpf_text_address+0x26/0x2b0
[ 1092.595435][T22556]  ? kernel_text_address+0xa5/0xe0
[ 1092.595455][T22556]  ? __kernel_text_address+0xd/0x30
[ 1092.595474][T22556]  ? unwind_get_return_address+0x4d/0x90
[ 1092.595499][T22556]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1092.595531][T22556]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1092.595549][T22556]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1092.595571][T22556]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1092.595590][T22556]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1092.595608][T22556]  ? __lock_acquire+0x6b5/0x2cf0
[ 1092.595642][T22556]  netlink_rcv_skb+0x232/0x4b0
[ 1092.595662][T22556]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1092.595689][T22556]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1092.595717][T22556]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1092.595742][T22556]  netlink_unicast+0x80f/0x9b0
[ 1092.595774][T22556]  ? __pfx_netlink_unicast+0x10/0x10
[ 1092.595796][T22556]  ? __alloc_skb+0x193/0x390
[ 1092.595815][T22556]  ? netlink_sendmsg+0x650/0xb40
[ 1092.595830][T22556]  ? skb_put+0x11b/0x210
[ 1092.595854][T22556]  netlink_sendmsg+0x813/0xb40
[ 1092.595881][T22556]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1092.595902][T22556]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1092.595923][T22556]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1092.595943][T22556]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1092.595959][T22556]  ____sys_sendmsg+0xa68/0xad0
[ 1092.595990][T22556]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1092.596015][T22556]  ? kstrtoull+0x12f/0x1d0
[ 1092.596041][T22556]  ___sys_sendmsg+0x2a5/0x360
[ 1092.596061][T22556]  ? __lock_acquire+0x6b5/0x2cf0
[ 1092.596085][T22556]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1092.596108][T22556]  ? get_pid_task+0x20/0x1f0
[ 1092.596125][T22556]  ? get_pid_task+0x20/0x1f0
[ 1092.596140][T22556]  ? get_pid_task+0x20/0x1f0
[ 1092.596182][T22556]  ? __fget_files+0x2a/0x420
[ 1092.596200][T22556]  ? __fget_files+0x3a0/0x420
[ 1092.596231][T22556]  __sys_sendmsg+0x183/0x260
[ 1092.596254][T22556]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1092.596283][T22556]  ? __pfx_ksys_write+0x10/0x10
[ 1092.596314][T22556]  __do_fast_syscall_32+0x1d2/0x540
[ 1092.596332][T22556]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1092.596347][T22556]  ? do_fast_syscall_32+0x33/0x70
[ 1092.596364][T22556]  ? asm_int80_emulation+0x1a/0x20
[ 1092.596380][T22556]  ? do_int80_emulation+0x20e/0x400
[ 1092.596401][T22556]  do_fast_syscall_32+0x33/0x70
[ 1092.596419][T22556]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1092.596439][T22556] RIP: 0023:0xf741d539
[ 1092.596455][T22556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1092.596469][T22556] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1092.596487][T22556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[ 1092.596499][T22556] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000000
[ 1092.596509][T22556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1092.596520][T22556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1092.596531][T22556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1092.596557][T22556]  </TASK>
[ 1092.606611][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1092.619646][T22556] batman_adv: batadv0: Adding interface: team0
[ 1093.087791][T22550] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5296'.
[ 1093.181667][T13903] usb 6-1: USB disconnect, device number 83
[ 1093.262338][T22556] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1093.305138][T22556] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1093.419582][T13903] usb 4-1: USB disconnect, device number 42
[ 1093.594573][T22568] fuse: Bad value for 'fd'
[ 1093.636456][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1093.785160][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5306'.
[ 1093.796784][T13903] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1093.936366][ T5904] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1093.960927][T13903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1093.987069][T13903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1094.016828][T13903] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1094.042893][T13903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.069530][T13903] usb 6-1: config 0 descriptor??
[ 1094.086352][ T5904] usb 2-1: Using ep0 maxpacket: 8
[ 1094.101208][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1094.128136][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1094.166715][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1094.188581][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1094.216363][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1094.225568][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.365203][T13903] usbhid 6-1:0.0: can't add hid device: -71
[ 1094.389282][T13903] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1094.440458][T13903] usb 6-1: USB disconnect, device number 84
[ 1094.482148][ T5904] usb 2-1: GET_CAPABILITIES returned 0
[ 1094.507520][ T5904] usbtmc 2-1:16.0: can't read capabilities
[ 1094.677935][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1094.705976][T13903] usb 2-1: USB disconnect, device number 64
[ 1094.916476][ T5904] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1095.076900][ T5904] usb 5-1: Using ep0 maxpacket: 32
[ 1095.084626][ T5904] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[ 1095.093150][ T5904] usb 5-1: config 0 has no interface number 0
[ 1095.101604][ T5904] usb 5-1: too many endpoints for config 0 interface 35 altsetting 0: 226, using maximum allowed: 30
[ 1095.117331][ T5904] usb 5-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 226
[ 1095.140300][ T5904] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 1095.163090][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.172356][T22609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1095.186932][T22609] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1095.196772][ T5904] usb 5-1: Product: syz
[ 1095.200955][ T5904] usb 5-1: Manufacturer: syz
[ 1095.205618][ T5904] usb 5-1: SerialNumber: syz
[ 1095.224998][T22610] netlink: 'syz.3.5317': attribute type 4 has an invalid length.
[ 1095.238821][ T5904] usb 5-1: config 0 descriptor??
[ 1095.244258][T22609] tipc: Enabled bearer <eth:batadv0>, priority 10
[ 1095.269466][T22611] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[ 1095.506808][ T5904] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1095.520570][T22622] binder: 22621:22622 ioctl 80041270 800000c0 returned -22
[ 1095.603286][T22626] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1095.646385][ T5904] usb 4-1: device descriptor read/64, error -71
[ 1095.716293][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1095.856495][T15270] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1095.896406][ T5904] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1096.018383][T15270] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[ 1096.033387][T15270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.044979][T15270] usb 2-1: config 0 descriptor??
[ 1096.056934][T15270] gspca_main: sunplus-2.14.0 probing 055f:c420
[ 1096.057673][ T5904] usb 4-1: device descriptor read/64, error -71
[ 1096.176925][ T5904] usb usb4-port1: attempt power cycle
[ 1096.320380][   T30] audit: type=1400 audit(1769916640.725:1071): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22629 comm="syz.5.5325"
[ 1096.401944][T22631] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5325'.
[ 1096.462815][T22625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5324'.
[ 1096.516870][ T5904] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1096.537118][ T5904] usb 4-1: device descriptor read/8, error -71
[ 1096.579605][T22625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5324'.
[ 1096.594733][T15270] gspca_sunplus: reg_w_riv err -71
[ 1096.600399][T15270] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[ 1096.613356][T15270] usb 2-1: USB disconnect, device number 65
[ 1096.756481][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1096.776372][ T5904] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1096.797680][ T5904] usb 4-1: device descriptor read/8, error -71
[ 1096.907118][ T5904] usb usb4-port1: unable to enumerate USB device
[ 1097.209157][T22644] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5329'.
[ 1097.219641][T22644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1097.227063][T22644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1097.355012][T22652] syzkaller0: entered promiscuous mode
[ 1097.360630][T22652] syzkaller0: entered allmulticast mode
[ 1097.688863][ T5943] usb 5-1: USB disconnect, device number 59
[ 1097.701539][T22659] FAULT_INJECTION: forcing a failure.
[ 1097.701539][T22659] name failslab, interval 1, probability 0, space 0, times 0
[ 1097.719707][T22659] CPU: 1 UID: 0 PID: 22659 Comm: syz.5.5335 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1097.719737][T22659] Tainted: [L]=SOFTLOCKUP
[ 1097.719744][T22659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1097.719756][T22659] Call Trace:
[ 1097.719764][T22659]  <TASK>
[ 1097.719772][T22659]  dump_stack_lvl+0xe8/0x150
[ 1097.719798][T22659]  should_fail_ex+0x412/0x560
[ 1097.719823][T22659]  should_failslab+0xa8/0x100
[ 1097.719842][T22659]  __kmalloc_noprof+0xde/0x7e0
[ 1097.719859][T22659]  ? fib6_info_alloc+0x30/0xf0
[ 1097.719881][T22659]  fib6_info_alloc+0x30/0xf0
[ 1097.719900][T22659]  ip6_route_info_create+0x142/0x860
[ 1097.719919][T22659]  ? inet6_rtm_newroute+0x391/0x19e0
[ 1097.719939][T22659]  inet6_rtm_newroute+0x55b/0x19e0
[ 1097.719961][T22659]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1097.719985][T22659]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1097.720003][T22659]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 1097.720018][T22659]  ? kmem_cache_free+0x195/0x610
[ 1097.720034][T22659]  ? nlmon_xmit+0xb0/0x100
[ 1097.720071][T22659]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1097.720112][T22659]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 1097.720126][T22659]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1097.720149][T22659]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1097.720165][T22659]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1097.720181][T22659]  ? ref_tracker_free+0x693/0x840
[ 1097.720197][T22659]  ? __copy_skb_header+0xa3/0x4a0
[ 1097.720220][T22659]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1097.720246][T22659]  netlink_rcv_skb+0x232/0x4b0
[ 1097.720263][T22659]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1097.720283][T22659]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1097.720317][T22659]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1097.720343][T22659]  netlink_unicast+0x80f/0x9b0
[ 1097.720373][T22659]  ? __pfx_netlink_unicast+0x10/0x10
[ 1097.720395][T22659]  ? __alloc_skb+0x193/0x390
[ 1097.720415][T22659]  ? netlink_sendmsg+0x650/0xb40
[ 1097.720431][T22659]  ? skb_put+0x11b/0x210
[ 1097.720453][T22659]  netlink_sendmsg+0x813/0xb40
[ 1097.720479][T22659]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1097.720500][T22659]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1097.720522][T22659]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1097.720543][T22659]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1097.720560][T22659]  ____sys_sendmsg+0xa68/0xad0
[ 1097.720588][T22659]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1097.720622][T22659]  ___sys_sendmsg+0x2a5/0x360
[ 1097.720643][T22659]  ? __lock_acquire+0x6b5/0x2cf0
[ 1097.720669][T22659]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1097.720690][T22659]  ? kstrtoull+0x12f/0x1d0
[ 1097.720740][T22659]  ? __fget_files+0x2a/0x420
[ 1097.720757][T22659]  ? __fget_files+0x3a0/0x420
[ 1097.720784][T22659]  __sys_sendmmsg+0x2e7/0x4e0
[ 1097.720810][T22659]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1097.720837][T22659]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1097.720872][T22659]  ? ksys_write+0x242/0x270
[ 1097.720896][T22659]  ? __pfx_ksys_write+0x10/0x10
[ 1097.720920][T22659]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1097.720943][T22659]  __do_fast_syscall_32+0x1d2/0x540
[ 1097.720963][T22659]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1097.720979][T22659]  ? do_fast_syscall_32+0x33/0x70
[ 1097.720996][T22659]  ? asm_int80_emulation+0x1a/0x20
[ 1097.721013][T22659]  ? do_int80_emulation+0x20e/0x400
[ 1097.721034][T22659]  do_fast_syscall_32+0x33/0x70
[ 1097.721053][T22659]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1097.721071][T22659] RIP: 0023:0xf746d539
[ 1097.721087][T22659] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1097.721101][T22659] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 1097.721121][T22659] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0
[ 1097.721133][T22659] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000
[ 1097.721144][T22659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1097.721155][T22659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1097.721166][T22659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1097.721190][T22659]  </TASK>
[ 1097.796491][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1097.831831][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5336'.
[ 1098.294100][T22674] FAULT_INJECTION: forcing a failure.
[ 1098.294100][T22674] name failslab, interval 1, probability 0, space 0, times 0
[ 1098.326340][T22674] CPU: 0 UID: 0 PID: 22674 Comm: syz.3.5341 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1098.326372][T22674] Tainted: [L]=SOFTLOCKUP
[ 1098.326379][T22674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1098.326390][T22674] Call Trace:
[ 1098.326398][T22674]  <TASK>
[ 1098.326406][T22674]  dump_stack_lvl+0xe8/0x150
[ 1098.326434][T22674]  should_fail_ex+0x412/0x560
[ 1098.326461][T22674]  should_failslab+0xa8/0x100
[ 1098.326483][T22674]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 1098.326506][T22674]  ? __netlink_lookup+0xc6/0x8b0
[ 1098.326526][T22674]  ? skb_clone+0x212/0x3a0
[ 1098.326551][T22674]  skb_clone+0x212/0x3a0
[ 1098.326574][T22674]  __netlink_deliver_tap+0x404/0x850
[ 1098.326603][T22674]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1098.326622][T22674]  netlink_deliver_tap+0x19c/0x1b0
[ 1098.326641][T22674]  netlink_unicast+0x7e3/0x9b0
[ 1098.326672][T22674]  ? __pfx_netlink_unicast+0x10/0x10
[ 1098.326692][T22674]  ? __alloc_skb+0x193/0x390
[ 1098.326710][T22674]  ? netlink_sendmsg+0x650/0xb40
[ 1098.326725][T22674]  ? skb_put+0x11b/0x210
[ 1098.326756][T22674]  netlink_sendmsg+0x813/0xb40
[ 1098.326780][T22674]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1098.326804][T22674]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1098.326826][T22674]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1098.326847][T22674]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1098.326863][T22674]  ____sys_sendmsg+0xa68/0xad0
[ 1098.326891][T22674]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1098.326917][T22674]  ? kstrtoull+0x12f/0x1d0
[ 1098.326942][T22674]  ___sys_sendmsg+0x2a5/0x360
[ 1098.326971][T22674]  ? __lock_acquire+0x6b5/0x2cf0
[ 1098.327005][T22674]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1098.327030][T22674]  ? get_pid_task+0x20/0x1f0
[ 1098.327049][T22674]  ? get_pid_task+0x20/0x1f0
[ 1098.327065][T22674]  ? get_pid_task+0x20/0x1f0
[ 1098.327108][T22674]  ? __fget_files+0x2a/0x420
[ 1098.327127][T22674]  ? __fget_files+0x3a0/0x420
[ 1098.327155][T22674]  __sys_sendmsg+0x183/0x260
[ 1098.327179][T22674]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1098.327212][T22674]  ? __pfx_ksys_write+0x10/0x10
[ 1098.327243][T22674]  __do_fast_syscall_32+0x1d2/0x540
[ 1098.327263][T22674]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1098.327279][T22674]  ? do_fast_syscall_32+0x33/0x70
[ 1098.327296][T22674]  ? asm_int80_emulation+0x1a/0x20
[ 1098.327310][T22674]  ? do_int80_emulation+0x20e/0x400
[ 1098.327331][T22674]  do_fast_syscall_32+0x33/0x70
[ 1098.327349][T22674]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1098.327367][T22674] RIP: 0023:0xf742d539
[ 1098.327382][T22674] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1098.327397][T22674] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1098.327415][T22674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[ 1098.327426][T22674] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1098.327437][T22674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1098.327448][T22674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1098.327459][T22674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1098.327485][T22674]  </TASK>
[ 1098.329875][T22677] FAULT_INJECTION: forcing a failure.
[ 1098.329875][T22677] name failslab, interval 1, probability 0, space 0, times 0
[ 1098.656737][T22677] CPU: 1 UID: 0 PID: 22677 Comm: syz.0.5342 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1098.656767][T22677] Tainted: [L]=SOFTLOCKUP
[ 1098.656774][T22677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1098.656783][T22677] Call Trace:
[ 1098.656790][T22677]  <TASK>
[ 1098.656798][T22677]  dump_stack_lvl+0xe8/0x150
[ 1098.656825][T22677]  should_fail_ex+0x412/0x560
[ 1098.656849][T22677]  should_failslab+0xa8/0x100
[ 1098.656870][T22677]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 1098.656891][T22677]  ? apparmor_capable+0x137/0x1a0
[ 1098.656913][T22677]  ? skb_clone+0x212/0x3a0
[ 1098.656938][T22677]  skb_clone+0x212/0x3a0
[ 1098.656958][T22677]  ? nfnetlink_rcv+0x4b0/0x27b0
[ 1098.656983][T22677]  nfnetlink_rcv+0x4e2/0x27b0
[ 1098.657012][T22677]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1098.657028][T22677]  ? __dev_queue_xmit+0x274/0x3850
[ 1098.657047][T22677]  ? __local_bh_enable_ip+0xd0/0x130
[ 1098.657062][T22677]  ? __dev_queue_xmit+0x1e6c/0x3850
[ 1098.657081][T22677]  ? __sys_sendmsg+0x183/0x260
[ 1098.657111][T22677]  ? __dev_queue_xmit+0x274/0x3850
[ 1098.657131][T22677]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1098.657164][T22677]  ? ref_tracker_free+0x693/0x840
[ 1098.657183][T22677]  ? __copy_skb_header+0xa3/0x4a0
[ 1098.657203][T22677]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1098.657238][T22677]  ? skb_clone+0x246/0x3a0
[ 1098.657257][T22677]  ? __netlink_deliver_tap+0x807/0x850
[ 1098.657271][T22677]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1098.657296][T22677]  netlink_unicast+0x80f/0x9b0
[ 1098.657321][T22677]  ? __pfx_netlink_unicast+0x10/0x10
[ 1098.657339][T22677]  ? __alloc_skb+0x193/0x390
[ 1098.657354][T22677]  ? netlink_sendmsg+0x650/0xb40
[ 1098.657367][T22677]  ? skb_put+0x11b/0x210
[ 1098.657385][T22677]  netlink_sendmsg+0x813/0xb40
[ 1098.657405][T22677]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1098.657421][T22677]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1098.657438][T22677]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1098.657454][T22677]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1098.657468][T22677]  ____sys_sendmsg+0xa68/0xad0
[ 1098.657490][T22677]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1098.657512][T22677]  ? kstrtoull+0x12f/0x1d0
[ 1098.657535][T22677]  ___sys_sendmsg+0x2a5/0x360
[ 1098.657551][T22677]  ? __lock_acquire+0x6b5/0x2cf0
[ 1098.657571][T22677]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1098.657589][T22677]  ? get_pid_task+0x20/0x1f0
[ 1098.657604][T22677]  ? get_pid_task+0x20/0x1f0
[ 1098.657617][T22677]  ? get_pid_task+0x20/0x1f0
[ 1098.657648][T22677]  ? __fget_files+0x2a/0x420
[ 1098.657663][T22677]  ? __fget_files+0x3a0/0x420
[ 1098.657684][T22677]  __sys_sendmsg+0x183/0x260
[ 1098.657702][T22677]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1098.657727][T22677]  ? __pfx_ksys_write+0x10/0x10
[ 1098.657751][T22677]  __do_fast_syscall_32+0x1d2/0x540
[ 1098.657765][T22677]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1098.657778][T22677]  ? do_fast_syscall_32+0x33/0x70
[ 1098.657791][T22677]  ? asm_int80_emulation+0x1a/0x20
[ 1098.657804][T22677]  ? do_int80_emulation+0x20e/0x400
[ 1098.657821][T22677]  do_fast_syscall_32+0x33/0x70
[ 1098.657836][T22677]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1098.657851][T22677] RIP: 0023:0xf73cd539
[ 1098.657864][T22677] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1098.657876][T22677] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1098.657892][T22677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[ 1098.657902][T22677] RDX: 0000000024008040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1098.657910][T22677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1098.657918][T22677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1098.657927][T22677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1098.657947][T22677]  </TASK>
[ 1098.876411][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1099.092783][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5346'.
[ 1099.106955][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5346'.
[ 1099.116192][T22688] FAULT_INJECTION: forcing a failure.
[ 1099.116192][T22688] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1099.137122][T22688] CPU: 1 UID: 0 PID: 22688 Comm: syz.1.5346 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1099.137151][T22688] Tainted: [L]=SOFTLOCKUP
[ 1099.137158][T22688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1099.137169][T22688] Call Trace:
[ 1099.137177][T22688]  <TASK>
[ 1099.137186][T22688]  dump_stack_lvl+0xe8/0x150
[ 1099.137213][T22688]  should_fail_ex+0x412/0x560
[ 1099.137239][T22688]  _copy_to_user+0x31/0xb0
[ 1099.137266][T22688]  simple_read_from_buffer+0xe1/0x170
[ 1099.137290][T22688]  proc_fail_nth_read+0x1bb/0x230
[ 1099.137317][T22688]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1099.137343][T22688]  ? rw_verify_area+0x2a6/0x4d0
[ 1099.137365][T22688]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1099.137389][T22688]  vfs_read+0x20c/0xa70
[ 1099.137410][T22688]  ? fdget_pos+0x246/0x320
[ 1099.137433][T22688]  ? __pfx___mutex_lock+0x10/0x10
[ 1099.137454][T22688]  ? __pfx_vfs_read+0x10/0x10
[ 1099.137478][T22688]  ? __fget_files+0x2a/0x420
[ 1099.137500][T22688]  ? __fget_files+0x3a0/0x420
[ 1099.137517][T22688]  ? __fget_files+0x2a/0x420
[ 1099.137545][T22688]  ksys_read+0x150/0x270
[ 1099.137569][T22688]  ? __pfx_ksys_read+0x10/0x10
[ 1099.137595][T22688]  ? asm_int80_emulation+0x1a/0x20
[ 1099.137616][T22688]  ? asm_int80_emulation+0x1a/0x20
[ 1099.137633][T22688]  do_int80_emulation+0x111/0x400
[ 1099.137654][T22688]  ? clear_bhb_loop+0x60/0xb0
[ 1099.137670][T22688]  ? clear_bhb_loop+0x60/0xb0
[ 1099.137691][T22688]  asm_int80_emulation+0x1a/0x20
[ 1099.137707][T22688] RIP: 0023:0xf718572b
[ 1099.137724][T22688] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1099.137738][T22688] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1099.137758][T22688] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0
[ 1099.137771][T22688] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 1099.137781][T22688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1099.137792][T22688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1099.137803][T22688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1099.137831][T22688]  </TASK>
[ 1099.417413][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5349'.
[ 1099.433529][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5348'.
[ 1099.436439][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5349'.
[ 1099.448572][T22691] FAULT_INJECTION: forcing a failure.
[ 1099.448572][T22691] name failslab, interval 1, probability 0, space 0, times 0
[ 1099.473865][T22691] CPU: 0 UID: 0 PID: 22691 Comm: syz.0.5348 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1099.473894][T22691] Tainted: [L]=SOFTLOCKUP
[ 1099.473901][T22691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1099.473913][T22691] Call Trace:
[ 1099.473923][T22691]  <TASK>
[ 1099.473931][T22691]  dump_stack_lvl+0xe8/0x150
[ 1099.473959][T22691]  should_fail_ex+0x412/0x560
[ 1099.473985][T22691]  should_failslab+0xa8/0x100
[ 1099.474006][T22691]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[ 1099.474032][T22691]  ? __alloc_skb+0x1d7/0x390
[ 1099.474050][T22691]  ? __local_bh_enable_ip+0xd0/0x130
[ 1099.474067][T22691]  ? __alloc_skb+0x193/0x390
[ 1099.474088][T22691]  __alloc_skb+0x1d7/0x390
[ 1099.474112][T22691]  rtmsg_ifinfo_build_skb+0x84/0x260
[ 1099.474145][T22691]  rtmsg_ifinfo+0x8c/0x1a0
[ 1099.474169][T22691]  netif_close_many+0x284/0x420
[ 1099.474187][T22691]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1099.474210][T22691]  ? __pfx_netif_close_many+0x10/0x10
[ 1099.474227][T22691]  ? rcu_is_watching+0x15/0xb0
[ 1099.474246][T22691]  ? trace_contention_end+0x39/0x100
[ 1099.474266][T22691]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1099.474291][T22691]  unregister_netdevice_many_notify+0xb47/0x2370
[ 1099.474313][T22691]  ? stack_trace_save+0xa9/0x100
[ 1099.474333][T22691]  ? rtnl_dellink+0x42a/0x820
[ 1099.474351][T22691]  ? __pfx_stack_trace_save+0x10/0x10
[ 1099.474374][T22691]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1099.474394][T22691]  ? unregister_netdevice_queue+0x19b/0x360
[ 1099.474419][T22691]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1099.474444][T22691]  ? __nla_parse+0x40/0x60
[ 1099.474468][T22691]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1099.474491][T22691]  rtnl_dellink+0x5d4/0x820
[ 1099.474517][T22691]  ? __pfx_rtnl_dellink+0x10/0x10
[ 1099.474607][T22691]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1099.474648][T22691]  ? __pfx_rtnl_dellink+0x10/0x10
[ 1099.474667][T22691]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1099.474690][T22691]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1099.474709][T22691]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1099.474727][T22691]  ? ref_tracker_free+0x693/0x840
[ 1099.474746][T22691]  ? __copy_skb_header+0xa3/0x4a0
[ 1099.474769][T22691]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1099.474800][T22691]  netlink_rcv_skb+0x232/0x4b0
[ 1099.474820][T22691]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1099.474841][T22691]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1099.474869][T22691]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1099.474895][T22691]  netlink_unicast+0x80f/0x9b0
[ 1099.474926][T22691]  ? __pfx_netlink_unicast+0x10/0x10
[ 1099.474948][T22691]  ? __alloc_skb+0x193/0x390
[ 1099.474967][T22691]  ? netlink_sendmsg+0x650/0xb40
[ 1099.474983][T22691]  ? skb_put+0x11b/0x210
[ 1099.475007][T22691]  netlink_sendmsg+0x813/0xb40
[ 1099.475033][T22691]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1099.475055][T22691]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1099.475077][T22691]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1099.475097][T22691]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1099.475121][T22691]  ____sys_sendmsg+0xa68/0xad0
[ 1099.475151][T22691]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1099.475177][T22691]  ? kstrtoull+0x12f/0x1d0
[ 1099.475204][T22691]  ___sys_sendmsg+0x2a5/0x360
[ 1099.475224][T22691]  ? __lock_acquire+0x6b5/0x2cf0
[ 1099.475249][T22691]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1099.475272][T22691]  ? get_pid_task+0x20/0x1f0
[ 1099.475290][T22691]  ? get_pid_task+0x20/0x1f0
[ 1099.475307][T22691]  ? get_pid_task+0x20/0x1f0
[ 1099.475350][T22691]  ? __fget_files+0x2a/0x420
[ 1099.475368][T22691]  ? __fget_files+0x3a0/0x420
[ 1099.475396][T22691]  __sys_sendmsg+0x183/0x260
[ 1099.475420][T22691]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1099.475452][T22691]  ? __pfx_ksys_write+0x10/0x10
[ 1099.475482][T22691]  __do_fast_syscall_32+0x1d2/0x540
[ 1099.475506][T22691]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1099.475523][T22691]  ? do_fast_syscall_32+0x33/0x70
[ 1099.475541][T22691]  ? asm_int80_emulation+0x1a/0x20
[ 1099.475557][T22691]  ? do_int80_emulation+0x20e/0x400
[ 1099.475579][T22691]  do_fast_syscall_32+0x33/0x70
[ 1099.475594][T22691]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1099.475612][T22691] RIP: 0023:0xf73cd539
[ 1099.475627][T22691] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1099.475639][T22691] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1099.475657][T22691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[ 1099.475669][T22691] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1099.475679][T22691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1099.475689][T22691] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1099.475699][T22691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1099.475725][T22691]  </TASK>
[ 1099.941064][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ae02c00: rx timeout, send abort
[ 1099.956389][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1100.040230][T22697] FAULT_INJECTION: forcing a failure.
[ 1100.040230][T22697] name failslab, interval 1, probability 0, space 0, times 0
[ 1100.053375][T22697] CPU: 0 UID: 0 PID: 22697 Comm: syz.4.5351 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1100.053403][T22697] Tainted: [L]=SOFTLOCKUP
[ 1100.053410][T22697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1100.053421][T22697] Call Trace:
[ 1100.053429][T22697]  <TASK>
[ 1100.053437][T22697]  dump_stack_lvl+0xe8/0x150
[ 1100.053464][T22697]  should_fail_ex+0x412/0x560
[ 1100.053489][T22697]  should_failslab+0xa8/0x100
[ 1100.053511][T22697]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1100.053530][T22697]  ? ucma_write_cm_event+0x36c/0x7e0
[ 1100.053550][T22697]  ? do_raw_spin_unlock+0xf5/0x210
[ 1100.053574][T22697]  ucma_write_cm_event+0x36c/0x7e0
[ 1100.053600][T22697]  ? __pfx_ucma_write_cm_event+0x10/0x10
[ 1100.053648][T22697]  ? __might_fault+0xaf/0x130
[ 1100.053672][T22697]  ? __might_fault+0xaf/0x130
[ 1100.053713][T22697]  ucma_write+0x24e/0x2f0
[ 1100.053734][T22697]  ? __pfx_ucma_write+0x10/0x10
[ 1100.053751][T22697]  ? security_file_permission+0x75/0x260
[ 1100.053770][T22697]  ? rw_verify_area+0x255/0x4d0
[ 1100.053791][T22697]  ? __pfx_ucma_write+0x10/0x10
[ 1100.053810][T22697]  vfs_write+0x29a/0xb90
[ 1100.053840][T22697]  ? __pfx_vfs_write+0x10/0x10
[ 1100.053873][T22697]  ? __fget_files+0x2a/0x420
[ 1100.053894][T22697]  ? __fget_files+0x2a/0x420
[ 1100.053911][T22697]  ? __fget_files+0x3a0/0x420
[ 1100.053928][T22697]  ? __fget_files+0x2a/0x420
[ 1100.053954][T22697]  ksys_write+0x150/0x270
[ 1100.053979][T22697]  ? __pfx_ksys_write+0x10/0x10
[ 1100.054001][T22697]  ? __pfx_ksys_write+0x10/0x10
[ 1100.054030][T22697]  __do_fast_syscall_32+0x1d2/0x540
[ 1100.054049][T22697]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1100.054066][T22697]  ? do_fast_syscall_32+0x33/0x70
[ 1100.054084][T22697]  ? asm_int80_emulation+0x1a/0x20
[ 1100.054100][T22697]  ? do_int80_emulation+0x20e/0x400
[ 1100.054122][T22697]  do_fast_syscall_32+0x33/0x70
[ 1100.054149][T22697]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1100.054169][T22697] RIP: 0023:0xf743d539
[ 1100.054185][T22697] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1100.054201][T22697] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1100.054221][T22697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[ 1100.054234][T22697] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 0000000000000000
[ 1100.054245][T22697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1100.054256][T22697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1100.054267][T22697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1100.054291][T22697]  </TASK>
[ 1100.384225][T22702] FAULT_INJECTION: forcing a failure.
[ 1100.384225][T22702] name failslab, interval 1, probability 0, space 0, times 0
[ 1100.448137][T22702] CPU: 1 UID: 0 PID: 22702 Comm: syz.3.5353 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1100.448158][T22702] Tainted: [L]=SOFTLOCKUP
[ 1100.448162][T22702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1100.448168][T22702] Call Trace:
[ 1100.448173][T22702]  <TASK>
[ 1100.448178][T22702]  dump_stack_lvl+0xe8/0x150
[ 1100.448196][T22702]  should_fail_ex+0x412/0x560
[ 1100.448217][T22702]  should_failslab+0xa8/0x100
[ 1100.448229][T22702]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 1100.448246][T22702]  ? security_file_alloc+0x34/0x310
[ 1100.448259][T22702]  security_file_alloc+0x34/0x310
[ 1100.448270][T22702]  init_file+0x93/0x2f0
[ 1100.448289][T22702]  alloc_empty_file+0x6e/0x1d0
[ 1100.448301][T22702]  dentry_open+0x44/0xa0
[ 1100.448314][T22702]  pidfs_alloc_file+0x18d/0x290
[ 1100.448325][T22702]  ? _raw_spin_unlock+0x28/0x50
[ 1100.448342][T22702]  ? __pfx_pidfs_alloc_file+0x10/0x10
[ 1100.448356][T22702]  pidfd_prepare+0x14e/0x1b0
[ 1100.448369][T22702]  scm_recv_unix+0x1f1/0x360
[ 1100.448381][T22702]  ? __pfx_scm_recv_unix+0x10/0x10
[ 1100.448395][T22702]  ? pid_vnr+0x143/0x1e0
[ 1100.448407][T22702]  __unix_dgram_recvmsg+0x9c5/0xd50
[ 1100.448427][T22702]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[ 1100.448449][T22702]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1100.448460][T22702]  ? unix_dgram_recvmsg+0xb1/0xd0
[ 1100.448471][T22702]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[ 1100.448481][T22702]  sock_recvmsg+0x22c/0x270
[ 1100.448494][T22702]  ____sys_recvmsg+0x1e6/0x4a0
[ 1100.448512][T22702]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1100.448525][T22702]  ? get_compat_msghdr+0x34b/0x4c0
[ 1100.448548][T22702]  ___sys_recvmsg+0x215/0x590
[ 1100.448564][T22702]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1100.448579][T22702]  ? kstrtoull+0x12f/0x1d0
[ 1100.448601][T22702]  ? get_pid_task+0x20/0x1f0
[ 1100.448615][T22702]  do_recvmmsg+0x3a5/0x800
[ 1100.448633][T22702]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1100.448647][T22702]  ? vfs_write+0x9bc/0xb90
[ 1100.448665][T22702]  ? __pfx_vfs_write+0x10/0x10
[ 1100.448682][T22702]  ? do_sys_openat2+0x168/0x220
[ 1100.448697][T22702]  __sys_recvmmsg+0x1a5/0x290
[ 1100.448712][T22702]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 1100.448725][T22702]  ? ksys_write+0x1fc/0x270
[ 1100.448740][T22702]  ? __pfx_ksys_write+0x10/0x10
[ 1100.448761][T22702]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 1100.448776][T22702]  __do_fast_syscall_32+0x1d2/0x540
[ 1100.448788][T22702]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1100.448797][T22702]  ? do_fast_syscall_32+0x33/0x70
[ 1100.448807][T22702]  ? asm_int80_emulation+0x1a/0x20
[ 1100.448817][T22702]  ? do_int80_emulation+0x20e/0x400
[ 1100.448830][T22702]  do_fast_syscall_32+0x33/0x70
[ 1100.448841][T22702]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1100.448859][T22702] RIP: 0023:0xf742d539
[ 1100.448868][T22702] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1100.448877][T22702] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 1100.448889][T22702] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004000
[ 1100.448897][T22702] RDX: 0000000000000001 RSI: 0000000000000022 RDI: 0000000000000000
[ 1100.448903][T22702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1100.448909][T22702] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1100.448919][T22702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1100.448933][T22702]  </TASK>
[ 1100.816370][  T937] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1100.967456][  T937] usb 2-1: Using ep0 maxpacket: 8
[ 1100.978386][  T937] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1100.991294][  T937] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1101.001560][  T937] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40
[ 1101.006443][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1101.010739][  T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.025503][  T937] usb 2-1: Product: syz
[ 1101.029720][  T937] usb 2-1: Manufacturer: syz
[ 1101.034293][  T937] usb 2-1: SerialNumber: syz
[ 1101.272872][T22700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1101.296884][T22700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1101.394510][  T937] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input80
[ 1101.438994][ T5178] bcm5974 2-1:1.0: could not read from device
[ 1101.456358][  T937] usb 2-1: USB disconnect, device number 66
[ 1101.892848][T22725] netlink: 'syz.5.5360': attribute type 13 has an invalid length.
[ 1102.036291][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1102.173232][T22735] random: crng reseeded on system resumption
[ 1102.266381][   T10] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1102.430158][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1102.442177][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1102.455905][   T10] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1102.466966][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.495533][   T10] usb 6-1: config 0 descriptor??
[ 1102.767485][T22725] netlink: 'syz.5.5360': attribute type 1 has an invalid length.
[ 1102.990365][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5360'.
[ 1103.015931][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5360'.
[ 1103.029584][   T10] usbhid 6-1:0.0: can't add hid device: -71
[ 1103.042629][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1103.064729][   T10] usb 6-1: USB disconnect, device number 85
[ 1103.076723][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1103.367103][T22762] loop8: detected capacity change from 0 to 8
[ 1103.376990][T21745] Dev loop8: unable to read RDB block 8
[ 1103.382703][T21745]  loop8: unable to read partition table
[ 1103.391205][T21745] loop8: partition table beyond EOD, truncated
[ 1103.403065][T22762] Dev loop8: unable to read RDB block 8
[ 1103.411541][T22762]  loop8: unable to read partition table
[ 1103.417889][T22762] loop8: partition table beyond EOD, truncated
[ 1103.428261][T22762] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1103.487601][T22768] netlink: 'syz.3.5373': attribute type 16 has an invalid length.
[ 1103.495708][T22768] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5373'.
[ 1103.682933][T22774] binder: 22773:22774 ioctl 89f2 80000380 returned -22
[ 1103.699799][T22774] binder: 22773:22774 ioctl c0306201 800003c0 returned -14
[ 1104.116711][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1104.456399][T13903] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1104.640741][T13903] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[ 1104.682109][T13903] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1104.726149][T13903] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1104.763297][T13903] usb 5-1: config 220 has no interface number 2
[ 1104.772116][T13903] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1104.817988][T13903] usb 5-1: config 220 interface 0 has no altsetting 0
[ 1104.833960][T13903] usb 5-1: config 220 interface 76 has no altsetting 0
[ 1104.833988][T13903] usb 5-1: config 220 interface 1 has no altsetting 0
[ 1104.837127][T13903] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1104.837157][T13903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.837178][T13903] usb 5-1: Product: syz
[ 1104.837193][T13903] usb 5-1: Manufacturer: syz
[ 1104.837208][T13903] usb 5-1: SerialNumber: syz
[ 1105.088989][T13903] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1105.098613][T13903] uvcvideo 5-1:220.0: No valid video chain found.
[ 1105.107239][T13903] usb 5-1: selecting invalid altsetting 0
[ 1105.156332][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1105.166763][T13903] usb 5-1: selecting invalid altsetting 0
[ 1105.204628][T13903] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[ 1105.237141][T13903] usb 5-1: USB disconnect, device number 60
[ 1105.765594][T22824] Cannot find del_set index 65533 as target
[ 1105.965439][T22828] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5392'.
[ 1106.196352][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1106.488598][T22837] FAULT_INJECTION: forcing a failure.
[ 1106.488598][T22837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1106.546904][T22837] CPU: 0 UID: 0 PID: 22837 Comm: syz.4.5396 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1106.546936][T22837] Tainted: [L]=SOFTLOCKUP
[ 1106.546943][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1106.546954][T22837] Call Trace:
[ 1106.546961][T22837]  <TASK>
[ 1106.546970][T22837]  dump_stack_lvl+0xe8/0x150
[ 1106.546999][T22837]  should_fail_ex+0x412/0x560
[ 1106.547025][T22837]  _copy_to_user+0x31/0xb0
[ 1106.547053][T22837]  simple_read_from_buffer+0xe1/0x170
[ 1106.547078][T22837]  proc_fail_nth_read+0x1bb/0x230
[ 1106.547104][T22837]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1106.547130][T22837]  ? rw_verify_area+0x2a6/0x4d0
[ 1106.547162][T22837]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1106.547187][T22837]  vfs_read+0x20c/0xa70
[ 1106.547208][T22837]  ? fdget_pos+0x246/0x320
[ 1106.547231][T22837]  ? __pfx___mutex_lock+0x10/0x10
[ 1106.547252][T22837]  ? __pfx_vfs_read+0x10/0x10
[ 1106.547276][T22837]  ? __fget_files+0x2a/0x420
[ 1106.547298][T22837]  ? __fget_files+0x3a0/0x420
[ 1106.547316][T22837]  ? __fget_files+0x2a/0x420
[ 1106.547343][T22837]  ksys_read+0x150/0x270
[ 1106.547368][T22837]  ? __pfx_ksys_read+0x10/0x10
[ 1106.547394][T22837]  ? asm_int80_emulation+0x1a/0x20
[ 1106.547415][T22837]  ? asm_int80_emulation+0x1a/0x20
[ 1106.547431][T22837]  do_int80_emulation+0x111/0x400
[ 1106.547450][T22837]  ? clear_bhb_loop+0x60/0xb0
[ 1106.547463][T22837]  ? clear_bhb_loop+0x60/0xb0
[ 1106.547480][T22837]  asm_int80_emulation+0x1a/0x20
[ 1106.547494][T22837] RIP: 0023:0xf71a572b
[ 1106.547509][T22837] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1106.547522][T22837] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1106.547539][T22837] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0
[ 1106.547551][T22837] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 1106.547560][T22837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1106.547569][T22837] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1106.547579][T22837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1106.547602][T22837]  </TASK>
[ 1107.236327][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1107.617920][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5397'.
[ 1107.673786][T22854] netlink: 'syz.0.5402': attribute type 10 has an invalid length.
[ 1107.832454][T22856] FAULT_INJECTION: forcing a failure.
[ 1107.832454][T22856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1107.850777][T22856] CPU: 0 UID: 0 PID: 22856 Comm: syz.3.5403 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1107.850805][T22856] Tainted: [L]=SOFTLOCKUP
[ 1107.850809][T22856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1107.850815][T22856] Call Trace:
[ 1107.850824][T22856]  <TASK>
[ 1107.850830][T22856]  dump_stack_lvl+0xe8/0x150
[ 1107.850849][T22856]  should_fail_ex+0x412/0x560
[ 1107.850864][T22856]  _copy_from_iter+0x1d3/0x1670
[ 1107.850881][T22856]  ? trace_kmem_cache_alloc+0x1f/0xb0
[ 1107.850898][T22856]  ? __pfx__copy_from_iter+0x10/0x10
[ 1107.850912][T22856]  ? __build_skb_around+0x22d/0x3c0
[ 1107.850925][T22856]  ? __alloc_skb+0x193/0x390
[ 1107.850937][T22856]  ? netlink_sendmsg+0x650/0xb40
[ 1107.850947][T22856]  ? skb_put+0x11b/0x210
[ 1107.850961][T22856]  netlink_sendmsg+0x6c0/0xb40
[ 1107.850976][T22856]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1107.850990][T22856]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1107.851004][T22856]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1107.851017][T22856]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1107.851026][T22856]  ____sys_sendmsg+0xa68/0xad0
[ 1107.851044][T22856]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1107.851059][T22856]  ? kstrtoull+0x12f/0x1d0
[ 1107.851075][T22856]  ___sys_sendmsg+0x2a5/0x360
[ 1107.851087][T22856]  ? __lock_acquire+0x6b5/0x2cf0
[ 1107.851103][T22856]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1107.851117][T22856]  ? get_pid_task+0x20/0x1f0
[ 1107.851128][T22856]  ? get_pid_task+0x20/0x1f0
[ 1107.851138][T22856]  ? get_pid_task+0x20/0x1f0
[ 1107.851160][T22856]  ? __fget_files+0x2a/0x420
[ 1107.851171][T22856]  ? __fget_files+0x3a0/0x420
[ 1107.851186][T22856]  __sys_sendmsg+0x183/0x260
[ 1107.851200][T22856]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1107.851219][T22856]  ? __pfx_ksys_write+0x10/0x10
[ 1107.851243][T22856]  __do_fast_syscall_32+0x1d2/0x540
[ 1107.851256][T22856]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1107.851265][T22856]  ? do_fast_syscall_32+0x33/0x70
[ 1107.851275][T22856]  ? asm_int80_emulation+0x1a/0x20
[ 1107.851285][T22856]  ? do_int80_emulation+0x20e/0x400
[ 1107.851295][T22856]  ? rcu_is_watching+0x15/0xb0
[ 1107.851307][T22856]  do_fast_syscall_32+0x33/0x70
[ 1107.851318][T22856]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1107.851330][T22856] RIP: 0023:0xf742d539
[ 1107.851342][T22856] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1107.851350][T22856] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1107.851361][T22856] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0
[ 1107.851369][T22856] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 1107.851375][T22856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1107.851380][T22856] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1107.851386][T22856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1107.851400][T22856]  </TASK>
[ 1108.196295][ T5876] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1108.276325][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1108.383280][T22858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5404'.
[ 1108.472575][ T5876] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1108.491097][ T5876] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1108.515330][ T5876] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1108.525067][ T5876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1108.538330][ T5876] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1108.547811][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1108.560104][ T5876] usb 6-1: Product: syz
[ 1108.564713][ T5876] usb 6-1: Manufacturer: syz
[ 1108.599041][ T5876] cdc_wdm 6-1:1.0: skipping garbage
[ 1108.604266][ T5876] cdc_wdm 6-1:1.0: skipping garbage
[ 1108.616426][ T5876] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1108.691964][T22869] binder_alloc: 22868: pid 22868 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1108.703554][T22870] binder_alloc: 22868: pid 22868 spamming oneway? 2 buffers allocated for a total size of 5120
[ 1108.752995][T22874] netlink: 'syz.3.5410': attribute type 12 has an invalid length.
[ 1108.761205][T22874] netlink: 'syz.3.5410': attribute type 29 has an invalid length.
[ 1108.769362][T22874] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5410'.
[ 1109.091835][T22882] FAULT_INJECTION: forcing a failure.
[ 1109.091835][T22882] name failslab, interval 1, probability 0, space 0, times 0
[ 1109.104719][T22882] CPU: 0 UID: 0 PID: 22882 Comm: syz.4.5413 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1109.104738][T22882] Tainted: [L]=SOFTLOCKUP
[ 1109.104742][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1109.104749][T22882] Call Trace:
[ 1109.104754][T22882]  <TASK>
[ 1109.104760][T22882]  dump_stack_lvl+0xe8/0x150
[ 1109.104779][T22882]  should_fail_ex+0x412/0x560
[ 1109.104794][T22882]  should_failslab+0xa8/0x100
[ 1109.104807][T22882]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[ 1109.104823][T22882]  ? __alloc_skb+0x193/0x390
[ 1109.104835][T22882]  ? __alloc_skb+0x1d7/0x390
[ 1109.104845][T22882]  ? __local_bh_enable_ip+0xd0/0x130
[ 1109.104855][T22882]  ? __alloc_skb+0x193/0x390
[ 1109.104867][T22882]  __alloc_skb+0x1d7/0x390
[ 1109.104881][T22882]  netlink_ack+0x146/0xa50
[ 1109.104905][T22882]  netlink_rcv_skb+0x2b6/0x4b0
[ 1109.104916][T22882]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1109.104932][T22882]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1109.104947][T22882]  ? bpf_lsm_capable+0x9/0x20
[ 1109.104960][T22882]  ? security_capable+0x7e/0x2c0
[ 1109.104976][T22882]  nfnetlink_rcv+0x2c0/0x27b0
[ 1109.104995][T22882]  ? __local_bh_enable_ip+0xd0/0x130
[ 1109.105004][T22882]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1109.105015][T22882]  ? __dev_queue_xmit+0x274/0x3850
[ 1109.105029][T22882]  ? __local_bh_enable_ip+0xd0/0x130
[ 1109.105037][T22882]  ? __dev_queue_xmit+0x274/0x3850
[ 1109.105051][T22882]  ? __dev_queue_xmit+0x1e6c/0x3850
[ 1109.105064][T22882]  ? __sys_sendmsg+0x183/0x260
[ 1109.105082][T22882]  ? __dev_queue_xmit+0x274/0x3850
[ 1109.105097][T22882]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1109.105114][T22882]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1109.105131][T22882]  ? ref_tracker_free+0x693/0x840
[ 1109.105144][T22882]  ? __copy_skb_header+0xa3/0x4a0
[ 1109.105160][T22882]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1109.105179][T22882]  ? skb_clone+0x246/0x3a0
[ 1109.105194][T22882]  ? __netlink_deliver_tap+0x807/0x850
[ 1109.105205][T22882]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1109.105218][T22882]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1109.105231][T22882]  netlink_unicast+0x80f/0x9b0
[ 1109.105251][T22882]  ? __pfx_netlink_unicast+0x10/0x10
[ 1109.105266][T22882]  ? __alloc_skb+0x193/0x390
[ 1109.105277][T22882]  ? netlink_sendmsg+0x650/0xb40
[ 1109.105287][T22882]  ? skb_put+0x11b/0x210
[ 1109.105300][T22882]  netlink_sendmsg+0x813/0xb40
[ 1109.105315][T22882]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1109.105331][T22882]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1109.105352][T22882]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1109.105371][T22882]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1109.105388][T22882]  ____sys_sendmsg+0xa68/0xad0
[ 1109.105408][T22882]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1109.105423][T22882]  ? kstrtoull+0x12f/0x1d0
[ 1109.105438][T22882]  ___sys_sendmsg+0x2a5/0x360
[ 1109.105451][T22882]  ? __lock_acquire+0x6b5/0x2cf0
[ 1109.105466][T22882]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1109.105481][T22882]  ? get_pid_task+0x20/0x1f0
[ 1109.105493][T22882]  ? get_pid_task+0x20/0x1f0
[ 1109.105508][T22882]  ? get_pid_task+0x20/0x1f0
[ 1109.105544][T22882]  ? __fget_files+0x2a/0x420
[ 1109.105562][T22882]  ? __fget_files+0x3a0/0x420
[ 1109.105586][T22882]  __sys_sendmsg+0x183/0x260
[ 1109.105610][T22882]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1109.105629][T22882]  ? __pfx_ksys_write+0x10/0x10
[ 1109.105648][T22882]  __do_fast_syscall_32+0x1d2/0x540
[ 1109.105659][T22882]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1109.105671][T22882]  ? do_fast_syscall_32+0x33/0x70
[ 1109.105687][T22882]  ? asm_int80_emulation+0x1a/0x20
[ 1109.105707][T22882]  ? do_int80_emulation+0x20e/0x400
[ 1109.105728][T22882]  do_fast_syscall_32+0x33/0x70
[ 1109.105748][T22882]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1109.105764][T22882] RIP: 0023:0xf743d539
[ 1109.105775][T22882] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1109.105783][T22882] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1109.105795][T22882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0
[ 1109.105802][T22882] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000
[ 1109.105809][T22882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1109.105814][T22882] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1109.105820][T22882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1109.105834][T22882]  </TASK>
[ 1109.530019][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1109.748998][T22890] FAULT_INJECTION: forcing a failure.
[ 1109.748998][T22890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1109.763056][T22890] CPU: 1 UID: 0 PID: 22890 Comm: syz.1.5417 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1109.763098][T22890] Tainted: [L]=SOFTLOCKUP
[ 1109.763105][T22890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1109.763116][T22890] Call Trace:
[ 1109.763123][T22890]  <TASK>
[ 1109.763131][T22890]  dump_stack_lvl+0xe8/0x150
[ 1109.763159][T22890]  should_fail_ex+0x412/0x560
[ 1109.763184][T22890]  _copy_from_user+0x2d/0xb0
[ 1109.763209][T22890]  get_compat_msghdr+0xb3/0x4c0
[ 1109.763233][T22890]  ? _parse_integer_limit+0x1ae/0x1f0
[ 1109.763253][T22890]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1109.763275][T22890]  ? kstrtoull+0x12f/0x1d0
[ 1109.763302][T22890]  ___sys_sendmsg+0x201/0x360
[ 1109.763323][T22890]  ? __lock_acquire+0x6b5/0x2cf0
[ 1109.763349][T22890]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1109.763373][T22890]  ? get_pid_task+0x20/0x1f0
[ 1109.763392][T22890]  ? get_pid_task+0x20/0x1f0
[ 1109.763408][T22890]  ? get_pid_task+0x20/0x1f0
[ 1109.763451][T22890]  ? __fget_files+0x2a/0x420
[ 1109.763469][T22890]  ? __fget_files+0x3a0/0x420
[ 1109.763497][T22890]  __sys_sendmsg+0x183/0x260
[ 1109.763520][T22890]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1109.763552][T22890]  ? __pfx_ksys_write+0x10/0x10
[ 1109.763583][T22890]  __do_fast_syscall_32+0x1d2/0x540
[ 1109.763604][T22890]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1109.763620][T22890]  ? do_fast_syscall_32+0x33/0x70
[ 1109.763638][T22890]  ? asm_int80_emulation+0x1a/0x20
[ 1109.763654][T22890]  ? do_int80_emulation+0x20e/0x400
[ 1109.763677][T22890]  do_fast_syscall_32+0x33/0x70
[ 1109.763696][T22890]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1109.763716][T22890] RIP: 0023:0xf741d539
[ 1109.763733][T22890] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1109.763748][T22890] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1109.763768][T22890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 1109.763781][T22890] RDX: 0000000004040040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1109.763792][T22890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1109.763803][T22890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1109.763814][T22890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1109.763840][T22890]  </TASK>
[ 1110.067179][   T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1110.191479][T22894] netlink: 'syz.1.5420': attribute type 10 has an invalid length.
[ 1110.205070][T22894] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1110.236311][   T10] usb 5-1: Using ep0 maxpacket: 8
[ 1110.248469][   T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1110.265547][   T10] usb 5-1: config 1 has no interface number 1
[ 1110.275766][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1110.289574][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1110.312567][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1110.341990][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.357635][   T10] usb 5-1: Product: syz
[ 1110.367714][   T10] usb 5-1: Manufacturer: syz
[ 1110.383558][   T10] usb 5-1: SerialNumber: syz
[ 1110.425822][T13903] usb 6-1: USB disconnect, device number 86
[ 1110.596879][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1110.616193][T22911] netlink: 'syz.3.5426': attribute type 1 has an invalid length.
[ 1110.651355][   T10] usb 5-1: 2:1: cannot set freq 15828157 to ep 0x82
[ 1110.665714][T22914] FAULT_INJECTION: forcing a failure.
[ 1110.665714][T22914] name failslab, interval 1, probability 0, space 0, times 0
[ 1110.684828][   T10] usb 5-1: USB disconnect, device number 61
[ 1110.701177][T22911] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1110.740460][T21746] udevd[21746]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1110.758812][T22914] CPU: 0 UID: 0 PID: 22914 Comm: syz.1.5425 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1110.758844][T22914] Tainted: [L]=SOFTLOCKUP
[ 1110.758851][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1110.758863][T22914] Call Trace:
[ 1110.758871][T22914]  <TASK>
[ 1110.758879][T22914]  dump_stack_lvl+0xe8/0x150
[ 1110.758907][T22914]  should_fail_ex+0x412/0x560
[ 1110.758932][T22914]  should_failslab+0xa8/0x100
[ 1110.758954][T22914]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1110.758971][T22914]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1110.758996][T22914]  ? __request_module+0x2d0/0x610
[ 1110.759018][T22914]  __request_module+0x2d0/0x610
[ 1110.759037][T22914]  ? rtnl_link_ops_get+0x23/0x250
[ 1110.759059][T22914]  ? __pfx___request_module+0x10/0x10
[ 1110.759086][T22914]  ? rtnl_link_ops_get+0x23/0x250
[ 1110.759104][T22914]  ? rtnl_link_ops_get+0x23/0x250
[ 1110.759125][T22914]  ? rtnl_link_ops_get+0x215/0x250
[ 1110.759148][T22914]  rtnl_newlink+0x620/0x1be0
[ 1110.759178][T22914]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1110.759199][T22914]  ? __lock_acquire+0x6b5/0x2cf0
[ 1110.759226][T22914]  ? __lock_acquire+0x6b5/0x2cf0
[ 1110.759248][T22914]  ? __lock_acquire+0x6b5/0x2cf0
[ 1110.759274][T22914]  ? unwind_next_frame+0xa5/0x23c0
[ 1110.759298][T22914]  ? unwind_next_frame+0xa5/0x23c0
[ 1110.759318][T22914]  ? is_bpf_text_address+0x26/0x2b0
[ 1110.759345][T22914]  ? __lock_acquire+0x6b5/0x2cf0
[ 1110.759367][T22914]  ? is_bpf_text_address+0x292/0x2b0
[ 1110.759385][T22914]  ? is_bpf_text_address+0x26/0x2b0
[ 1110.759406][T22914]  ? kernel_text_address+0xa5/0xe0
[ 1110.759426][T22914]  ? __kernel_text_address+0xd/0x30
[ 1110.759459][T22914]  ? unwind_get_return_address+0x4d/0x90
[ 1110.759492][T22914]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1110.759523][T22914]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1110.759542][T22914]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1110.759564][T22914]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1110.759582][T22914]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1110.759600][T22914]  ? __lock_acquire+0x6b5/0x2cf0
[ 1110.759633][T22914]  netlink_rcv_skb+0x232/0x4b0
[ 1110.759652][T22914]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1110.759673][T22914]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1110.759700][T22914]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1110.759725][T22914]  netlink_unicast+0x80f/0x9b0
[ 1110.759766][T22914]  ? __pfx_netlink_unicast+0x10/0x10
[ 1110.759787][T22914]  ? __alloc_skb+0x193/0x390
[ 1110.759807][T22914]  ? netlink_sendmsg+0x650/0xb40
[ 1110.759823][T22914]  ? skb_put+0x11b/0x210
[ 1110.759845][T22914]  netlink_sendmsg+0x813/0xb40
[ 1110.759869][T22914]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1110.759889][T22914]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1110.759910][T22914]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1110.759930][T22914]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1110.759947][T22914]  ____sys_sendmsg+0xa68/0xad0
[ 1110.759982][T22914]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1110.760007][T22914]  ? kstrtoull+0x12f/0x1d0
[ 1110.760033][T22914]  ___sys_sendmsg+0x2a5/0x360
[ 1110.760053][T22914]  ? __lock_acquire+0x6b5/0x2cf0
[ 1110.760078][T22914]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1110.760109][T22914]  ? get_pid_task+0x20/0x1f0
[ 1110.760127][T22914]  ? get_pid_task+0x20/0x1f0
[ 1110.760151][T22914]  ? get_pid_task+0x20/0x1f0
[ 1110.760192][T22914]  ? __fget_files+0x2a/0x420
[ 1110.760210][T22914]  ? __fget_files+0x3a0/0x420
[ 1110.760238][T22914]  __sys_sendmsg+0x183/0x260
[ 1110.760260][T22914]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1110.760290][T22914]  ? __pfx_ksys_write+0x10/0x10
[ 1110.760319][T22914]  __do_fast_syscall_32+0x1d2/0x540
[ 1110.760338][T22914]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1110.760354][T22914]  ? do_fast_syscall_32+0x33/0x70
[ 1110.760372][T22914]  ? asm_int80_emulation+0x1a/0x20
[ 1110.760387][T22914]  ? do_int80_emulation+0x20e/0x400
[ 1110.760409][T22914]  do_fast_syscall_32+0x33/0x70
[ 1110.760428][T22914]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1110.760448][T22914] RIP: 0023:0xf741d539
[ 1110.760464][T22914] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1110.760479][T22914] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1110.760499][T22914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[ 1110.760511][T22914] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1110.760522][T22914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1110.760533][T22914] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1110.760544][T22914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1110.760568][T22914]  </TASK>
[ 1110.773243][T22911] FAULT_INJECTION: forcing a failure.
[ 1110.773243][T22911] name failslab, interval 1, probability 0, space 0, times 0
[ 1111.231626][T22911] CPU: 1 UID: 0 PID: 22911 Comm: syz.3.5426 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1111.231656][T22911] Tainted: [L]=SOFTLOCKUP
[ 1111.231663][T22911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1111.231674][T22911] Call Trace:
[ 1111.231681][T22911]  <TASK>
[ 1111.231688][T22911]  dump_stack_lvl+0xe8/0x150
[ 1111.231724][T22911]  should_fail_ex+0x412/0x560
[ 1111.231749][T22911]  should_failslab+0xa8/0x100
[ 1111.231771][T22911]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1111.231787][T22911]  ? __pfx_stack_trace_save+0x10/0x10
[ 1111.231809][T22911]  ? rtnl_newlink+0x136/0x1be0
[ 1111.231832][T22911]  rtnl_newlink+0x136/0x1be0
[ 1111.231850][T22911]  ? kasan_save_track+0x4f/0x80
[ 1111.231864][T22911]  ? kasan_save_track+0x3e/0x80
[ 1111.231876][T22911]  ? kasan_save_free_info+0x46/0x50
[ 1111.231894][T22911]  ? __kasan_slab_free+0x5c/0x80
[ 1111.231907][T22911]  ? kmem_cache_free+0x195/0x610
[ 1111.231924][T22911]  ? __dev_queue_xmit+0x168f/0x3850
[ 1111.231944][T22911]  ? __netlink_deliver_tap+0x5ad/0x850
[ 1111.231961][T22911]  ? netlink_deliver_tap+0x19c/0x1b0
[ 1111.231976][T22911]  ? netlink_unicast+0x7e3/0x9b0
[ 1111.231995][T22911]  ? netlink_sendmsg+0x813/0xb40
[ 1111.232011][T22911]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1111.232028][T22911]  ? do_fast_syscall_32+0x33/0x70
[ 1111.232046][T22911]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1111.232094][T22911]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1111.232117][T22911]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1111.232138][T22911]  ? kmem_cache_free+0x195/0x610
[ 1111.232153][T22911]  ? nlmon_xmit+0xb0/0x100
[ 1111.232180][T22911]  ? __lock_acquire+0x6b5/0x2cf0
[ 1111.232209][T22911]  ? __local_bh_enable_ip+0xd0/0x130
[ 1111.232225][T22911]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1111.232242][T22911]  ? __dev_queue_xmit+0x274/0x3850
[ 1111.232262][T22911]  ? __local_bh_enable_ip+0xd0/0x130
[ 1111.232276][T22911]  ? __dev_queue_xmit+0x274/0x3850
[ 1111.232304][T22911]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1111.232336][T22911]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1111.232354][T22911]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1111.232375][T22911]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1111.232393][T22911]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1111.232410][T22911]  ? ref_tracker_free+0x693/0x840
[ 1111.232428][T22911]  ? __copy_skb_header+0xa3/0x4a0
[ 1111.232452][T22911]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1111.232482][T22911]  netlink_rcv_skb+0x232/0x4b0
[ 1111.232500][T22911]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1111.232521][T22911]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1111.232548][T22911]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1111.232570][T22911]  netlink_unicast+0x80f/0x9b0
[ 1111.232601][T22911]  ? __pfx_netlink_unicast+0x10/0x10
[ 1111.232623][T22911]  ? __alloc_skb+0x193/0x390
[ 1111.232642][T22911]  ? netlink_sendmsg+0x650/0xb40
[ 1111.232658][T22911]  ? skb_put+0x11b/0x210
[ 1111.232681][T22911]  netlink_sendmsg+0x813/0xb40
[ 1111.232717][T22911]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1111.232737][T22911]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1111.232758][T22911]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1111.232778][T22911]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1111.232795][T22911]  ____sys_sendmsg+0xa68/0xad0
[ 1111.232824][T22911]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1111.232849][T22911]  ? kstrtoull+0x12f/0x1d0
[ 1111.232872][T22911]  ___sys_sendmsg+0x2a5/0x360
[ 1111.232892][T22911]  ? __lock_acquire+0x6b5/0x2cf0
[ 1111.232917][T22911]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1111.232940][T22911]  ? get_pid_task+0x20/0x1f0
[ 1111.232959][T22911]  ? get_pid_task+0x20/0x1f0
[ 1111.232974][T22911]  ? get_pid_task+0x20/0x1f0
[ 1111.233015][T22911]  ? __fget_files+0x2a/0x420
[ 1111.233032][T22911]  ? __fget_files+0x3a0/0x420
[ 1111.233058][T22911]  __sys_sendmsg+0x183/0x260
[ 1111.233080][T22911]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1111.233111][T22911]  ? __pfx_ksys_write+0x10/0x10
[ 1111.233142][T22911]  __do_fast_syscall_32+0x1d2/0x540
[ 1111.233161][T22911]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1111.233177][T22911]  ? do_fast_syscall_32+0x33/0x70
[ 1111.233194][T22911]  ? asm_int80_emulation+0x1a/0x20
[ 1111.233209][T22911]  ? do_int80_emulation+0x20e/0x400
[ 1111.233230][T22911]  do_fast_syscall_32+0x33/0x70
[ 1111.233248][T22911]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1111.233268][T22911] RIP: 0023:0xf742d539
[ 1111.233284][T22911] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1111.233300][T22911] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1111.233318][T22911] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280
[ 1111.233329][T22911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1111.233340][T22911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1111.233349][T22911] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1111.233360][T22911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1111.233383][T22911]  </TASK>
[ 1111.270904][T22915] bond4: (slave veth3): Enslaving as an active interface with a down link
[ 1111.460148][T22927] kvm: kvm [22925]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000
[ 1111.646827][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1112.040935][ T5943] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1112.207714][ T5943] usb 5-1: Using ep0 maxpacket: 16
[ 1112.239510][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1112.251636][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1112.262533][ T5943] usb 5-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00
[ 1112.272261][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.274403][T22955] veth1_virt_wifi: entered promiscuous mode
[ 1112.290654][ T5943] usb 5-1: config 0 descriptor??
[ 1112.305127][T22955] veth1_virt_wifi: entered allmulticast mode
[ 1112.538381][ T5943] usb 5-1: string descriptor 0 read error: -71
[ 1112.557431][T22964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5440'.
[ 1112.570122][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input81
[ 1112.586765][   T10] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1112.605271][ T5178] bcm5974 5-1:0.0: could not read from device
[ 1112.619641][ T5178] bcm5974 5-1:0.0: could not read from device
[ 1112.647376][ T5943] usb 5-1: USB disconnect, device number 62
[ 1112.660506][ T5178] bcm5974 5-1:0.0: could not read from device
[ 1112.676288][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1112.757251][   T10] usb 6-1: Using ep0 maxpacket: 8
[ 1112.765468][   T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1112.794976][   T10] usb 6-1: config 1 has no interface number 1
[ 1112.812835][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1112.853232][   T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1112.938400][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1112.951444][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.022322][   T10] usb 6-1: Product: syz
[ 1113.033378][   T10] usb 6-1: Manufacturer: syz
[ 1113.048532][   T10] usb 6-1: SerialNumber: syz
[ 1113.112324][T22979] FAULT_INJECTION: forcing a failure.
[ 1113.112324][T22979] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1113.166265][T22979] CPU: 0 UID: 0 PID: 22979 Comm: syz.0.5444 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1113.166297][T22979] Tainted: [L]=SOFTLOCKUP
[ 1113.166305][T22979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1113.166316][T22979] Call Trace:
[ 1113.166324][T22979]  <TASK>
[ 1113.166332][T22979]  dump_stack_lvl+0xe8/0x150
[ 1113.166359][T22979]  should_fail_ex+0x412/0x560
[ 1113.166395][T22979]  get_futex_key+0x1022/0x1690
[ 1113.166419][T22979]  ? _parse_integer_limit+0x1ae/0x1f0
[ 1113.166447][T22979]  ? __pfx_get_futex_key+0x10/0x10
[ 1113.166469][T22979]  ? kstrtouint+0x6e/0xe0
[ 1113.166495][T22979]  futex_wake_op+0x205/0xdc0
[ 1113.166524][T22979]  ? __pfx_futex_wake_op+0x10/0x10
[ 1113.166562][T22979]  do_futex+0x3bd/0x420
[ 1113.166589][T22979]  ? __pfx_do_futex+0x10/0x10
[ 1113.166610][T22979]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1113.166634][T22979]  __se_sys_futex_time32+0x3ab/0x440
[ 1113.166662][T22979]  ? fput+0xa0/0xd0
[ 1113.166681][T22979]  ? __pfx___se_sys_futex_time32+0x10/0x10
[ 1113.166703][T22979]  ? ksys_write+0x242/0x270
[ 1113.166727][T22979]  ? __pfx_ksys_write+0x10/0x10
[ 1113.166751][T22979]  ? __ia32_sys_futex_time32+0x21/0xf0
[ 1113.166778][T22979]  __do_fast_syscall_32+0x1d2/0x540
[ 1113.166797][T22979]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1113.166814][T22979]  ? do_fast_syscall_32+0x33/0x70
[ 1113.166831][T22979]  ? asm_int80_emulation+0x1a/0x20
[ 1113.166847][T22979]  ? do_int80_emulation+0x20e/0x400
[ 1113.166869][T22979]  do_fast_syscall_32+0x33/0x70
[ 1113.166889][T22979]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1113.166908][T22979] RIP: 0023:0xf73cd539
[ 1113.166924][T22979] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1113.166939][T22979] RSP: 002b:00000000f53b450c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[ 1113.166958][T22979] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000005
[ 1113.166971][T22979] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000080000000
[ 1113.166982][T22979] RBP: 0000000005000000 R08: 0000000000000000 R09: 0000000000000000
[ 1113.166993][T22979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1113.167003][T22979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1113.167030][T22979]  </TASK>
[ 1113.451491][   T10] usb 6-1: 2:1: cannot set freq 15828157 to ep 0x82
[ 1113.479952][   T10] usb 6-1: USB disconnect, device number 87
[ 1113.500300][T22989] FAULT_INJECTION: forcing a failure.
[ 1113.500300][T22989] name failslab, interval 1, probability 0, space 0, times 0
[ 1113.607704][T21782] udevd[21782]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1113.631997][T22989] CPU: 1 UID: 0 PID: 22989 Comm: syz.3.5447 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1113.632032][T22989] Tainted: [L]=SOFTLOCKUP
[ 1113.632040][T22989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1113.632051][T22989] Call Trace:
[ 1113.632059][T22989]  <TASK>
[ 1113.632068][T22989]  dump_stack_lvl+0xe8/0x150
[ 1113.632096][T22989]  should_fail_ex+0x412/0x560
[ 1113.632122][T22989]  should_failslab+0xa8/0x100
[ 1113.632144][T22989]  __kmalloc_cache_noprof+0x83/0x6e0
[ 1113.632164][T22989]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[ 1113.632180][T22989]  ? sctp_transport_new+0x7e/0x620
[ 1113.632208][T22989]  sctp_transport_new+0x7e/0x620
[ 1113.632233][T22989]  sctp_assoc_add_peer+0x259/0x13b0
[ 1113.632256][T22989]  ? sctp_bind_addr_copy+0x380/0x3c0
[ 1113.632281][T22989]  sctp_connect_new_asoc+0x329/0x6b0
[ 1113.632305][T22989]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1113.632328][T22989]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1113.632355][T22989]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1113.632375][T22989]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1113.632397][T22989]  ? sctp_endpoint_lookup_assoc+0x22f/0x260
[ 1113.632421][T22989]  __sctp_connect+0x5cb/0xdc0
[ 1113.632453][T22989]  ? __pfx___sctp_connect+0x10/0x10
[ 1113.632471][T22989]  ? sctp_inet_connect+0xa0/0x210
[ 1113.632488][T22989]  ? preempt_schedule_thunk+0x16/0x30
[ 1113.632519][T22989]  sctp_inet_connect+0x12e/0x210
[ 1113.632542][T22989]  __sys_connect+0x312/0x450
[ 1113.632565][T22989]  ? __pfx___sys_connect+0x10/0x10
[ 1113.632599][T22989]  ? __pfx_ksys_write+0x10/0x10
[ 1113.632626][T22989]  __ia32_sys_connect+0x7a/0x90
[ 1113.632647][T22989]  __do_fast_syscall_32+0x1d2/0x540
[ 1113.632666][T22989]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1113.632682][T22989]  ? do_fast_syscall_32+0x33/0x70
[ 1113.632700][T22989]  ? asm_int80_emulation+0x1a/0x20
[ 1113.632716][T22989]  ? do_int80_emulation+0x20e/0x400
[ 1113.632739][T22989]  do_fast_syscall_32+0x33/0x70
[ 1113.632757][T22989]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1113.632777][T22989] RIP: 0023:0xf742d539
[ 1113.632793][T22989] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1113.632807][T22989] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 000000000000016a
[ 1113.632828][T22989] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300
[ 1113.632840][T22989] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000
[ 1113.632851][T22989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1113.632862][T22989] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1113.632873][T22989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1113.632900][T22989]  </TASK>
[ 1113.736428][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1114.121252][T23007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5453'.
[ 1114.130685][T13903] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1114.159269][T23007] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5453'.
[ 1114.247000][T23013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5456'.
[ 1114.270569][T23013] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5456'.
[ 1114.295081][T13903] usb 2-1: Using ep0 maxpacket: 32
[ 1114.295290][T23013] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5456'.
[ 1114.307468][T13903] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[ 1114.340462][T23015] 
[ 1114.341870][T13903] usb 2-1: config 0 has no interface number 0
[ 1114.342833][T23015] =====================================================
[ 1114.355828][T23015] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1114.358285][T13903] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1114.363395][T23015] syzkaller #0 Tainted: G             L     
[ 1114.363411][T23015] -----------------------------------------------------
[ 1114.363420][T23015] syz.0.5457/23015 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1114.394017][T23015] ffff88806fec06a8 (&new->fa_lock){.-.-}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1114.402733][T23015] 
[ 1114.402733][T23015] and this task is already holding:
[ 1114.410099][T23015] ffff888028a0e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1114.419846][T23015] which would create a new lock dependency:
[ 1114.425717][T23015]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){.-.-}-{3:3}
[ 1114.433809][T23015] 
[ 1114.433809][T23015] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1114.443256][T23015]  (&dev->event_lock#2){..-.}-{3:3}
[ 1114.443300][T23015] 
[ 1114.443300][T23015] ... which became SOFTIRQ-irq-safe at:
[ 1114.456174][T23015]   lock_acquire+0x106/0x330
[ 1114.460770][T23015]   _raw_spin_lock_irqsave+0x40/0x60
[ 1114.466053][T23015]   input_inject_event+0xa5/0x340
[ 1114.471063][T23015]   led_trigger_event+0x138/0x210
[ 1114.476091][T23015]   kbd_bh+0x1f3/0x300
[ 1114.480177][T23015]   tasklet_action_common+0x2da/0x4b0
[ 1114.485550][T23015]   handle_softirqs+0x22a/0x7c0
[ 1114.490396][T23015]   __irq_exit_rcu+0x5f/0x150
[ 1114.495063][T23015]   irq_exit_rcu+0x9/0x30
[ 1114.499410][T23015]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1114.505121][T23015]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1114.511183][T23015]   _raw_spin_unlock_irq+0x29/0x50
[ 1114.516291][T23015]   n_tty_ioctl_helper+0x38a/0x4d0
[ 1114.521398][T23015]   tty_ioctl+0x9c5/0xde0
[ 1114.525724][T23015]   __ia32_compat_sys_ioctl+0x5ea/0x950
[ 1114.531261][T23015]   __do_fast_syscall_32+0x1d2/0x540
[ 1114.536543][T23015]   do_fast_syscall_32+0x33/0x70
[ 1114.541470][T23015]   entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1114.547881][T23015] 
[ 1114.547881][T23015] to a SOFTIRQ-irq-unsafe lock:
[ 1114.554881][T23015]  (tasklist_lock){.+.+}-{3:3}
[ 1114.554907][T23015] 
[ 1114.554907][T23015] ... which became SOFTIRQ-irq-unsafe at:
[ 1114.567521][T23015] ...
[ 1114.567529][T23015]   lock_acquire+0x106/0x330
[ 1114.574759][T23015]   _raw_read_lock+0x36/0x50
[ 1114.579334][T23015]   __do_wait+0xde/0x740
[ 1114.583567][T23015]   do_wait+0x1e7/0x4f0
[ 1114.587718][T23015]   kernel_wait+0xd6/0x1c0
[ 1114.592123][T23015]   call_usermodehelper_exec_work+0xbe/0x230
[ 1114.598097][T23015]   process_scheduled_works+0xaec/0x17a0
[ 1114.603723][T23015]   worker_thread+0xda6/0x1360
[ 1114.608482][T23015]   kthread+0x726/0x8b0
[ 1114.612800][T23015]   ret_from_fork+0x51b/0xa40
[ 1114.617467][T23015]   ret_from_fork_asm+0x1a/0x30
[ 1114.622326][T23015] 
[ 1114.622326][T23015] other info that might help us debug this:
[ 1114.622326][T23015] 
[ 1114.632535][T23015] Chain exists of:
[ 1114.632535][T23015]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[ 1114.632535][T23015] 
[ 1114.646087][T23015]  Possible interrupt unsafe locking scenario:
[ 1114.646087][T23015] 
[ 1114.654393][T23015]        CPU0                    CPU1
[ 1114.659754][T23015]        ----                    ----
[ 1114.665208][T23015]   lock(tasklist_lock);
[ 1114.669461][T23015]                                local_irq_disable();
[ 1114.676222][T23015]                                lock(&dev->event_lock#2);
[ 1114.683421][T23015]                                lock(&client->buffer_lock);
[ 1114.690798][T23015]   <Interrupt>
[ 1114.694237][T23015]     lock(&dev->event_lock#2);
[ 1114.699088][T23015] 
[ 1114.699088][T23015]  *** DEADLOCK ***
[ 1114.699088][T23015] 
[ 1114.707217][T23015] 7 locks held by syz.0.5457/23015:
[ 1114.712397][T23015]  #0: ffff888029ca6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[ 1114.721556][T23015]  #1: ffff88801d75a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 1114.731648][T23015]  #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 1114.741297][T23015]  #3: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1114.750859][T23015]  #4: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 1114.760423][T23015]  #5: ffff888028a0e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1114.770604][T23015]  #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1114.779647][T23015] 
[ 1114.779647][T23015] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1114.790040][T23015]  -> (&dev->event_lock#2){..-.}-{3:3} {
[ 1114.795683][T23015]     IN-SOFTIRQ-W at:
[ 1114.799733][T23015]                       lock_acquire+0x106/0x330
[ 1114.806054][T23015]                       _raw_spin_lock_irqsave+0x40/0x60
[ 1114.813069][T23015]                       input_inject_event+0xa5/0x340
[ 1114.819819][T23015]                       led_trigger_event+0x138/0x210
[ 1114.826575][T23015]                       kbd_bh+0x1f3/0x300
[ 1114.832371][T23015]                       tasklet_action_common+0x2da/0x4b0
[ 1114.839469][T23015]                       handle_softirqs+0x22a/0x7c0
[ 1114.846044][T23015]                       __irq_exit_rcu+0x5f/0x150
[ 1114.852480][T23015]                       irq_exit_rcu+0x9/0x30
[ 1114.858530][T23015]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1114.865970][T23015]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1114.873773][T23015]                       _raw_spin_unlock_irq+0x29/0x50
[ 1114.880619][T23015]                       n_tty_ioctl_helper+0x38a/0x4d0
[ 1114.887636][T23015]                       tty_ioctl+0x9c5/0xde0
[ 1114.893698][T23015]                       __ia32_compat_sys_ioctl+0x5ea/0x950
[ 1114.900970][T23015]                       __do_fast_syscall_32+0x1d2/0x540
[ 1114.907981][T23015]                       do_fast_syscall_32+0x33/0x70
[ 1114.914642][T23015]                       entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1114.922870][T23015]     INITIAL USE at:
[ 1114.926840][T23015]                      lock_acquire+0x106/0x330
[ 1114.933075][T23015]                      _raw_spin_lock_irqsave+0x40/0x60
[ 1114.940001][T23015]                      input_inject_event+0xa5/0x340
[ 1114.946680][T23015]                      kbd_led_trigger_activate+0xbc/0x100
[ 1114.953897][T23015]                      led_trigger_set+0x535/0x960
[ 1114.960387][T23015]                      led_trigger_set_default+0x260/0x2a0
[ 1114.967573][T23015]                      led_classdev_register_ext+0x787/0x9c0
[ 1114.974932][T23015]                      input_leds_connect+0x517/0x790
[ 1114.981686][T23015]                      input_register_device+0xd00/0x1160
[ 1114.988802][T23015]                      atkbd_connect+0x731/0xa50
[ 1114.995133][T23015]                      serio_driver_probe+0x82/0xd0
[ 1115.001724][T23015]                      really_probe+0x267/0xaf0
[ 1115.007983][T23015]                      __driver_probe_device+0x18c/0x320
[ 1115.015014][T23015]                      driver_probe_device+0x4f/0x240
[ 1115.021793][T23015]                      __driver_attach+0x349/0x640
[ 1115.028283][T23015]                      bus_for_each_dev+0x23b/0x2c0
[ 1115.034956][T23015]                      serio_handle_event+0x232/0x10d0
[ 1115.041797][T23015]                      process_scheduled_works+0xaec/0x17a0
[ 1115.049077][T23015]                      worker_thread+0xda6/0x1360
[ 1115.055479][T23015]                      kthread+0x726/0x8b0
[ 1115.061359][T23015]                      ret_from_fork+0x51b/0xa40
[ 1115.067681][T23015]                      ret_from_fork_asm+0x1a/0x30
[ 1115.074174][T23015]   }
[ 1115.076745][T23015]   ... key      at: [<ffffffff9a372b20>] input_allocate_device.__key.7+0x0/0x20
[ 1115.085842][T23015] -> (&client->buffer_lock){....}-{3:3} {
[ 1115.091565][T23015]    INITIAL USE at:
[ 1115.095527][T23015]                    lock_acquire+0x106/0x330
[ 1115.101597][T23015]                    _raw_spin_lock+0x2e/0x40
[ 1115.107659][T23015]                    evdev_pass_values+0xb9/0xbd0
[ 1115.114098][T23015]                    evdev_events+0x1e6/0x340
[ 1115.120162][T23015]                    input_pass_values+0x288/0x890
[ 1115.126655][T23015]                    input_event_dispose+0x330/0x6b0
[ 1115.133346][T23015]                    input_inject_event+0x1dd/0x340
[ 1115.139920][T23015]                    evdev_write+0x325/0x4c0
[ 1115.145892][T23015]                    vfs_write+0x29a/0xb90
[ 1115.151688][T23015]                    ksys_write+0x150/0x270
[ 1115.157570][T23015]                    __do_fast_syscall_32+0x1d2/0x540
[ 1115.164323][T23015]                    do_fast_syscall_32+0x33/0x70
[ 1115.170723][T23015]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1115.178603][T23015]  }
[ 1115.181083][T23015]  ... key      at: [<ffffffff9a372dc0>] evdev_open.__key.27+0x0/0x20
[ 1115.189222][T23015]  ... acquired at:
[ 1115.193008][T23015]    _raw_spin_lock+0x2e/0x40
[ 1115.197677][T23015]    evdev_pass_values+0xb9/0xbd0
[ 1115.202691][T23015]    evdev_events+0x1e6/0x340
[ 1115.207361][T23015]    input_pass_values+0x288/0x890
[ 1115.212462][T23015]    input_event_dispose+0x330/0x6b0
[ 1115.217731][T23015]    input_inject_event+0x1dd/0x340
[ 1115.222915][T23015]    evdev_write+0x325/0x4c0
[ 1115.227491][T23015]    vfs_write+0x29a/0xb90
[ 1115.231897][T23015]    ksys_write+0x150/0x270
[ 1115.236393][T23015]    __do_fast_syscall_32+0x1d2/0x540
[ 1115.241752][T23015]    do_fast_syscall_32+0x33/0x70
[ 1115.246761][T23015]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1115.253250][T23015] 
[ 1115.255561][T23015] 
[ 1115.255561][T23015] the dependencies between the lock to be acquired
[ 1115.255570][T23015]  and SOFTIRQ-irq-unsafe lock:
[ 1115.269050][T23015]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1115.274337][T23015]      HARDIRQ-ON-R at:
[ 1115.278473][T23015]                         lock_acquire+0x106/0x330
[ 1115.284966][T23015]                         _raw_read_lock+0x36/0x50
[ 1115.291450][T23015]                         __do_wait+0xde/0x740
[ 1115.297591][T23015]                         do_wait+0x1e7/0x4f0
[ 1115.303654][T23015]                         kernel_wait+0xd6/0x1c0
[ 1115.309989][T23015]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1115.317899][T23015]                         process_scheduled_works+0xaec/0x17a0
[ 1115.325454][T23015]                         worker_thread+0xda6/0x1360
[ 1115.332131][T23015]                         kthread+0x726/0x8b0
[ 1115.338197][T23015]                         ret_from_fork+0x51b/0xa40
[ 1115.344778][T23015]                         ret_from_fork_asm+0x1a/0x30
[ 1115.351528][T23015]      SOFTIRQ-ON-R at:
[ 1115.355673][T23015]                         lock_acquire+0x106/0x330
[ 1115.362161][T23015]                         _raw_read_lock+0x36/0x50
[ 1115.368651][T23015]                         __do_wait+0xde/0x740
[ 1115.374794][T23015]                         do_wait+0x1e7/0x4f0
[ 1115.380846][T23015]                         kernel_wait+0xd6/0x1c0
[ 1115.387158][T23015]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1115.395039][T23015]                         process_scheduled_works+0xaec/0x17a0
[ 1115.402570][T23015]                         worker_thread+0xda6/0x1360
[ 1115.409236][T23015]                         kthread+0x726/0x8b0
[ 1115.415295][T23015]                         ret_from_fork+0x51b/0xa40
[ 1115.421871][T23015]                         ret_from_fork_asm+0x1a/0x30
[ 1115.428639][T23015]      INITIAL USE at:
[ 1115.432697][T23015]                        lock_acquire+0x106/0x330
[ 1115.439160][T23015]                        _raw_write_lock_irq+0x3d/0x50
[ 1115.446015][T23015]                        copy_process+0x2199/0x3980
[ 1115.452591][T23015]                        kernel_clone+0x248/0x870
[ 1115.458993][T23015]                        user_mode_thread+0x110/0x180
[ 1115.465741][T23015]                        rest_init+0x23/0x300
[ 1115.471799][T23015]                        start_kernel+0x380/0x3d0
[ 1115.478201][T23015]                        x86_64_start_reservations+0x24/0x30
[ 1115.485559][T23015]                        x86_64_start_kernel+0x143/0x1c0
[ 1115.492577][T23015]                        common_startup_64+0x13e/0x147
[ 1115.499522][T23015]      INITIAL READ USE at:
[ 1115.504032][T23015]                             lock_acquire+0x106/0x330
[ 1115.510877][T23015]                             _raw_read_lock+0x36/0x50
[ 1115.517796][T23015]                             __do_wait+0xde/0x740
[ 1115.524288][T23015]                             do_wait+0x1e7/0x4f0
[ 1115.530708][T23015]                             kernel_wait+0xd6/0x1c0
[ 1115.537377][T23015]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1115.545610][T23015]                             process_scheduled_works+0xaec/0x17a0
[ 1115.553490][T23015]                             worker_thread+0xda6/0x1360
[ 1115.560518][T23015]                             kthread+0x726/0x8b0
[ 1115.566934][T23015]                             ret_from_fork+0x51b/0xa40
[ 1115.573863][T23015]                             ret_from_fork_asm+0x1a/0x30
[ 1115.580960][T23015]    }
[ 1115.583614][T23015]    ... key      at: [<ffffffff8e20c058>] tasklist_lock+0x18/0x40
[ 1115.591583][T23015]    ... acquired at:
[ 1115.595545][T23015]    _raw_read_lock+0x36/0x50
[ 1115.600207][T23015]    send_sigio+0x101/0x370
[ 1115.604699][T23015]    dnotify_handle_event+0x169/0x440
[ 1115.610059][T23015]    fsnotify+0x168e/0x1ae0
[ 1115.614551][T23015]    __fsnotify_parent+0x50d/0x620
[ 1115.620019][T23015]    notify_change+0xc55/0xf40
[ 1115.624772][T23015]    do_truncate+0x1c2/0x250
[ 1115.629700][T23015]    do_ftruncate+0x4db/0x5c0
[ 1115.634386][T23015]    __ia32_compat_sys_ftruncate+0x9e/0xf0
[ 1115.640206][T23015]    __do_fast_syscall_32+0x1d2/0x540
[ 1115.645665][T23015]    do_fast_syscall_32+0x33/0x70
[ 1115.650694][T23015]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1115.657203][T23015] 
[ 1115.659522][T23015]  -> (&f_owner->lock){.-.-}-{3:3} {
[ 1115.664908][T23015]     IN-HARDIRQ-R at:
[ 1115.668975][T23015]                       lock_acquire+0x106/0x330
[ 1115.675295][T23015]                       _raw_read_lock_irqsave+0x48/0x60
[ 1115.682309][T23015]                       send_sigio+0x38/0x370
[ 1115.688369][T23015]                       kill_fasync+0x24d/0x4d0
[ 1115.695035][T23015]                       tty_wakeup+0xbe/0x100
[ 1115.701084][T23015]                       tty_port_default_wakeup+0xfb/0x170
[ 1115.708619][T23015]                       serial8250_tx_chars+0x72e/0x970
[ 1115.715538][T23015]                       serial8250_handle_irq+0x633/0xbb0
[ 1115.722719][T23015]                       serial8250_default_handle_irq+0xbf/0x200
[ 1115.730688][T23015]                       serial8250_interrupt+0x8d/0x180
[ 1115.737609][T23015]                       __handle_irq_event_percpu+0x216/0x960
[ 1115.745057][T23015]                       handle_irq_event+0x8b/0x1e0
[ 1115.751635][T23015]                       handle_edge_irq+0x23b/0xa10
[ 1115.758213][T23015]                       __common_interrupt+0x141/0x1f0
[ 1115.765064][T23015]                       common_interrupt+0x5e/0xe0
[ 1115.771556][T23015]                       asm_common_interrupt+0x26/0x40
[ 1115.778391][T23015]                       lock_acquire+0x221/0x330
[ 1115.784711][T23015]                       _raw_write_lock+0x2e/0x40
[ 1115.791107][T23015]                       addrconf_rs_timer+0x39f/0x6d0
[ 1115.797858][T23015]                       call_timer_fn+0x192/0x5a0
[ 1115.804280][T23015]                       __run_timer_base+0x652/0x8b0
[ 1115.810957][T23015]                       run_timer_softirq+0xb7/0x170
[ 1115.817629][T23015]                       handle_softirqs+0x22a/0x7c0
[ 1115.824204][T23015]                       __irq_exit_rcu+0x5f/0x150
[ 1115.830641][T23015]                       irq_exit_rcu+0x9/0x30
[ 1115.836706][T23015]                       common_interrupt+0xbb/0xe0
[ 1115.843231][T23015]                       asm_common_interrupt+0x26/0x40
[ 1115.850069][T23015]                       preempt_schedule_irq+0x48/0xa0
[ 1115.856917][T23015]                       irqentry_exit+0x597/0x620
[ 1115.863315][T23015]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1115.871111][T23015]                       debug_lockdep_rcu_enabled+0x0/0x40
[ 1115.878293][T23015]                       unmap_page_range+0x3902/0x4030
[ 1115.885127][T23015]                       unmap_vmas+0x3c0/0x5c0
[ 1115.891267][T23015]                       exit_mmap+0x251/0xb30
[ 1115.897328][T23015]                       __mmput+0x118/0x430
[ 1115.903219][T23015]                       exit_mm+0x168/0x220
[ 1115.909189][T23015]                       do_exit+0x62e/0x2310
[ 1115.915245][T23015]                       __pfx_do_group_exit+0x0/0x10
[ 1115.922014][T23015]                       ia32_sys_call+0x2211/0x2220
[ 1115.928590][T23015]                       __do_fast_syscall_32+0x1d2/0x540
[ 1115.935603][T23015]                       do_fast_syscall_32+0x33/0x70
[ 1115.942266][T23015]                       entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1115.950407][T23015]     IN-SOFTIRQ-R at:
[ 1115.954465][T23015]                       lock_acquire+0x106/0x330
[ 1115.960781][T23015]                       _raw_read_lock_irqsave+0x48/0x60
[ 1115.967796][T23015]                       send_sigio+0x38/0x370
[ 1115.973847][T23015]                       kill_fasync+0x24d/0x4d0
[ 1115.980074][T23015]                       tty_wakeup+0xbe/0x100
[ 1115.986124][T23015]                       tty_port_default_wakeup+0xfb/0x170
[ 1115.993310][T23015]                       serial8250_tx_chars+0x72e/0x970
[ 1116.000232][T23015]                       serial8250_handle_irq+0x633/0xbb0
[ 1116.007326][T23015]                       serial8250_default_handle_irq+0xbf/0x200
[ 1116.015035][T23015]                       serial8250_interrupt+0x8d/0x180
[ 1116.021954][T23015]                       __handle_irq_event_percpu+0x216/0x960
[ 1116.029410][T23015]                       handle_irq_event+0x8b/0x1e0
[ 1116.035981][T23015]                       handle_edge_irq+0x23b/0xa10
[ 1116.042550][T23015]                       __common_interrupt+0x141/0x1f0
[ 1116.049388][T23015]                       common_interrupt+0x5e/0xe0
[ 1116.055893][T23015]                       asm_common_interrupt+0x26/0x40
[ 1116.062755][T23015]                       lock_acquire+0x221/0x330
[ 1116.069092][T23015]                       _raw_write_lock+0x2e/0x40
[ 1116.075519][T23015]                       addrconf_rs_timer+0x39f/0x6d0
[ 1116.082285][T23015]                       call_timer_fn+0x192/0x5a0
[ 1116.088694][T23015]                       __run_timer_base+0x652/0x8b0
[ 1116.095355][T23015]                       run_timer_softirq+0xb7/0x170
[ 1116.102025][T23015]                       handle_softirqs+0x22a/0x7c0
[ 1116.108599][T23015]                       __irq_exit_rcu+0x5f/0x150
[ 1116.114996][T23015]                       irq_exit_rcu+0x9/0x30
[ 1116.121044][T23015]                       common_interrupt+0xbb/0xe0
[ 1116.127531][T23015]                       asm_common_interrupt+0x26/0x40
[ 1116.134362][T23015]                       preempt_schedule_irq+0x48/0xa0
[ 1116.141215][T23015]                       irqentry_exit+0x597/0x620
[ 1116.147615][T23015]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1116.155406][T23015]                       debug_lockdep_rcu_enabled+0x0/0x40
[ 1116.162596][T23015]                       unmap_page_range+0x3902/0x4030
[ 1116.169434][T23015]                       unmap_vmas+0x3c0/0x5c0
[ 1116.175747][T23015]                       exit_mmap+0x251/0xb30
[ 1116.181803][T23015]                       __mmput+0x118/0x430
[ 1116.187703][T23015]                       exit_mm+0x168/0x220
[ 1116.193582][T23015]                       do_exit+0x62e/0x2310
[ 1116.199549][T23015]                       __pfx_do_group_exit+0x0/0x10
[ 1116.206212][T23015]                       ia32_sys_call+0x2211/0x2220
[ 1116.212880][T23015]                       __do_fast_syscall_32+0x1d2/0x540
[ 1116.219898][T23015]                       do_fast_syscall_32+0x33/0x70
[ 1116.226564][T23015]                       entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1116.234714][T23015]     INITIAL USE at:
[ 1116.238714][T23015]                      lock_acquire+0x106/0x330
[ 1116.244953][T23015]                      _raw_write_lock_irq+0x3d/0x50
[ 1116.251619][T23015]                      __f_setown+0x67/0x370
[ 1116.257588][T23015]                      tty_fasync+0x2db/0x350
[ 1116.263647][T23015]                      do_fcntl+0x1201/0x1a20
[ 1116.269708][T23015]                      do_compat_fcntl64+0x51e/0x7e0
[ 1116.276375][T23015]                      __do_fast_syscall_32+0x1d2/0x540
[ 1116.283309][T23015]                      do_fast_syscall_32+0x33/0x70
[ 1116.289913][T23015]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1116.298079][T23015]     INITIAL READ USE at:
[ 1116.302489][T23015]                           lock_acquire+0x106/0x330
[ 1116.309156][T23015]                           _raw_read_lock_irqsave+0x48/0x60
[ 1116.316528][T23015]                           send_sigio+0x38/0x370
[ 1116.322957][T23015]                           dnotify_handle_event+0x169/0x440
[ 1116.330319][T23015]                           fsnotify+0x1831/0x1ae0
[ 1116.336831][T23015]                           fsnotify_mkdir+0x121/0x180
[ 1116.343687][T23015]                           vfs_mkdir+0x78f/0x870
[ 1116.350107][T23015]                           do_mkdirat+0x27d/0x4b0
[ 1116.356688][T23015]                           __ia32_sys_mkdir+0x6c/0x80
[ 1116.363531][T23015]                           __do_fast_syscall_32+0x1d2/0x540
[ 1116.371025][T23015]                           do_fast_syscall_32+0x33/0x70
[ 1116.378037][T23015]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1116.386559][T23015]   }
[ 1116.389131][T23015]   ... key      at: [<ffffffff9a054c60>] file_f_owner_allocate.__key+0x0/0x20
[ 1116.398053][T23015]   ... acquired at:
[ 1116.401932][T23015]    _raw_read_lock_irqsave+0x48/0x60
[ 1116.407291][T23015]    send_sigio+0x38/0x370
[ 1116.411695][T23015]    kill_fasync+0x24d/0x4d0
[ 1116.416274][T23015]    sock_wake_async+0x137/0x160
[ 1116.421288][T23015]    sk_wake_async+0x184/0x280
[ 1116.426037][T23015]    unix_release_sock+0x74f/0xc80
[ 1116.431225][T23015]    unix_release+0x92/0xd0
[ 1116.435738][T23015]    sock_close+0xc3/0x240
[ 1116.440165][T23015]    __fput+0x44f/0xa70
[ 1116.444319][T23015]    task_work_run+0x1d9/0x270
[ 1116.449158][T23015]    get_signal+0x11eb/0x1330
[ 1116.453833][T23015]    arch_do_signal_or_restart+0xbc/0x830
[ 1116.459627][T23015]    exit_to_user_mode_loop+0x86/0x480
[ 1116.465073][T23015]    __do_fast_syscall_32+0x38e/0x540
[ 1116.470430][T23015]    do_fast_syscall_32+0x33/0x70
[ 1116.475437][T23015]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1116.481928][T23015] 
[ 1116.484237][T23015] -> (&new->fa_lock){.-.-}-{3:3} {
[ 1116.489351][T23015]    IN-HARDIRQ-R at:
[ 1116.493322][T23015]                     lock_acquire+0x106/0x330
[ 1116.499469][T23015]                     _raw_read_lock_irqsave+0x48/0x60
[ 1116.506325][T23015]                     kill_fasync+0x199/0x4d0
[ 1116.512384][T23015]                     tty_wakeup+0xbe/0x100
[ 1116.518262][T23015]                     tty_port_default_wakeup+0xfb/0x170
[ 1116.525271][T23015]                     serial8250_tx_chars+0x72e/0x970
[ 1116.532037][T23015]                     serial8250_handle_irq+0x633/0xbb0
[ 1116.538963][T23015]                     serial8250_default_handle_irq+0xbf/0x200
[ 1116.546490][T23015]                     serial8250_interrupt+0x8d/0x180
[ 1116.553235][T23015]                     __handle_irq_event_percpu+0x216/0x960
[ 1116.560504][T23015]                     handle_irq_event+0x8b/0x1e0
[ 1116.566990][T23015]                     handle_edge_irq+0x23b/0xa10
[ 1116.573387][T23015]                     __common_interrupt+0x141/0x1f0
[ 1116.580062][T23015]                     common_interrupt+0x5e/0xe0
[ 1116.586381][T23015]                     asm_common_interrupt+0x26/0x40
[ 1116.593236][T23015]                     lock_acquire+0x221/0x330
[ 1116.599465][T23015]                     _raw_write_lock+0x2e/0x40
[ 1116.605695][T23015]                     addrconf_rs_timer+0x39f/0x6d0
[ 1116.612271][T23015]                     call_timer_fn+0x192/0x5a0
[ 1116.618501][T23015]                     __run_timer_base+0x652/0x8b0
[ 1116.624988][T23015]                     run_timer_softirq+0xb7/0x170
[ 1116.631474][T23015]                     handle_softirqs+0x22a/0x7c0
[ 1116.637869][T23015]                     __irq_exit_rcu+0x5f/0x150
[ 1116.644090][T23015]                     irq_exit_rcu+0x9/0x30
[ 1116.649964][T23015]                     common_interrupt+0xbb/0xe0
[ 1116.656280][T23015]                     asm_common_interrupt+0x26/0x40
[ 1116.663026][T23015]                     preempt_schedule_irq+0x48/0xa0
[ 1116.669688][T23015]                     irqentry_exit+0x597/0x620
[ 1116.675912][T23015]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1116.683555][T23015]                     debug_lockdep_rcu_enabled+0x0/0x40
[ 1116.690589][T23015]                     unmap_page_range+0x3902/0x4030
[ 1116.697279][T23015]                     unmap_vmas+0x3c0/0x5c0
[ 1116.703257][T23015]                     exit_mmap+0x251/0xb30
[ 1116.709151][T23015]                     __mmput+0x118/0x430
[ 1116.714870][T23015]                     exit_mm+0x168/0x220
[ 1116.720580][T23015]                     do_exit+0x62e/0x2310
[ 1116.726380][T23015]                     __pfx_do_group_exit+0x0/0x10
[ 1116.732868][T23015]                     ia32_sys_call+0x2211/0x2220
[ 1116.739270][T23015]                     __do_fast_syscall_32+0x1d2/0x540
[ 1116.746125][T23015]                     do_fast_syscall_32+0x33/0x70
[ 1116.752619][T23015]                     entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1116.761115][T23015]    IN-SOFTIRQ-R at:
[ 1116.765085][T23015]                     lock_acquire+0x106/0x330
[ 1116.771228][T23015]                     _raw_read_lock_irqsave+0x48/0x60
[ 1116.778063][T23015]                     kill_fasync+0x199/0x4d0
[ 1116.784120][T23015]                     tty_wakeup+0xbe/0x100
[ 1116.790001][T23015]                     tty_port_default_wakeup+0xfb/0x170
[ 1116.797010][T23015]                     serial8250_tx_chars+0x72e/0x970
[ 1116.803760][T23015]                     serial8250_handle_irq+0x633/0xbb0
[ 1116.810679][T23015]                     serial8250_default_handle_irq+0xbf/0x200
[ 1116.818210][T23015]                     serial8250_interrupt+0x8d/0x180
[ 1116.824965][T23015]                     __handle_irq_event_percpu+0x216/0x960
[ 1116.832267][T23015]                     handle_irq_event+0x8b/0x1e0
[ 1116.838691][T23015]                     handle_edge_irq+0x23b/0xa10
[ 1116.845105][T23015]                     __common_interrupt+0x141/0x1f0
[ 1116.851796][T23015]                     common_interrupt+0x5e/0xe0
[ 1116.858117][T23015]                     asm_common_interrupt+0x26/0x40
[ 1116.864782][T23015]                     lock_acquire+0x221/0x330
[ 1116.870924][T23015]                     _raw_write_lock+0x2e/0x40
[ 1116.877148][T23015]                     addrconf_rs_timer+0x39f/0x6d0
[ 1116.883730][T23015]                     call_timer_fn+0x192/0x5a0
[ 1116.889960][T23015]                     __run_timer_base+0x652/0x8b0
[ 1116.896540][T23015]                     run_timer_softirq+0xb7/0x170
[ 1116.903052][T23015]                     handle_softirqs+0x22a/0x7c0
[ 1116.909452][T23015]                     __irq_exit_rcu+0x5f/0x150
[ 1116.915674][T23015]                     irq_exit_rcu+0x9/0x30
[ 1116.921554][T23015]                     common_interrupt+0xbb/0xe0
[ 1116.927892][T23015]                     asm_common_interrupt+0x26/0x40
[ 1116.934730][T23015]                     preempt_schedule_irq+0x48/0xa0
[ 1116.941391][T23015]                     irqentry_exit+0x597/0x620
[ 1116.947621][T23015]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1116.955324][T23015]                     debug_lockdep_rcu_enabled+0x0/0x40
[ 1116.962511][T23015]                     unmap_page_range+0x3902/0x4030
[ 1116.969177][T23015]                     unmap_vmas+0x3c0/0x5c0
[ 1116.975141][T23015]                     exit_mmap+0x251/0xb30
[ 1116.981026][T23015]                     __mmput+0x118/0x430
[ 1116.986741][T23015]                     exit_mm+0x168/0x220
[ 1116.992534][T23015]                     do_exit+0x62e/0x2310
[ 1116.998333][T23015]                     __pfx_do_group_exit+0x0/0x10
[ 1117.004826][T23015]                     ia32_sys_call+0x2211/0x2220
[ 1117.011310][T23015]                     __do_fast_syscall_32+0x1d2/0x540
[ 1117.018240][T23015]                     do_fast_syscall_32+0x33/0x70
[ 1117.024741][T23015]                     entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1117.033086][T23015]    INITIAL USE at:
[ 1117.036981][T23015]                    lock_acquire+0x106/0x330
[ 1117.043047][T23015]                    _raw_write_lock_irq+0x3d/0x50
[ 1117.049534][T23015]                    fasync_remove_entry+0xf1/0x1c0
[ 1117.056111][T23015]                    tty_fasync+0x13c/0x350
[ 1117.062031][T23015]                    __fput+0x8a5/0xa70
[ 1117.067602][T23015]                    task_work_run+0x1d9/0x270
[ 1117.073757][T23015]                    exit_to_user_mode_loop+0xed/0x480
[ 1117.080605][T23015]                    __do_fast_syscall_32+0x38e/0x540
[ 1117.087363][T23015]                    do_fast_syscall_32+0x33/0x70
[ 1117.093760][T23015]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1117.101637][T23015]    INITIAL READ USE at:
[ 1117.106036][T23015]                         lock_acquire+0x106/0x330
[ 1117.112528][T23015]                         _raw_read_lock_irqsave+0x48/0x60
[ 1117.119707][T23015]                         kill_fasync+0x199/0x4d0
[ 1117.126109][T23015]                         splice_file_to_pipe+0x540/0x6b0
[ 1117.133205][T23015]                         do_splice+0x116f/0x1910
[ 1117.139605][T23015]                         __se_sys_splice+0x353/0x490
[ 1117.146352][T23015]                         __do_fast_syscall_32+0x1d2/0x540
[ 1117.153548][T23015]                         do_fast_syscall_32+0x33/0x70
[ 1117.160384][T23015]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1117.168700][T23015]  }
[ 1117.171185][T23015]  ... key      at: [<ffffffff9a054c80>] fasync_insert_entry.__key+0x0/0x20
[ 1117.179936][T23015]  ... acquired at:
[ 1117.183722][T23015]    _raw_read_lock_irqsave+0x48/0x60
[ 1117.189080][T23015]    kill_fasync+0x199/0x4d0
[ 1117.193658][T23015]    evdev_pass_values+0x627/0xbd0
[ 1117.198756][T23015]    evdev_events+0x1e6/0x340
[ 1117.203421][T23015]    input_pass_values+0x288/0x890
[ 1117.208519][T23015]    input_event_dispose+0x330/0x6b0
[ 1117.213794][T23015]    input_inject_event+0x1dd/0x340
[ 1117.218976][T23015]    evdev_write+0x325/0x4c0
[ 1117.223553][T23015]    vfs_write+0x29a/0xb90
[ 1117.227973][T23015]    ksys_write+0x150/0x270
[ 1117.232681][T23015]    __do_fast_syscall_32+0x1d2/0x540
[ 1117.238081][T23015]    do_fast_syscall_32+0x33/0x70
[ 1117.243112][T23015]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1117.249606][T23015] 
[ 1117.251925][T23015] 
[ 1117.251925][T23015] stack backtrace:
[ 1117.257805][T23015] CPU: 0 UID: 0 PID: 23015 Comm: syz.0.5457 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1117.257829][T23015] Tainted: [L]=SOFTLOCKUP
[ 1117.257835][T23015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1117.257846][T23015] Call Trace:
[ 1117.257856][T23015]  <TASK>
[ 1117.257864][T23015]  dump_stack_lvl+0xe8/0x150
[ 1117.257886][T23015]  __lock_acquire+0x2a94/0x2cf0
[ 1117.257914][T23015]  ? kill_fasync+0x199/0x4d0
[ 1117.257933][T23015]  lock_acquire+0x106/0x330
[ 1117.257952][T23015]  ? kill_fasync+0x199/0x4d0
[ 1117.257972][T23015]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1117.257990][T23015]  _raw_read_lock_irqsave+0x48/0x60
[ 1117.258006][T23015]  ? kill_fasync+0x199/0x4d0
[ 1117.258024][T23015]  kill_fasync+0x199/0x4d0
[ 1117.258042][T23015]  ? kill_fasync+0x53/0x4d0
[ 1117.258061][T23015]  evdev_pass_values+0x627/0xbd0
[ 1117.258084][T23015]  ? evdev_pass_values+0x5d1/0xbd0
[ 1117.258106][T23015]  evdev_events+0x1e6/0x340
[ 1117.258126][T23015]  ? evdev_events+0x79/0x340
[ 1117.258145][T23015]  ? input_pass_values+0x8d/0x890
[ 1117.258164][T23015]  input_pass_values+0x288/0x890
[ 1117.258185][T23015]  ? input_handle_event+0x70c/0xf30
[ 1117.258202][T23015]  input_event_dispose+0x330/0x6b0
[ 1117.258219][T23015]  input_inject_event+0x1dd/0x340
[ 1117.258236][T23015]  ? input_inject_event+0xb6/0x340
[ 1117.258253][T23015]  evdev_write+0x325/0x4c0
[ 1117.258278][T23015]  ? __lock_acquire+0x6b5/0x2cf0
[ 1117.258298][T23015]  ? __pfx_evdev_write+0x10/0x10
[ 1117.258318][T23015]  ? bpf_lsm_file_permission+0x9/0x20
[ 1117.258336][T23015]  ? security_file_permission+0x75/0x260
[ 1117.258352][T23015]  ? rw_verify_area+0x255/0x4d0
[ 1117.258371][T23015]  ? __pfx_evdev_write+0x10/0x10
[ 1117.258391][T23015]  vfs_write+0x29a/0xb90
[ 1117.258414][T23015]  ? __pfx_vfs_write+0x10/0x10
[ 1117.258434][T23015]  ? __fget_files+0x2a/0x420
[ 1117.258451][T23015]  ? __fget_files+0x2a/0x420
[ 1117.258466][T23015]  ? __fget_files+0x3a0/0x420
[ 1117.258482][T23015]  ? __fget_files+0x2a/0x420
[ 1117.258500][T23015]  ksys_write+0x150/0x270
[ 1117.258521][T23015]  ? __pfx_ksys_write+0x10/0x10
[ 1117.258544][T23015]  __do_fast_syscall_32+0x1d2/0x540
[ 1117.258562][T23015]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1117.258577][T23015]  ? do_fast_syscall_32+0x33/0x70
[ 1117.258593][T23015]  ? asm_int80_emulation+0x1a/0x20
[ 1117.258607][T23015]  ? do_int80_emulation+0x20e/0x400
[ 1117.258625][T23015]  do_fast_syscall_32+0x33/0x70
[ 1117.258641][T23015]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1117.258659][T23015] RIP: 0023:0xf73cd539
[ 1117.258675][T23015] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1117.258689][T23015] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1117.258708][T23015] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040
[ 1117.258720][T23015] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000
[ 1117.258730][T23015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1117.258740][T23015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1117.258750][T23015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1117.258765][T23015]  </TASK>
[ 1117.569865][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1117.583457][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1117.589950][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.661719][T13903] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1117.665246][T23017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5457'.
[ 1117.670863][T13903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.691759][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5458'.
[ 1117.704145][T13903] usb 2-1: config 0 descriptor??
[ 1117.718520][T13903] usb 2-1: can't set config #0, error -71
[ 1117.725297][T23024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5458'.
[ 1117.750256][T13903] usb 2-1: USB disconnect, device number 67
[ 1117.809664][T21987] Bluetooth: hci5: ACL packet for unknown connection handle 201
[ 1118.596559][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1119.636511][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1120.676647][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1121.716468][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1122.756647][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1123.796537][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available