last executing test programs:

6m39.187906175s ago: executing program 3 (id=9):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000540)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x64, 0x0, 0x1, 0x1, 0x0, @multicast2, @multicast1}, @echo={0x8, 0x0, 0x0, 0x7, 0x8001}}}}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x3, 0x400000)

6m37.044876938s ago: executing program 3 (id=14):
syz_clone(0x10000, &(0x7f0000000180)="1b85d6535c497dfff3ce6814ecc470381c9a2e8426f44b7a9f7001f6b1e5609888f2746fd1b050625bb06af22a0f7153d6d3342def13d011b2e614e21ded3622277ad30b03bbbf1ee9dd88f1a79abda60999265a26543e4acaae8d97c66e8419a5b3d98992e970a53bf9e9d43b0e6f4ac88f98baa56a8f50da5a11ff95c0e93af727bfb50212d5568aa25565991eb4e3f7b31782e968b999fbb629007fb9f5b449bb4310b951ac1500627e541c12859c3ac01dc58ada87e5685485d3a62591b3ecb931e6e536f7668bbc45f32a35b3964df4b8d536f5c89df04e33a3de57f1edc35d06fa574ac8ebd76b38beb8edda", 0xef, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000020006000400000019000000380000005e0200000804000004002000"], 0x58)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

6m36.828335267s ago: executing program 3 (id=16):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x73)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
clock_settime(0x1ed5d7403, &(0x7f0000000000)={0x0, 0x989680})
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)

6m36.766185979s ago: executing program 3 (id=18):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x8000000000000001, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20440, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x120000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
ppoll(&(0x7f0000000100)=[{r1, 0x88}], 0x1, &(0x7f0000000200), &(0x7f0000000240)={[0xffffffffffffffff]}, 0x8)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
r2 = socket(0x2c, 0x5, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

6m35.788051526s ago: executing program 3 (id=20):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xc, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x42, 0xa1, 0x90, 0x8, 0x8086, 0xb5c, 0xae27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x10, 0x51, "", [{{0x9, 0x4, 0x73, 0x83, 0x0, 0xe, 0x1, 0x0, 0x6}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})

6m35.384054835s ago: executing program 3 (id=23):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x20008001}, 0x20050840)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'veth0_to_bridge\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00000e6000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x220039})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
io_uring_enter(r3, 0x457c, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x4084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x1)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x8)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000100), 0x4)
socket$nl_route(0x10, 0x3, 0x0)

6m34.731570815s ago: executing program 32 (id=23):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x20008001}, 0x20050840)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'veth0_to_bridge\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00000e6000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x220039})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
io_uring_enter(r3, 0x457c, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x4084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x1)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x8)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000100), 0x4)
socket$nl_route(0x10, 0x3, 0x0)

51.177753221s ago: executing program 1 (id=1133):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
getgroups(0x0, 0x0)
unshare(0x40060080)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', r2, 0x0, 0x41)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000ac0)={0x2020}, 0x2020)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000032c000/0x2000)=nil, 0x2000}, 0x2})
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
inotify_init()
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0xa, 0xffffffdb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x2}, 0x50)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x20, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @generic={0xff, 0x2, 0x6, 0x9, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6ee14415}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000480)='GPL\x00', 0x2, 0xa2, &(0x7f00000004c0)=""/162, 0x40f00, 0x27, '\x00', 0x0, @sk_skb=0x26, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x5, &(0x7f00000006c0)=[r2, r3, r2, r3, r2, r2], &(0x7f0000000700)=[{0x3, 0x3, 0x9, 0x2}, {0x0, 0x5, 0xb, 0x9}, {0x1, 0x4, 0x5, 0xb}, {0x4, 0x2, 0x0, 0x1}, {0x1, 0x2, 0x10, 0x3}], 0x10, 0xa486}, 0x94)
recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000082)
sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="18", 0x1}], 0x1}, 0x4000000)

47.463293974s ago: executing program 1 (id=1146):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000740)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

42.510810437s ago: executing program 1 (id=1157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = fsopen(&(0x7f0000000240)='ext2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='gid', 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000})

39.359718884s ago: executing program 1 (id=1171):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
landlock_create_ruleset(&(0x7f0000000100)={0xd001, 0x3}, 0x18, 0x1)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x109)
syz_open_dev$video4linux(&(0x7f0000000240), 0x4, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x19, 0xc}, {0xfff2, 0x8}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2008085}, 0x20000041)
io_setup(0x2, &(0x7f0000000000)=<r3=>0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
io_pgetevents(r3, 0x88, 0x5, &(0x7f0000001100)=[{}, {}, {}, {}, {}], 0x0, 0x0)
r4 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
io_submit(r3, 0x1, &(0x7f00000008c0))
io_destroy(r3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x40, {0x2, 0xff, 0x1}, {0x1, 0x0, 0x4}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x2, 0xf0}, 0xfc, 0x2}], 0x40)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000011c0)="ee01000000000000006dadd34fe39d0c61735b1e7529608f009af839f7f132beb26acfdd913828a02ff38959b8993c5323bdcc8975c46306320c41419ea8479ea85cab09b9147bb2d6acaee7a5be55f834c17b95202d1f7460461a965956e99aab1d8357a3d5f3868befd280d624eb5812", 0x71}], 0x1}}], 0x1, 0x440c0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
io_getevents(r3, 0x7, 0x2, &(0x7f0000000140)=[{}, {}], 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0xffff, 0x4, 0x3, {0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}}, 0x32)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)

38.815796878s ago: executing program 1 (id=1174):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_usb_control_io(r0, &(0x7f0000001280)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x7, {0x7, 0x9, "d7b9fc35e7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='&:}\x00', 0x0, 0x0)
socket(0x23, 0x80000, 0x1)
r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x480e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x2, 0x9}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x2c, {0x1a, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0x3)

36.381782816s ago: executing program 1 (id=1181):
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_ethernet(0x104f, &(0x7f0000000000)=ANY=[], 0x0)

21.280444175s ago: executing program 33 (id=1181):
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_ethernet(0x104f, &(0x7f0000000000)=ANY=[], 0x0)

13.383335491s ago: executing program 0 (id=1240):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000500)={0xc, 0x8b}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000086a08020040000102030109029f0003010920060904000000010100000a2401160049000201020f240603050401000400080009002a09240501075b73b174072406030300090a2407060600f9ef15ee0a24000000000823dae20c240201010102b33cd981f809040100000102000009040101010102000009050109ff030b090b07250104010700090402"], 0x0)
r1 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x70}}, 0x4000004)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="020602000200000002000000000000006ab731b69148f8aff29098d11de259ed3c7c3afba88522d0c29a9ab17047b3ec378e4a5f8e6a9381aff8cb6a659bd0a15f8dbc26abc9e10d3a0e58de648071482f7a13d935662bcf963676a7d4745a08a4878d27ee6174cd73baf74aa4979e7b58a39ea70266e4646ce0db4c3fd4574d6829322169e5a371340628257752fe0e245ff169922a1b499cf5fb0d2d235321cb4d33f856f1a74e28407cbbc0bc84d8506e9f95d620bbe53ce56a6a58d5280f6601dddcee15be5a6187d4"], 0x10}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r5 = syz_socket_connect_nvme_tcp()
recvmsg$inet_nvme(r5, &(0x7f0000001d80)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/166, 0xa6}, {&(0x7f0000000a00)=""/234, 0xea}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x9, &(0x7f0000001c80)=""/254, 0xfe}, 0x40)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000)
pipe2$watch_queue(0x0, 0x80)
request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xfffffffffffffffc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, 0x0)

10.888911366s ago: executing program 0 (id=1242):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x7, @mcast2, 0x19}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="5800f0001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

10.719748806s ago: executing program 0 (id=1243):
socket$inet6_icmp(0xa, 0x2, 0x3a)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000040000000100000004000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009560f726711d6730fff972c75c131108594fa3715e9e88e2aa2a9d"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x0, 0x200000000000000, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026, r2}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480), r6}}, 0x20)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x6}}, 0x20)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

10.032373555s ago: executing program 0 (id=1246):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe71, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff3, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9668}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x800c0b1}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r5 = dup(r1)
socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r6, 0x0, r0, 0x0, 0xffff, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff3, @empty, 0x9}}, 0x10001fb, 0x2, 0xffff189a, 0x3, 0x26, 0xffffffb7, 0x1a}, 0x9c)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x3f00000000000000)

8.737064217s ago: executing program 2 (id=1251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r0 = getpgrp(0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, <r1=>0x0})
syz_clone3(&(0x7f0000000840)={0x4000, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000480), {0xe}, &(0x7f00000004c0)=""/229, 0xe5, &(0x7f00000005c0)=""/114, &(0x7f0000000680)=[r1, r0, r0], 0x3}, 0x58)
r2 = getpgrp(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x700)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000380)={0x300a}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getpeername$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d80)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2})
syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/time\x00')
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
capget(&(0x7f00000006c0)={0x20071026, 0xffffffffffffffff}, &(0x7f00000008c0)={0x5, 0x8081, 0x6, 0x5, 0xc, 0x5})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$nl_xfrm(r5, 0x0, 0x0)

7.493787579s ago: executing program 2 (id=1255):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r2)
r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r3, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000080)=0x44, 0x3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14005811f9aea8b005940c00010000000000000000000200000a90000000000a010200000000000000000900000974000600da956545fde92fb1daa572968a4205a70eb7dd4cc5b3c2aa239a8a8d9b74f703438e526248dc92a420b1abb5c95c507db542ba1cfdcbb6341e85b945dd15834872ea0dbba2b4e1e716d37c6f515ca75ee513f3af0e54a4df1f5a1b9192bf1efc27d874f825e93dfc235ee793fd633f230800024000000002140000001100010000000000000000000700000a"], 0xb8}, 0x1, 0x0, 0x0, 0x5fd70fc871d7f0b}, 0x40800)
r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
readv(r4, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20003d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x10004c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x7, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x7, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x6, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0xb13, 0x9, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x0, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x800001, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x80, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xc, 0x1000000f, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x9, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbb, 0x5, 0x3, 0x400002, 0xfffffff9, 0x7, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0xef5b454, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xdbc4, 0x67, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x13e4, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xffc, 0xfff]}, 0x45c)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x918)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x80, 0xfff, 0x34e3, 0xfffff799}, 0x10)

6.92430927s ago: executing program 5 (id=1256):
quotactl$Q_QUOTAON(0x3, &(0x7f00000010c0)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async)
getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) (async)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
utime(0x0, &(0x7f00000001c0)={0x6, 0x10000})

6.652169039s ago: executing program 0 (id=1258):
r0 = syz_clone(0x40800, &(0x7f0000000300)="c440589e11626ad433b7867d2564c1d5b245e72ea7b77714a9fa8b1f2c499078e4744f38e415339e07a8608d148ea872ada774a2cfbb7c6abd763812641f9dd73c0594567bef9ca9bfa4714a4a5e54f69c8edfc6e0efef8bb5a7f3806cea8012d64bedc16c", 0x65, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="9c937d70095b453adc4818a674f66b9830807ae7979f76b6ad104cd6cfdd2d96da8dee812485b1a98e6ca7a45b9fe1d188216b67ac8de679c1615b5899bfe78469ce202f2d9d37d14354cb71691bae8636a7da74280475f4210a3367b12d9981112283c6166c8fd34f5c5bb5157ffd8c823a3ec4263b40dd6abe82982af8cdc1e5f2fb9be491b7637c75c8b3f1d12b721dd8b133f775a1753bddd5bbd0edd3e8b0b6de111283a4dad4")
prlimit64(r0, 0xe, &(0x7f0000000140)={0xffffffffffffff05, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
get_robust_list(r1, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="00101e5738ebf7"]}]}, 0x24}], 0x1}, 0x0)
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={r1, r5, 0xffffffffffffffff}, 0xc)
get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f00000000c0)={&(0x7f0000000040)={&(0x7f0000000000)}}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000100)}}}, &(0x7f00000002c0)=0x18)

6.520238178s ago: executing program 2 (id=1259):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0x4018aee3, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000301"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000207010100ba21a0cede5dc5b8150ad2823727a000000000000000030000"], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4000)
close(r6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x230e01, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r7, 0xbc7ae000)

6.509720583s ago: executing program 5 (id=1260):
syz_emit_vhci(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
semget$private(0x0, 0x4000000009, 0x668)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r0 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, 0x0, 0x0, 0x8e90385f0ccb53ea}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0))
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x11, 0x4})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000026bd7000fddbdf250900020073797a3000000000080029a0aa8877001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0)

5.500021058s ago: executing program 2 (id=1261):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0) (async)
r2 = socket$kcm(0x11, 0x0, 0x0) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64)
close(r3) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2a438b786e11ec62}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0)

4.916601443s ago: executing program 4 (id=1263):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xb6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_sctp(0xa, 0x5, 0x84)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

4.405951207s ago: executing program 2 (id=1264):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r2=>0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c09"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
dup(r0) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x1) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async)
syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c09"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) (async)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) (async)

4.282736445s ago: executing program 5 (id=1265):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x400, 0x4, 0x0, 0xfffffffe, 0x3})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='stack\x00')
pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0x6677)
r1 = socket$inet6(0xa, 0x5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000001000)=@ethtool_stats={0x11, 0x3, [0x1, 0x200, 0x200000000]}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r5 = socket$key(0xf, 0x3, 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x140, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x4, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
creat(&(0x7f0000000240)='./file0\x00', 0x122)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r8, 0xffffffffffffffff, 0x0)
sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020d0000110000002dbd700000000000080012000000020000000000feffffff06000000000000000000000000000000fe8000000000000000000000000000200a01010000000000000000000000000003000500ff00000002004e22ac141436000000000000000003000600ff00000002004e20ac1eff0100000000000000000100180000ad6ea9"], 0x88}}, 0x0)

4.238662389s ago: executing program 6 (id=1266):
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)
arch_prctl$ARCH_GET_CPUID(0x1011)

4.07177252s ago: executing program 6 (id=1267):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00000000bfff0000000000", 0x2a}], 0x1)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x1000872, 0x401, 0xa, 0x4, 0x2c, 0x81})

4.017505583s ago: executing program 6 (id=1268):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000780)={0x1, 0x0, [{0x40000105, 0x0, 0x200000000000}]})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DVB_DVR_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000040)={0x4, 0x0, r0})
listen(r0, 0x2b4b)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r5)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r8, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r7, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

3.263906767s ago: executing program 2 (id=1269):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB='A\b\x00\x00\b\x00'], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="64642cda5e69e4d39f0ac608a63ce13e0006eecbfda4aecbfee041421fb7fe47348bfa128728a5195057334dbb36fac1facb53c542d491f95dd6b0", @ANYRESHEX=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
close(0x3)

3.198039188s ago: executing program 5 (id=1270):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xce, 0x7, &(0x7f0000006680))
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000080)={0x8, 0x1, &(0x7f0000000040)=[0x2], 0x0, 0x0, 0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000b00)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000a40)=""/23, 0x17}], 0x3, &(0x7f0000000ac0)=""/32, 0x20}, 0x10121)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101985)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r4, 0x0, 0x0)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="aefd", 0x2}], 0x1)
getegid()
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
close(0x3)
r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000540)={{0x7, 0x2, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x6, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x200000080, 0x0, 0x10000000000000, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, 0x8000000000000001, 0xa8, 0xfffffffffffffff7, 0x0, 0x91f5, 0x1f, 0x4000000000000000, 0x40000000000, 0x8000000000009a1e, 0x0, 0xfffffffffffffffc, 0x10003, 0xfffffffffffffffe, 0x10004, 0x7, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0x7, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x2, 0x3, 0x42, 0x9, 0x5, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x0, 0x1, 0x4000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x9, 0x0, 0x0, 0x1, 0xc, 0x0, 0x0, 0x3, 0x0, 0x3, 0x9, 0x2, 0x1000, 0xe0a5, 0x0, 0x7, 0x9, 0x10001002, 0x6, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0xf7f, 0xfffffffffffffffc, 0x0, 0x5, 0x10001, 0x8100000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x880000000, 0x73fb, 0x0, 0x0, 0x0, 0x9, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffe]})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r6 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x3, 0x2, 0x4, 0x6, 0x1, 0x80000004, 0xc}, &(0x7f0000000100)=0x20)

3.006143732s ago: executing program 6 (id=1271):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040220080006007c09e8fe55a10a0015400100142603600e12b0001e0000000401a8001600a400014003000000036010fab94dcf5cac61c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

2.779100662s ago: executing program 6 (id=1272):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000280))
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f000007f000/0x3000)=nil, 0x3000, 0xb635773f046bbeef, 0x11, r1, 0x49762000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000019c, 0x20000000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42)

2.680619172s ago: executing program 0 (id=1273):
lsm_get_self_attr(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6)
r2 = socket(0xf, 0x0, 0x1)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r4, &(0x7f0000001c00), 0x40000000000017a, 0x40840)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@empty}}}, &(0x7f0000000240)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r6}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x20000000000, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x1, 0xb7, 0x28e, 0xfffffffb, 0xfffffff9}}, 0xe8)
pipe2(&(0x7f00000003c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',cache=fscache,cachetag='])
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc)
sendmmsg(r5, &(0x7f0000000180), 0x400000000000077, 0x7600)

2.069909303s ago: executing program 4 (id=1274):
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff010a"], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r1, 0x4b72, &(0x7f0000000100)={0x5, 0x7d, 0xc4, 0x3, 0xe, "0060f60000000200"})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = creat(0x0, 0x69)
fgetxattr(r2, &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000480)=""/4096, 0x1000)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4)
sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xc6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x1, 0xc040)
pwrite64(r2, 0x0, 0x0, 0x7)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000300)="6e29c021", 0x4}], 0x1)

1.844381968s ago: executing program 4 (id=1275):
nanosleep(&(0x7f0000000000), &(0x7f00000000c0))
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

1.76380086s ago: executing program 4 (id=1276):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (fail_nth: 10)

1.713395371s ago: executing program 5 (id=1277):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r2})
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, &(0x7f0000000140)={0xc})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000180)={0x20, r2, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r2})
ioctl$IOMMU_VFIO_GET_API_VERSION(r1, 0x3b64)
ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x3)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
write$P9_RREADDIR(r3, 0x0, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x9)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f00000004c0)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000003c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x4000001c, 0x4000000001c})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000300)=ANY=[])
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000340)={0x18, r2})
ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000380)={0x8, r2})
close(r1)
r4 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000006c0)=@vmx={0x0, 0x0, 0x2080, {0xeeef0000, 0x9000, {0x1}, 0x1, 0x3}, {"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", "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"}})
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')

1.592066027s ago: executing program 4 (id=1278):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = io_uring_setup(0x7a76, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e})
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
bind$tipc(r7, 0x0, 0x0)
close_range(r6, r7, 0x0)
r8 = openat2(0xffffffffffffff9c, &(0x7f000001bd80)='./file0\x00', &(0x7f000001bdc0)={0xe0100, 0x80, 0x2}, 0x18)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f000001be00)={0x2, 0x1, 0x7, 0x80000, <r9=>0xffffffffffffffff})
sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ba40)=[{&(0x7f000001aa40)="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", 0x1000}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000104000002000000b7062161e07b36e103c523387bc73778a993456896761c1b7ecfb5f793bb65fd933e2d353b9fd8b621ff7fc328597aa900e47e36ec51a85b25a8c6e9a7fe6ace53e3c6dfdcc1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1], 0xb0, 0x8000}}], 0x1, 0x4000000)
ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000000540)={'sit0\x00', 0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40)

1.570503563s ago: executing program 6 (id=1279):
prctl$PR_SET_FP_MODE(0x42, 0x2)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x5, 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000009000000040000000200000004000000", @ANYRES32, @ANYBLOB="0100000000f391878d00004b00000000000000000070360df1948eca1d636c473a0ea828e1960842e588978e2cc9156ff464dcc02b03035eeff511f31e5797d308f2d2e3eaee08f9569bb991169888dac95d4de03b42923a378d2fc3063b0dec34cbd2d559ca7399b896708fae8ceb939a3bf5801034ae3163d9703d039ac0215b5e58110aa47cca0500000000000000d1b06b79789f771f0b0fe68302c75a6423d9088d02583a4e73ba8a1c2585f02d4bfb71", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r1, 0x1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)
ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x9, 0x3, 0x7, 0x8})
syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000008940)=ANY=[@ANYBLOB="140200002000010003000000fbdbdf25040217800c00030008ac0f0000000000140001"], 0x214}], 0x1, 0x0, 0x0, 0x400c841}, 0x20040051)

153.451167ms ago: executing program 4 (id=1280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x80)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2000c0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@access_user}, {@cache_fscache}, {@cache_fscache}, {@cache_mmap}, {@access_any}, {@nodevmap}, {@msize={'msize', 0x3d, 0x9}}], [{@permit_directio}, {@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@euid_lt={'euid<', r2}}, {@subj_type={'subj_type', 0x3d, '},'}}]}})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
pipe2(&(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read$FUSE(r5, &(0x7f0000007680)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
sendfile(r4, r5, 0x0, 0x10ffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r3, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}]]}, 0x30}}, 0x0)

0s ago: executing program 5 (id=1281):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x20000000}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000884)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xcc, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xcb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x50000}, 0x2000c080)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x16be42, 0x0)
read(r6, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800d7d32b4b20a5343f0e980e0c9d090a051ee466026bbf5e2e021fa4a8c81ec03ea7aae5215e3d78e5731911c2f9b5d35426adc897afb444794e2931e986db89b386534e9e7db7511d22353f6d8ec46f505d903cad7c49927c8d058186e333cf719edab16665a18bd0b377ceca38a27d10462297b8690a0ca3947c0d5ef4dd14ccd05e722d8a98249514d9d84d6a62737154a0b933e93cb826f1ea3697488662ff87d32649", @ANYRES32=0x0, @ANYBLOB="022001008a340300140003006e657464657673696d3000000000000014001680100001800c0007000100000005000000"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100010000000000000002000000080003002cbe9488f8ec9ed090ef1e89bad303c065679840af842652541c3e7ae222a8fcb8fab48435a9c32368d7043644970f99ac446d844acd31e5d61c7b5eef945a828f4c0d384e477055f9a5eb0948e2fa455d6d6117d9bf4631e556b3b7923f12ca69613deb2bae2ec7", @ANYRES32=r5, @ANYBLOB="04006c00080026006c090000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

kernel console output (not intermixed with test programs):

t:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  288.404989][   T30] audit: type=1400 audit(1777264181.112:423): avc:  denied  { read } for  pid=8834 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  288.511968][   T30] audit: type=1400 audit(1777264181.222:424): avc:  denied  { ioctl } for  pid=8846 comm="syz.0.732" path="socket:[37156]" dev="sockfs" ino=37156 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  289.743680][   T30] audit: type=1400 audit(1777264182.462:425): avc:  denied  { create } for  pid=8843 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  289.994503][ T8865] netlink: 'syz.0.736': attribute type 1 has an invalid length.
[  290.025646][ T8865] netlink: 224 bytes leftover after parsing attributes in process `syz.0.736'.
[  290.163022][ T5718] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  290.222880][   T30] audit: type=1400 audit(1777264182.932:426): avc:  denied  { getopt } for  pid=8871 comm="syz.4.740" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  290.303149][ T5705] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  290.323064][ T5718] usb 6-1: Using ep0 maxpacket: 8
[  290.329400][ T5718] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  290.340240][ T5718] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  290.351011][ T5718] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  290.361458][ T5718] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  290.375512][ T5718] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.416378][ T5718] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  290.429814][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.444464][ T5718] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  290.453043][ T5705] usb 1-1: Using ep0 maxpacket: 32
[  290.461723][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short
[  290.492893][ T5705] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  290.522176][ T5705] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  290.531573][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.540369][ T5705] usb 1-1: Product: syz
[  290.544874][ T5705] usb 1-1: Manufacturer: syz
[  290.549481][ T5705] usb 1-1: SerialNumber: syz
[  291.261870][ T5705] usb 1-1: Cannot retrieve CPort count: -110
[  291.267941][ T5705] usb 1-1: Cannot retrieve CPort count: -110
[  291.279330][ T5705] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -110
[  291.330977][ T5705] usb 1-1: USB disconnect, device number 43
[  291.493852][   T30] audit: type=1400 audit(1777264184.212:427): avc:  denied  { mounton } for  pid=8885 comm="syz.2.745" path="/139/file0" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  292.612537][ T8898] block device autoloading is deprecated and will be removed.
[  293.102490][ T8902] netlink: 'syz.4.748': attribute type 1 has an invalid length.
[  293.157743][ T8902] netlink: 96 bytes leftover after parsing attributes in process `syz.4.748'.
[  293.171529][ T8903] netlink: 'syz.4.748': attribute type 3 has an invalid length.
[  293.180912][ T8902] netlink: 658 bytes leftover after parsing attributes in process `syz.4.748'.
[  293.206275][ T8902] netlink: 1 bytes leftover after parsing attributes in process `syz.4.748'.
[  293.245545][ T5718] usb 6-1: USB disconnect, device number 22
[  293.281798][ T8903] netlink: 'syz.4.748': attribute type 10 has an invalid length.
[  293.319675][ T8903] bridge0: port 3(netdevsim1) entered blocking state
[  293.371921][ T8903] bridge0: port 3(netdevsim1) entered disabled state
[  293.656157][ T8903] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  293.678231][ T8903] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  294.251819][   T30] audit: type=1400 audit(1777264186.602:428): avc:  denied  { append } for  pid=8910 comm="syz.2.752" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  294.425987][ T8915] overlayfs: invalid origin (0000)
[  294.662834][   T30] audit: type=1400 audit(1777264187.372:429): avc:  denied  { wake_alarm } for  pid=8916 comm="syz.4.753" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  294.839717][ T8924] comedi comedi3: das16m1: I/O base address or length out of range
[  295.712594][   T30] audit: type=1400 audit(1777264188.422:430): avc:  denied  { connect } for  pid=8926 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  295.893489][ T5796] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  295.901146][ T5343] usb 2-1: new low-speed USB device number 30 using dummy_hcd
[  296.064480][ T5796] usb 1-1: Using ep0 maxpacket: 8
[  296.075171][ T5343] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  296.089820][ T5796] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  296.102438][ T5343] usb 2-1: config 0 has no interface number 0
[  296.123060][ T5343] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  296.135552][ T5796] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  296.146099][ T5796] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  296.156392][ T5343] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  296.167670][ T5796] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  296.177989][ T5343] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  296.191923][ T5796] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.206333][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.222517][ T5796] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  296.257594][ T5343] usb 2-1: config 0 descriptor??
[  296.273665][ T8936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  296.283053][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.334200][ T5343] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  296.385889][ T5796] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  296.594534][ T5796] usb 2-1: USB disconnect, device number 30
[  297.929497][ T8957] libceph: resolve '4' (ret=-3): failed
[  298.250573][ T8966] input: syz1 as /devices/virtual/input/input22
[  298.832669][ T8976] sctp: [Deprecated]: syz.1.774 (pid 8976) Use of struct sctp_assoc_value in delayed_ack socket option.
[  298.832669][ T8976] Use struct sctp_sack_info instead
[  298.850139][ T8981] netlink: 'syz.4.776': attribute type 1 has an invalid length.
[  299.060593][ T8986] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  299.064863][ T5343] usb 1-1: USB disconnect, device number 44
[  299.410470][ T8997] netlink: 44 bytes leftover after parsing attributes in process `syz.5.777'.
[  299.419674][ T8997] netlink: 59 bytes leftover after parsing attributes in process `syz.5.777'.
[  299.428573][ T8997] netlink: 59 bytes leftover after parsing attributes in process `syz.5.777'.
[  299.594527][ T9003] fuse: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  300.203127][ T5705] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  300.523065][ T5705] usb 2-1: device descriptor read/64, error -71
[  300.793451][ T5705] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  300.841023][ T9019] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  301.526183][ T9019] netlink: 224 bytes leftover after parsing attributes in process `syz.2.783'.
[  301.655199][ T5705] usb 2-1: device descriptor read/64, error -71
[  301.807444][ T5705] usb usb2-port1: attempt power cycle
[  301.813123][ T5343] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  301.973242][ T5343] usb 3-1: Using ep0 maxpacket: 32
[  301.995848][ T5343] usb 3-1: unable to get BOS descriptor or descriptor too short
[  302.009167][ T5343] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  302.024238][ T5796] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  302.039801][ T5343] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  302.049228][  T988] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  302.063186][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.078470][ T5343] usb 3-1: Product: syz
[  302.092135][ T5343] usb 3-1: Manufacturer: syz
[  302.102385][ T5343] usb 3-1: SerialNumber: syz
[  302.183016][ T5705] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  302.203079][ T5796] usb 1-1: Using ep0 maxpacket: 8
[  302.217015][ T5796] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  302.243190][ T5796] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  302.256102][  T988] usb 6-1: config 8 has an invalid interface number: 188 but max is 0
[  302.268268][  T988] usb 6-1: config 8 has no interface number 0
[  302.278524][ T5796] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  302.289529][  T988] usb 6-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  302.301753][ T5796] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  302.313193][  T988] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 12592, setting to 64
[  302.326544][ T5796] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  302.350745][ T5796] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  302.368480][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.377236][  T988] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  302.386739][ T5343] usb 3-1: Cannot retrieve CPort count: -71
[  302.393210][  T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.401594][ T5343] usb 3-1: Cannot retrieve CPort count: -71
[  302.409565][  T988] usb 6-1: Product: syz
[  302.416738][ T5796] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  302.425310][ T5343] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71
[  302.427868][ T5705] usb 2-1: device not accepting address 33, error -71
[  302.435482][  T988] usb 6-1: Manufacturer: syz
[  302.460574][ T5343] usb 3-1: USB disconnect, device number 33
[  302.467668][  T988] usb 6-1: SerialNumber: syz
[  302.513501][ T9035] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  302.832969][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  303.840162][  T988] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  303.857392][  T988] usb 6-1: USB disconnect, device number 23
[  304.609384][ T9050] fuse: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  305.051878][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.795'.
[  305.428541][ T5704] usb 1-1: USB disconnect, device number 45
[  305.832557][ T9061] overlayfs: invalid origin (0000)
[  306.291637][ T9063] overlayfs: invalid origin (0000)
[  306.436145][ T9080] netlink: 'syz.0.801': attribute type 4 has an invalid length.
[  306.653825][   T30] audit: type=1400 audit(1777264199.362:431): avc:  denied  { connect } for  pid=9081 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  306.853485][ T5704] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  307.018329][ T5704] usb 6-1: Using ep0 maxpacket: 32
[  307.026909][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.045704][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.056739][ T5704] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  307.075037][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.092353][ T5704] usb 6-1: config 0 descriptor??
[  307.305207][ T9092] netlink: 'syz.1.804': attribute type 1 has an invalid length.
[  307.357634][ T9092] netlink: 224 bytes leftover after parsing attributes in process `syz.1.804'.
[  307.415981][ T9093] fuse: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  307.536119][ T5704] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[  307.643233][ T9095] overlayfs: invalid origin (0000)
[  307.683167][  T988] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  307.732975][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  307.763162][ T5704] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[  307.884230][ T5704] ft260 0003:0403:6030.0006: chip code: 0000 0000
[  307.893114][  T988] usb 2-1: Using ep0 maxpacket: 32
[  307.904531][  T988] usb 2-1: unable to get BOS descriptor or descriptor too short
[  307.916413][  T988] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  307.939025][  T988] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  307.950337][  T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.959706][  T988] usb 2-1: Product: syz
[  307.974611][  T988] usb 2-1: Manufacturer: syz
[  307.981202][  T988] usb 2-1: SerialNumber: syz
[  307.993182][ T5705] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  308.084669][ T5704] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  308.143888][ T5705] usb 3-1: Using ep0 maxpacket: 8
[  308.159106][ T5705] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  308.169105][ T5705] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  308.180121][ T5705] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  308.215713][ T5705] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  308.238752][ T5705] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  308.240827][  T988] usb 2-1: Cannot retrieve CPort count: -71
[  308.282212][ T5705] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  308.300577][ T5704] ft260 0003:0403:6030.0006: failed to retrieve status: -71, no wakeup
[  308.325436][ T5704] ft260 0003:0403:6030.0006: failed to retrieve status: -71
[  308.349826][ T5704] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71
[  308.353069][  T988] usb 2-1: Cannot retrieve CPort count: -71
[  308.357621][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.453234][ T5705] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  308.470285][ T5704] usb 6-1: USB disconnect, device number 24
[  308.480928][  T988] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -71
[  308.518630][  T988] usb 2-1: USB disconnect, device number 35
[  309.427102][ T9120] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  309.502534][ T9113] overlayfs: invalid origin (0000)
[  309.620687][ T9115] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  310.193080][  T988] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  310.425384][  T988] usb 2-1: config 0 has no interfaces?
[  310.434873][  T988] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  310.476661][  T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  310.532699][  T988] usb 2-1: SerialNumber: syz
[  310.559169][  T988] usb 2-1: config 0 descriptor??
[  310.682972][    T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!!
[  310.770377][ T9125] FAULT_INJECTION: forcing a failure.
[  310.770377][ T9125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  310.821330][ T9125] CPU: 0 UID: 0 PID: 9125 Comm: syz.1.814 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  310.821359][ T9125] Tainted: [L]=SOFTLOCKUP
[  310.821365][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  310.821375][ T9125] Call Trace:
[  310.821381][ T9125]  <TASK>
[  310.821387][ T9125]  dump_stack_lvl+0x100/0x190
[  310.821413][ T9125]  should_fail_ex.cold+0x5/0xa
[  310.821438][ T9125]  _copy_from_user+0x2e/0xd0
[  310.821463][ T9125]  copy_msghdr_from_user+0x9f/0x4f0
[  310.821486][ T9125]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  310.821510][ T9125]  ? rcu_is_watching+0x12/0xc0
[  310.821535][ T9125]  ? ___sys_sendmsg+0x19d/0x1e0
[  310.821552][ T9125]  ? kfree+0x1dd/0x6c0
[  310.821578][ T9125]  ___sys_sendmsg+0x106/0x1e0
[  310.821600][ T9125]  ? __pfx____sys_sendmsg+0x10/0x10
[  310.821642][ T9125]  ? __pfx___might_resched+0x10/0x10
[  310.821673][ T9125]  __sys_sendmmsg+0x205/0x430
[  310.821701][ T9125]  ? __pfx___sys_sendmmsg+0x10/0x10
[  310.821733][ T9125]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  310.821765][ T9125]  ? fput+0x79/0x100
[  310.821792][ T9125]  ? ksys_write+0x1ac/0x250
[  310.821810][ T9125]  ? __pfx_ksys_write+0x10/0x10
[  310.821833][ T9125]  __x64_sys_sendmmsg+0x9c/0x100
[  310.821858][ T9125]  ? lockdep_hardirqs_on+0x78/0x100
[  310.821876][ T9125]  do_syscall_64+0x10b/0xf80
[  310.821894][ T9125]  ? clear_bhb_loop+0x40/0x90
[  310.821914][ T9125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.821932][ T9125] RIP: 0033:0x7f23a979cdd9
[  310.821946][ T9125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.821962][ T9125] RSP: 002b:00007f23aa5cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  310.821978][ T9125] RAX: ffffffffffffffda RBX: 00007f23a9a15fa0 RCX: 00007f23a979cdd9
[  310.821989][ T9125] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009
[  310.821999][ T9125] RBP: 00007f23aa5cd090 R08: 0000000000000000 R09: 0000000000000000
[  310.822009][ T9125] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001
[  310.822019][ T9125] R13: 00007f23a9a16038 R14: 00007f23a9a15fa0 R15: 00007ffef27363c8
[  310.822041][ T9125]  </TASK>
[  311.291722][ T5705] usb 2-1: USB disconnect, device number 36
[  311.346810][ T5733] usb 3-1: USB disconnect, device number 34
[  311.585119][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  311.803139][ T5733] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  311.916802][ T9134] syz.4.816 (9134) used greatest stack depth: 20232 bytes left
[  312.066079][ T5733] usb 3-1: Using ep0 maxpacket: 32
[  312.073478][ T5733] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  312.085474][ T5733] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  312.094715][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  312.255902][ T5733] usb 3-1: Product: syz
[  312.278727][ T5733] usb 3-1: Manufacturer: syz
[  312.299070][ T5733] usb 3-1: SerialNumber: syz
[  312.327288][ T5733] usb 3-1: config 0 descriptor??
[  312.388949][ T9150] netlink: 'syz.5.820': attribute type 1 has an invalid length.
[  312.616523][ T9137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  312.762759][ T5733] hub 3-1:0.0: bad descriptor, ignoring hub
[  312.866977][ T5733] hub 3-1:0.0: probe with driver hub failed with error -5
[  313.912972][ T4942] block nbd0: Possible stuck request ffff888027fb5080: control (read@0,1024B). Runtime 180 seconds
[  313.924422][ T4942] block nbd0: Possible stuck request ffff888027fb5240: control (read@1024,1024B). Runtime 180 seconds
[  313.935407][ T4942] block nbd0: Possible stuck request ffff888027fb5400: control (read@2048,1024B). Runtime 180 seconds
[  313.946373][ T4942] block nbd0: Possible stuck request ffff888027fb55c0: control (read@3072,1024B). Runtime 180 seconds
[  314.177883][ T9156] ������: renamed from vlan0 (while UP)
[  314.243618][ T5733] usb 3-1: USB disconnect, device number 35
[  315.330965][ T5618] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  315.340301][ T5618] Bluetooth: hci2: unexpected event for opcode 0x2062
[  315.623472][ T9169] overlayfs: failed to clone upperpath
[  315.824407][  T988] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  315.954190][ T9178] fuse: Bad value for 'fd'
[  316.013028][  T988] usb 6-1: Using ep0 maxpacket: 16
[  316.033859][  T988] usb 6-1: unable to get BOS descriptor or descriptor too short
[  316.063617][  T988] usb 6-1: config 9 has an invalid interface number: 7 but max is 0
[  316.089131][  T988] usb 6-1: config 9 has no interface number 0
[  316.231462][  T988] usb 6-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0
[  316.241115][  T988] usb 6-1: config 9 interface 7 has no altsetting 0
[  317.122438][  T988] usb 6-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de
[  317.132504][  T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.158399][  T988] usb 6-1: Product: syz
[  317.163029][  T988] usb 6-1: Manufacturer: syz
[  317.178991][  T988] usb 6-1: SerialNumber: syz
[  317.290240][ T9189] netlink: 'syz.4.830': attribute type 4 has an invalid length.
[  319.593174][ T5618] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  319.602511][ T5618] Bluetooth: hci2: Injecting HCI hardware error event
[  319.610472][ T5613] Bluetooth: hci2: hardware error 0x00
[  320.538500][ T9196] overlayfs: invalid origin (0000)
[  321.254405][  T988] xbox_remote_probe: Unexpected endpoint_in
[  321.555670][  T988] usb 6-1: USB disconnect, device number 25
[  321.654113][ T5613] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  322.013190][ T9219] overlayfs: invalid origin (0000)
[  322.467480][ T9233] overlayfs: invalid origin (0000)
[  322.543446][ T5733] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  322.816058][ T5733] usb 1-1: config 0 has an invalid interface number: 148 but max is 0
[  322.974312][ T9241] overlayfs: missing 'lowerdir'
[  323.738479][ T9242] netlink: 'syz.4.842': attribute type 4 has an invalid length.
[  323.781824][ T5733] usb 1-1: config 0 has no interface number 0
[  323.807408][ T5733] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  323.877416][ T5733] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  323.904315][ T5733] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  323.934590][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.986830][ T5733] usb 1-1: Product: syz
[  323.996242][ T5733] usb 1-1: Manufacturer: syz
[  324.005995][ T5733] usb 1-1: SerialNumber: syz
[  324.262751][ T5733] usb 1-1: config 0 descriptor??
[  324.312887][ T5733] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected
[  324.347389][ T5733] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  324.651767][ T5343] usb 1-1: USB disconnect, device number 46
[  324.757224][ T5343] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  324.813514][ T5343] kobil_sct 1-1:0.148: device disconnected
[  325.814625][ T9283] netlink: 'syz.5.856': attribute type 1 has an invalid length.
[  325.827891][ T9283] netlink: 224 bytes leftover after parsing attributes in process `syz.5.856'.
[  325.940687][ T9289] overlayfs: invalid origin (0000)
[  325.949007][ T9288] overlayfs: invalid origin (0000)
[  326.110603][ T9293] netlink: 'syz.2.858': attribute type 4 has an invalid length.
[  326.163003][ T5705] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  326.323123][ T5705] usb 6-1: Using ep0 maxpacket: 32
[  326.331122][ T5705] usb 6-1: unable to get BOS descriptor or descriptor too short
[  326.340764][ T5705] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  326.355327][ T5705] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  326.369016][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.378489][ T5705] usb 6-1: Product: syz
[  326.382871][ T5705] usb 6-1: Manufacturer: syz
[  326.388879][ T5705] usb 6-1: SerialNumber: syz
[  326.646239][ T5705] usb 6-1: Cannot retrieve CPort count: -71
[  326.661333][ T5705] usb 6-1: Cannot retrieve CPort count: -71
[  326.699508][ T5705] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -71
[  326.747215][ T5705] usb 6-1: USB disconnect, device number 26
[  326.968433][   T30] audit: type=1400 audit(1777264219.682:432): avc:  denied  { append } for  pid=9300 comm="syz.2.862" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  327.098363][ T9304] input: syz1 as /devices/virtual/input/input23
[  327.443795][ T5796] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  327.613081][ T5796] usb 3-1: Using ep0 maxpacket: 32
[  327.627957][ T5796] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  327.644752][ T5796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.657017][ T5796] usb 3-1: config 0 has no interface number 0
[  327.672738][ T5705] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  327.683206][ T5796] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  327.686218][ T9324] overlayfs: invalid origin (0000)
[  327.699559][ T5796] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  327.722056][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.737358][ T5796] usb 3-1: Product: syz
[  327.752732][ T5796] usb 3-1: Manufacturer: syz
[  327.757849][ T5796] usb 3-1: SerialNumber: syz
[  327.777366][ T5796] usb 3-1: config 0 descriptor??
[  327.927322][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.945722][ T5705] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  327.956386][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.959147][ T5796] radio-si470x 3-1:0.35: could not find interrupt in endpoint
[  327.972639][ T5705] usb 2-1: config 0 descriptor??
[  327.979168][ T5705] pwc: Askey VC010 type 2 USB webcam detected.
[  328.899429][ T5796] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5
[  328.954150][ T5343] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  329.142634][ T5705] pwc: recv_control_msg error -32 req 02 val 2b00
[  329.604946][ T5796] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  329.615748][ T5796] usbhid 3-1:0.35: couldn't find an input interrupt endpoint
[  329.644541][ T5705] pwc: recv_control_msg error -32 req 02 val 2700
[  329.661018][ T5705] pwc: recv_control_msg error -32 req 02 val 2c00
[  329.683684][ T5705] pwc: recv_control_msg error -32 req 04 val 1000
[  329.770086][ T5733] usb 3-1: USB disconnect, device number 36
[  329.775174][ T5343] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  329.787794][ T5343] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  329.791600][ T9337] netlink: 'syz.4.874': attribute type 4 has an invalid length.
[  329.806566][ T5343] usb 1-1: config 0 has no interfaces?
[  329.812487][ T5343] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  329.827169][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.849665][ T5343] usb 1-1: config 0 descriptor??
[  330.133768][ T5705] pwc: recv_control_msg error -71 req 04 val 1400
[  330.146226][ T5705] pwc: recv_control_msg error -71 req 02 val 2000
[  330.154383][ T5705] pwc: recv_control_msg error -71 req 02 val 2100
[  330.164136][ T5705] pwc: recv_control_msg error -71 req 04 val 1500
[  330.173124][ T5705] pwc: recv_control_msg error -71 req 02 val 2500
[  330.179991][ T5705] pwc: recv_control_msg error -71 req 02 val 2400
[  330.187289][ T5705] pwc: recv_control_msg error -71 req 02 val 2600
[  330.194395][ T5705] pwc: recv_control_msg error -71 req 02 val 2900
[  330.202514][ T5705] pwc: recv_control_msg error -71 req 02 val 2800
[  330.209765][ T5705] pwc: recv_control_msg error -71 req 04 val 1100
[  330.218325][ T5705] pwc: recv_control_msg error -71 req 04 val 1200
[  330.237221][ T5705] pwc: Registered as video103.
[  330.245539][ T5705] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24
[  330.275546][ T9329] SELinux: ebitmap: truncated map
[  330.279901][ T5705] usb 2-1: USB disconnect, device number 37
[  330.295187][ T9340] random: crng reseeded on system resumption
[  330.303565][ T9329] SELinux: failed to load policy
[  330.351551][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.368848][   T30] audit: type=1400 audit(1777264223.082:433): avc:  denied  { ioctl } for  pid=9338 comm="syz.5.875" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  330.387533][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.443792][ T5343] usb 1-1: USB disconnect, device number 47
[  330.625917][   T30] audit: type=1400 audit(1777264223.342:434): avc:  denied  { create } for  pid=9345 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  330.650393][ T9347] netlink: 'syz.2.876': attribute type 1 has an invalid length.
[  331.155918][ T9349] netlink: 84 bytes leftover after parsing attributes in process `syz.5.875'.
[  331.164889][ T9349] netlink: 84 bytes leftover after parsing attributes in process `syz.5.875'.
[  331.345170][ T9347] netlink: 224 bytes leftover after parsing attributes in process `syz.2.876'.
[  331.468909][   T30] audit: type=1400 audit(1777264224.182:435): avc:  denied  { name_bind } for  pid=9345 comm="syz.4.877" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  331.763028][ T5733] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  332.023063][ T5733] usb 3-1: Using ep0 maxpacket: 32
[  332.032617][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short
[  332.047120][ T5733] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  332.797378][ T5733] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  332.812964][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.822525][ T5733] usb 3-1: Product: syz
[  332.827504][ T5733] usb 3-1: Manufacturer: syz
[  332.832120][ T5733] usb 3-1: SerialNumber: syz
[  333.058763][ T5733] usb 3-1: Cannot retrieve CPort count: -71
[  333.075784][ T5733] usb 3-1: Cannot retrieve CPort count: -71
[  333.088989][ T5733] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71
[  333.113614][ T5733] usb 3-1: USB disconnect, device number 37
[  333.521348][   T30] audit: type=1400 audit(1777264226.232:436): avc:  denied  { read } for  pid=9370 comm="syz.4.882" lport=59195 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  333.866032][   T30] audit: type=1400 audit(1777264226.292:437): avc:  denied  { setopt } for  pid=9370 comm="syz.4.882" lport=59195 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  334.543778][ T9389] program syz.2.886 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  334.554103][   T30] audit: type=1400 audit(1777264227.262:438): avc:  denied  { ioctl } for  pid=9384 comm="syz.2.886" path="/dev/sg0" dev="devtmpfs" ino=786 ioctlcmd=0x4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  336.445274][ T5343] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  337.040021][ T9395] overlayfs: failed to clone upperpath
[  337.073785][ T5343] usb 2-1: Using ep0 maxpacket: 8
[  337.082727][ T5343] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  337.102883][ T5343] usb 2-1: config 179 has no interface number 0
[  337.127716][ T5343] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  337.147185][ T5343] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  337.288127][ T5343] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  337.342727][ T5704] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  337.347568][ T5343] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  337.439738][ T5343] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  337.566878][ T5343] usb 2-1: config 179 interface 65 has no altsetting 0
[  337.612888][ T5343] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  337.616890][ T5704] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  337.651607][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  337.673186][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.706275][ T5704] usb 1-1: config 0 has no interfaces?
[  337.721915][ T5704] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  337.748496][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.772612][ T5704] usb 1-1: config 0 descriptor??
[  337.792165][ T5343] usb 2-1: can't set config #179, error -71
[  337.844542][ T5343] usb 2-1: USB disconnect, device number 38
[  338.195504][ T9397] SELinux:  policydb version 1580590173 does not match my version range 15-35
[  338.234728][ T9424] SELinux:  Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped).
[  338.235487][ T9397] SELinux: failed to load policy
[  338.261019][   T30] audit: type=1400 audit(1777264230.972:439): avc:  denied  { relabelto } for  pid=9423 comm="syz.4.896" name="file0" dev="tmpfs" ino=1476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0"
[  338.265380][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.313237][ T9424] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  338.326393][ T9424] overlayfs: failed to set xattr on upper
[  338.339118][ T9424] overlayfs: ...falling back to redirect_dir=nofollow.
[  338.354408][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.362874][ T9424] overlayfs: ...falling back to uuid=null.
[  338.373012][ T9424] overlayfs: conflicting lowerdir path
[  338.403289][   T30] audit: type=1400 audit(1777264230.972:440): avc:  denied  { associate } for  pid=9423 comm="syz.4.896" name="file0" dev="tmpfs" ino=1476 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0"
[  338.455688][ T5704] usb 1-1: USB disconnect, device number 48
[  338.534274][   T30] audit: type=1400 audit(1777264231.012:441): avc:  denied  { mount } for  pid=9423 comm="syz.4.896" name="/" dev="ramfs" ino=39215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  338.604203][   T30] audit: type=1400 audit(1777264231.012:442): avc:  denied  { mounton } for  pid=9423 comm="syz.4.896" path="/file0" dev="ramfs" ino=39216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  338.671345][   T30] audit: type=1400 audit(1777264231.302:443): avc:  denied  { rmdir } for  pid=5603 comm="syz-executor" name="file0" dev="tmpfs" ino=1476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0"
[  338.778912][ T9417] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  338.785076][ T9417] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  339.276139][ T9449] netlink: 'syz.2.900': attribute type 4 has an invalid length.
[  340.447417][ T5796] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  340.643009][ T5796] usb 6-1: Using ep0 maxpacket: 32
[  340.650807][ T5796] usb 6-1: config 0 interface 0 altsetting 193 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.663094][ T5796] usb 6-1: config 0 interface 0 has no altsetting 0
[  340.669974][ T5796] usb 6-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00
[  340.679437][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.899422][ T5796] usb 6-1: config 0 descriptor??
[  341.492487][ T9468] fuse: Bad value for 'fd'
[  342.399797][ T9443] ceph: No mds server is up or the cluster is laggy
[  342.407122][ T5795] libceph: connect (1)[c::]:6789 error -101
[  342.431110][ T5795] libceph: mon0 (1)[c::]:6789 connect error
[  342.695014][ T5343] libceph: connect (1)[c::]:6789 error -101
[  342.701889][ T5343] libceph: mon0 (1)[c::]:6789 connect error
[  343.326297][ T5795] libceph: connect (1)[c::]:6789 error -101
[  343.332647][ T5795] libceph: mon0 (1)[c::]:6789 connect error
[  343.466785][ T5796] usbhid 6-1:0.0: can't add hid device: -71
[  343.475929][ T5796] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  343.496429][ T5796] usb 6-1: USB disconnect, device number 27
[  343.573280][ T5343] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  343.733652][ T5343] usb 3-1: Using ep0 maxpacket: 32
[  343.750024][ T5343] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  343.790600][ T5343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.827105][ T5343] usb 3-1: config 0 has no interface number 0
[  343.842374][ T5343] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  343.883591][ T5343] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  343.903132][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.023038][ T5343] usb 3-1: Product: syz
[  344.029389][ T5343] usb 3-1: Manufacturer: syz
[  344.034962][ T5343] usb 3-1: SerialNumber: syz
[  344.045994][ T5343] usb 3-1: config 0 descriptor??
[  344.075164][ T5343] radio-si470x 3-1:0.35: could not find interrupt in endpoint
[  344.111023][ T5343] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5
[  344.140238][ T4942] block nbd0: Possible stuck request ffff888027fb5080: control (read@0,1024B). Runtime 210 seconds
[  344.151170][ T4942] block nbd0: Possible stuck request ffff888027fb5240: control (read@1024,1024B). Runtime 210 seconds
[  344.163209][ T4942] block nbd0: Possible stuck request ffff888027fb5400: control (read@2048,1024B). Runtime 210 seconds
[  344.175977][ T4942] block nbd0: Possible stuck request ffff888027fb55c0: control (read@3072,1024B). Runtime 210 seconds
[  344.257473][   T30] audit: type=1400 audit(1777264236.972:444): avc:  denied  { setattr } for  pid=9514 comm="syz.5.911" name="NETLINK" dev="sockfs" ino=40629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  344.355505][ T5343] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  344.396081][ T5343] usbhid 3-1:0.35: couldn't find an input interrupt endpoint
[  344.514791][ T5343] usb 3-1: USB disconnect, device number 38
[  345.120566][ T9538] netlink: 'syz.2.914': attribute type 1 has an invalid length.
[  345.128238][ T9538] netlink: 224 bytes leftover after parsing attributes in process `syz.2.914'.
[  345.323102][ T5705] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  345.481012][ T5796] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  345.643068][ T5705] usb 1-1: Using ep0 maxpacket: 32
[  345.656351][ T5705] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  345.664860][ T5705] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.675128][ T5705] usb 1-1: config 0 has no interface number 0
[  345.681229][ T5705] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  345.711902][ T5705] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  345.732980][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.751182][ T5705] usb 1-1: Product: syz
[  345.758777][ T5705] usb 1-1: Manufacturer: syz
[  345.766325][ T5705] usb 1-1: SerialNumber: syz
[  345.773264][ T5705] usb 1-1: config 0 descriptor??
[  345.781429][ T5705] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  345.797753][ T5705] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5
[  345.813223][ T9556] overlayfs: failed to clone upperpath
[  346.128376][ T5796] usb 3-1: Using ep0 maxpacket: 32
[  346.389246][ T5796] usb 3-1: unable to get BOS descriptor or descriptor too short
[  346.557359][ T5705] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  346.574611][ T5705] usbhid 1-1:0.35: couldn't find an input interrupt endpoint
[  346.787239][ T5705] usb 1-1: USB disconnect, device number 49
[  346.830389][ T5796] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  346.846252][ T9581] fuse: Bad value for 'fd'
[  347.524994][ T5796] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  347.535048][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.544837][ T5796] usb 3-1: Product: syz
[  347.549373][ T5796] usb 3-1: Manufacturer: syz
[  347.554851][ T5796] usb 3-1: SerialNumber: syz
[  347.800207][ T5796] usb 3-1: Cannot retrieve CPort count: -71
[  347.825567][ T5796] usb 3-1: Cannot retrieve CPort count: -71
[  347.891642][ T5796] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71
[  347.940342][ T5796] usb 3-1: USB disconnect, device number 39
[  348.010059][ T9602] overlayfs: invalid origin (0000)
[  348.163009][ T5704] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  348.173024][ T5705] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  348.293105][ T5704] usb 1-1: device descriptor read/64, error -71
[  348.323135][ T5705] usb 2-1: Using ep0 maxpacket: 8
[  348.329720][ T5705] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  348.338276][ T5705] usb 2-1: config 179 has no interface number 0
[  348.345341][ T5705] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  348.356883][ T5705] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  348.374562][ T5705] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  348.394591][ T5705] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  348.407952][ T5705] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  348.421680][ T5705] usb 2-1: config 179 interface 65 has no altsetting 0
[  348.436941][ T5705] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  348.453926][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.491578][ T5705] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25
[  348.582348][ T5704] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  348.639383][ T4962] input input25: unable to receive magic message: -110
[  348.678869][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.691113][ T4962] input input25: unable to receive magic message: -32
[  348.723206][ T5704] usb 1-1: device descriptor read/64, error -71
[  348.729925][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.754604][ T6172] input input25: unable to receive magic message: -32
[  348.945851][ T5704] usb usb1-port1: attempt power cycle
[  348.967122][ T4962] input input25: unable to receive magic message: -32
[  348.985681][ T4962] input input25: unable to receive magic message: -32
[  349.564564][ T5704] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  349.688856][   T30] audit: type=1400 audit(1777264242.402:445): avc:  denied  { write } for  pid=9619 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  349.732464][ T5704] usb 1-1: device descriptor read/8, error -71
[  350.123063][ T5704] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  350.333696][ T5704] usb 1-1: device descriptor read/8, error -71
[  350.536108][ T9630] overlayfs: failed to clone upperpath
[  350.975717][   T30] audit: type=1800 audit(1777264243.432:446): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.933" name="file0" dev="overlay" ino=977 res=0 errno=0
[  351.006229][ T5704] usb usb1-port1: unable to enumerate USB device
[  351.537910][ T5705] usb 2-1: USB disconnect, device number 39
[  351.543900][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  351.800509][ T9647] fuse: Bad value for 'fd'
[  352.133170][ T5795] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  352.613356][ T5795] usb 3-1: Using ep0 maxpacket: 16
[  352.634002][ T5795] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  352.663098][ T5795] usb 3-1: config 0 interface 0 has no altsetting 0
[  352.675497][ T5795] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  352.703011][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.720309][ T5795] usb 3-1: Product: syz
[  352.731689][ T5795] usb 3-1: Manufacturer: syz
[  352.747160][ T5795] usb 3-1: SerialNumber: syz
[  352.777853][ T5795] usb 3-1: config 0 descriptor??
[  353.332451][    C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  353.358039][ T5795] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26
[  353.447616][ T5795] imon:send_packet: packet tx failed (-71)
[  353.714717][ T5795] imon 3-1:0.0: panel buttons/knobs setup failed
[  354.608334][ T5795] rc_core: IR keymap rc-imon-pad not found
[  354.614848][ T5795] Registered IR keymap rc-empty
[  354.623826][ T5795] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  354.679212][ T5795] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  354.708728][ T5795] imon:send_packet: packet tx failed (-71)
[  354.768318][ T5795] imon 3-1:0.0: remote input dev register failed
[  354.782335][ T5795] imon 3-1:0.0: imon_init_intf0: rc device setup failed
[  354.886605][ T5795] imon 3-1:0.0: unable to initialize intf0, err 0
[  354.917184][ T5795] imon:imon_probe: failed to initialize context!
[  354.937882][ T5795] imon 3-1:0.0: unable to register, err -19
[  355.002321][ T5795] usb 3-1: USB disconnect, device number 40
[  355.020623][ T5796] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  355.078111][ T9699] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.960'.
[  355.197315][ T5796] usb 1-1: config index 0 descriptor too short (expected 1033, got 59)
[  355.223865][ T5796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.550402][ T5796] usb 1-1: config 0 has no interfaces?
[  355.562689][ T5796] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  355.584395][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  355.593037][ T5796] usb 1-1: SerialNumber: syz
[  355.614497][ T5795] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  355.630483][ T5796] usb 1-1: config 0 descriptor??
[  355.786310][   T30] audit: type=1400 audit(1777264248.502:447): avc:  denied  { setopt } for  pid=9704 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  355.795351][ T5795] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  355.816139][ T5795] usb 3-1: config 0 has no interface number 0
[  355.820010][ T9706] overlayfs: invalid origin (0000)
[  355.843370][ T5795] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10
[  355.882357][ T9690] tmpfs: Unknown parameter '�&��~�sy���s50֫*����x�c����$�@-|��������-��2bto8N���s�b�����ǟ�݀��2}�5��yZ���}�&�E$�K1�Z�kqϭk���0R<�'���+���dw&��Y4X��#���xBE��Ow_hU�\��(��
[  355.882357][ T9690] ^���'
[  355.907745][ T5795] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  355.933936][ T5795] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  355.943792][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.952524][ T5795] usb 3-1: Product: syz
[  355.957312][ T5795] usb 3-1: Manufacturer: syz
[  355.985868][ T5795] usb 3-1: SerialNumber: syz
[  356.009272][ T5795] usb 3-1: config 0 descriptor??
[  356.368844][ T5795] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  356.661954][ T5343] usb 1-1: USB disconnect, device number 54
[  357.693398][ T5795] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[  357.720727][ T5795] usb 3-1: USB disconnect, device number 41
[  357.731859][ T5795] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  357.745478][ T5795] cypress_m8 3-1:0.35: device disconnected
[  357.769054][ T9724] netlink: 'syz.0.967': attribute type 4 has an invalid length.
[  358.061538][ T9734] overlayfs: failed to clone upperpath
[  359.251887][ T9750] FAULT_INJECTION: forcing a failure.
[  359.251887][ T9750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.267411][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.0.975 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  359.267437][ T9750] Tainted: [L]=SOFTLOCKUP
[  359.267442][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  359.267453][ T9750] Call Trace:
[  359.267458][ T9750]  <TASK>
[  359.267465][ T9750]  dump_stack_lvl+0x100/0x190
[  359.267492][ T9750]  should_fail_ex.cold+0x5/0xa
[  359.267518][ T9750]  _copy_from_user+0x2e/0xd0
[  359.267543][ T9750]  __sys_bpf+0x243/0x4b90
[  359.267575][ T9750]  ? __pfx___sys_bpf+0x10/0x10
[  359.267600][ T9750]  ? proc_fail_nth_write+0x9f/0x220
[  359.267618][ T9750]  ? find_held_lock+0x2b/0x80
[  359.267640][ T9750]  ? find_held_lock+0x2b/0x80
[  359.267656][ T9750]  ? ksys_write+0x190/0x250
[  359.267675][ T9750]  ? ksys_write+0x190/0x250
[  359.267697][ T9750]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  359.267718][ T9750]  ? kernel_write+0x663/0x6c0
[  359.267735][ T9750]  ? __fget_files+0x215/0x3d0
[  359.267769][ T9750]  ? fput+0x79/0x100
[  359.267792][ T9750]  ? ksys_write+0x1ac/0x250
[  359.267809][ T9750]  ? __pfx_ksys_write+0x10/0x10
[  359.267832][ T9750]  __x64_sys_bpf+0x7b/0xc0
[  359.267848][ T9750]  ? lockdep_hardirqs_on+0x78/0x100
[  359.267868][ T9750]  do_syscall_64+0x10b/0xf80
[  359.267886][ T9750]  ? clear_bhb_loop+0x40/0x90
[  359.267908][ T9750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.267925][ T9750] RIP: 0033:0x7f88c399cdd9
[  359.267939][ T9750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.267956][ T9750] RSP: 002b:00007f88c4822028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  359.267973][ T9750] RAX: ffffffffffffffda RBX: 00007f88c3c15fa0 RCX: 00007f88c399cdd9
[  359.267984][ T9750] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000012
[  359.267994][ T9750] RBP: 00007f88c4822090 R08: 0000000000000000 R09: 0000000000000000
[  359.268004][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.268014][ T9750] R13: 00007f88c3c16038 R14: 00007f88c3c15fa0 R15: 00007fff99fe7918
[  359.268037][ T9750]  </TASK>
[  360.383011][ T5704] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  360.677166][ T5704] usb 2-1: Using ep0 maxpacket: 8
[  360.690210][ T5704] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  360.703620][ T5704] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  360.718000][ T5704] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  360.730744][ T5705] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  360.741633][ T5704] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  360.755145][ T5704] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  360.769806][ T5704] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  360.779410][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.795305][ T5704] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  360.863937][ T5705] usb 6-1: device descriptor read/64, error -71
[  361.106073][ T5705] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  361.275126][ T5705] usb 6-1: device descriptor read/64, error -71
[  361.507490][ T9798] overlayfs: failed to resolve './file1/file0': -2
[  361.678855][ T9802] fuse: fd is not a fuse device
[  361.703840][ T5705] usb usb6-port1: attempt power cycle
[  361.911915][ T9806] overlayfs: failed to clone upperpath
[  362.032650][ T9813] netlink: 'syz.2.989': attribute type 1 has an invalid length.
[  362.055185][ T5705] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  362.104598][ T5705] usb 6-1: device descriptor read/8, error -71
[  362.136744][   T30] audit: type=1400 audit(1777264254.852:448): avc:  denied  { bind } for  pid=9812 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  362.238166][   T30] audit: type=1400 audit(1777264254.852:449): avc:  denied  { create } for  pid=9812 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  362.312134][   T30] audit: type=1400 audit(1777264254.882:450): avc:  denied  { write } for  pid=9812 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  362.363664][ T5705] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  362.395447][ T5705] usb 6-1: device descriptor read/8, error -71
[  362.515164][ T5705] usb usb6-port1: unable to enumerate USB device
[  362.760119][ T9831] netlink: 'syz.4.992': attribute type 1 has an invalid length.
[  363.167130][ T5795] usb 2-1: USB disconnect, device number 40
[  363.406500][ T9842] program syz.1.995 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  364.781001][   T30] audit: type=1400 audit(1777264257.492:451): avc:  denied  { watch watch_reads } for  pid=9844 comm="syz.5.996" path="pipe:[41535]" dev="pipefs" ino=41535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  364.962401][ T9855] fuse: Bad value for 'fd'
[  365.013858][ T9852] overlayfs: failed to resolve './file1/file0': -2
[  366.037441][ T9861] overlayfs: failed to clone upperpath
[  366.825226][ T9873] netlink: 'syz.0.1003': attribute type 4 has an invalid length.
[  366.873967][ T5795] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  367.044333][ T5795] usb 6-1: Using ep0 maxpacket: 8
[  367.059081][ T5795] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  367.073765][ T5795] usb 6-1: config 179 has no interface number 0
[  367.080505][ T5795] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  367.094463][ T5795] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  367.106285][ T5795] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  367.127303][ T5795] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  367.148905][ T5795] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  367.296557][  T988] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  367.321278][ T5795] usb 6-1: config 179 interface 65 has no altsetting 0
[  367.338956][ T5795] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  367.350485][ T9886] program syz.0.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  368.311371][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.332742][ T5795] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input28
[  369.696441][ T9888] syz.4.1009 (9888) used greatest stack depth: 19720 bytes left
[  369.762083][   T30] audit: type=1400 audit(1777264262.392:452): avc:  denied  { firmware_load } for  pid=9887 comm="syz.4.1009" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  369.788297][  T988] usb 3-1: Using ep0 maxpacket: 8
[  369.801888][ T4962] input input28: unable to receive magic message: -110
[  369.824744][  T988] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  369.839873][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.850163][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.916230][  T988] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  370.015592][ T4962] input input28: unable to receive magic message: -32
[  370.053009][  T988] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  370.062892][  T988] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  370.074414][  T988] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  370.087371][  T988] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  370.106083][  T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.259518][  T988] usb 3-1: can't set config #16, error -71
[  370.266497][ T9893] input input28: unable to receive magic message: -32
[  370.280651][ T9898] program syz.0.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  370.863199][  T988] usb 3-1: USB disconnect, device number 42
[  371.875216][ T9903] netlink: 'syz.2.1012': attribute type 1 has an invalid length.
[  371.909672][ T9903] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1012'.
[  372.115556][   T30] audit: type=1400 audit(1777264264.832:453): avc:  denied  { setattr } for  pid=9905 comm="syz.0.1013" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  372.193009][ T5718] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  372.196260][  T988] usb 6-1: USB disconnect, device number 32
[  372.200987][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  372.260388][ T9911] fuse: Bad value for 'fd'
[  372.267214][ T9907] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  372.463018][ T5718] usb 3-1: Using ep0 maxpacket: 32
[  372.834012][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short
[  372.842980][ T5718] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  372.855163][ T5718] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  372.864370][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.872376][ T5718] usb 3-1: Product: syz
[  372.876602][ T5718] usb 3-1: Manufacturer: syz
[  372.927739][ T5718] usb 3-1: SerialNumber: syz
[  372.945639][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  373.310701][ T5718] usb 3-1: Cannot retrieve CPort count: -71
[  373.332153][ T5718] usb 3-1: Cannot retrieve CPort count: -71
[  373.372344][ T5718] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71
[  374.307118][ T4942] block nbd0: Possible stuck request ffff888027fb5080: control (read@0,1024B). Runtime 240 seconds
[  374.353082][ T4942] block nbd0: Possible stuck request ffff888027fb5240: control (read@1024,1024B). Runtime 240 seconds
[  374.365745][ T4942] block nbd0: Possible stuck request ffff888027fb5400: control (read@2048,1024B). Runtime 240 seconds
[  374.376889][ T4942] block nbd0: Possible stuck request ffff888027fb55c0: control (read@3072,1024B). Runtime 240 seconds
[  374.758935][ T5718] usb 3-1: USB disconnect, device number 43
[  375.083011][ T5705] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  375.106233][ T9925] program syz.5.1018 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  375.291741][ T5705] usb 2-1: Using ep0 maxpacket: 32
[  376.141360][ T5705] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  376.176363][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.543592][ T5705] usb 2-1: config 0 has no interface number 0
[  376.582242][ T5705] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  376.595535][ T9922] overlayfs: invalid origin (0000)
[  376.692377][ T5705] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  376.727891][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.004229][ T5705] usb 2-1: Product: syz
[  377.014260][ T5705] usb 2-1: Manufacturer: syz
[  377.027635][ T5705] usb 2-1: SerialNumber: syz
[  377.050608][ T5705] usb 2-1: config 0 descriptor??
[  377.079111][ T5705] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  377.101165][ T5705] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[  377.110706][ T9935] overlayfs: failed to resolve './file1/file0': -2
[  377.704867][ T5705] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  377.726484][ T5705] usbhid 2-1:0.35: couldn't find an input interrupt endpoint
[  377.803424][ T5705] usb 2-1: USB disconnect, device number 41
[  377.816838][ T9938] overlayfs: failed to clone upperpath
[  378.906584][ T9958] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1028'.
[  380.004135][ T5795] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  380.274106][ T5795] usb 3-1: Using ep0 maxpacket: 8
[  380.290802][ T5795] usb 3-1: unable to get BOS descriptor or descriptor too short
[  380.357177][ T5795] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  380.397533][ T5795] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  380.413120][ T5795] usb 3-1: config 4 has no interface number 0
[  380.429609][ T5795] usb 3-1: language id specifier not provided by device, defaulting to English
[  380.499923][ T9977] overlayfs: invalid origin (0000)
[  380.509001][ T5795] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  380.541604][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.573431][ T5705] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  380.749614][ T5705] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  380.760286][ T9978] overlayfs: invalid origin (0000)
[  380.770588][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.780123][ T5705] usb 1-1: Product: syz
[  380.785990][ T5705] usb 1-1: Manufacturer: syz
[  380.801129][ T5705] usb 1-1: SerialNumber: syz
[  380.838818][ T5795] uvcvideo 3-1:4.147: Found multiple Units with ID 6
[  380.848094][ T5795] uvcvideo 3-1:4.147: Found UVC 0.02 device <unnamed> (04f2:b746)
[  380.875758][ T5795] uvcvideo 3-1:4.147: No streaming interface found for terminal 32774.
[  380.979114][ T9982] overlayfs: failed to clone upperpath
[  380.999075][ T5795] usb 3-1: USB disconnect, device number 44
[  383.201526][   T30] audit: type=1400 audit(1777264275.912:454): avc:  denied  { setattr } for  pid=9972 comm="syz.0.1034" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  384.254461][ T5705] rtl8150 1-1:1.0: couldn't reset the device
[  384.766731][ T5705] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  385.073330][ T5705] usb 1-1: USB disconnect, device number 55
[  386.818179][   T30] audit: type=1400 audit(1777264279.532:455): avc:  denied  { read } for  pid=9998 comm="syz.5.1041" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  386.819783][   T30] audit: type=1400 audit(1777264279.532:456): avc:  denied  { open } for  pid=9998 comm="syz.5.1041" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  386.860270][T10018] overlayfs: failed to clone upperpath
[  388.946299][   T30] audit: type=1400 audit(1777264281.662:457): avc:  denied  { connect } for  pid=10040 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  389.243211][   T30] audit: type=1400 audit(1777264281.922:458): avc:  denied  { read } for  pid=10040 comm="syz.1.1053" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  390.476257][   T30] audit: type=1400 audit(1777264281.922:459): avc:  denied  { open } for  pid=10040 comm="syz.1.1053" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  390.535959][T10045] fuse: Bad value for 'fd'
[  390.675523][T10052] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  391.085108][T10072] dummy0: entered promiscuous mode
[  391.128777][   T30] audit: type=1400 audit(1777264283.842:460): avc:  denied  { accept } for  pid=10071 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  391.393010][ T5704] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  391.476457][   T30] audit: type=1400 audit(1777264284.192:461): avc:  denied  { map } for  pid=10062 comm="syz.1.1059" path="socket:[43298]" dev="sockfs" ino=43298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  391.593049][ T5704] usb 3-1: Using ep0 maxpacket: 32
[  391.602093][ T5704] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  391.619302][ T5704] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  391.655245][ T5704] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  391.697695][ T5704] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  391.741852][ T5704] usb 3-1: config 0 interface 0 has no altsetting 0
[  391.768389][ T5704] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  391.790243][ T5704] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  391.798830][ T5705] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  391.813361][ T5704] usb 3-1: Product: syz
[  391.818393][ T5704] usb 3-1: Manufacturer: syz
[  391.823647][ T5704] usb 3-1: SerialNumber: syz
[  391.856087][ T5704] usb 3-1: config 0 descriptor??
[  391.866433][ T5704] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  391.890550][ T5704] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  391.963281][ T5705] usb 6-1: Using ep0 maxpacket: 32
[  391.978529][ T5705] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  392.006584][ T5705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.019236][ T5705] usb 6-1: config 0 has no interface number 0
[  392.025831][ T5705] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  392.047293][T10077] fuse: Bad value for 'fd'
[  392.052611][ T5705] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  392.095563][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.164329][ T5705] usb 6-1: Product: syz
[  392.186855][ T5705] usb 6-1: Manufacturer: syz
[  392.204185][ T5705] usb 6-1: SerialNumber: syz
[  392.242691][ T5705] usb 6-1: config 0 descriptor??
[  392.253779][ T5704] usb 3-1: USB disconnect, device number 45
[  392.259704][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  392.270580][ T5705] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[  392.278485][ T5705] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5
[  392.307689][ T5704] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  392.362653][T10072] ldusb: No device or device unplugged -19
[  392.438458][T10071] dummy0: left promiscuous mode
[  392.617540][ T5705] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[  392.648478][ T5705] usbhid 6-1:0.35: couldn't find an input interrupt endpoint
[  392.672397][ T5705] usb 6-1: USB disconnect, device number 33
[  392.714825][   T30] audit: type=1400 audit(1777264285.432:462): avc:  denied  { mounton } for  pid=10081 comm="syz.0.1065" path="/proc/633/task" dev="proc" ino=43337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  393.303611][T10094] netlink: 'syz.0.1067': attribute type 4 has an invalid length.
[  393.376702][T10097] fuse: Bad value for 'fd'
[  395.611305][   T30] audit: type=1400 audit(1777264288.322:463): avc:  denied  { ioctl } for  pid=10100 comm="syz.5.1069" path="socket:[43366]" dev="sockfs" ino=43366 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  395.648572][T10102] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  395.933187][ T5718] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  396.163026][ T5718] usb 1-1: Using ep0 maxpacket: 8
[  396.169657][ T5718] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  396.178892][ T5718] usb 1-1: config 179 has no interface number 0
[  396.188913][ T5718] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  396.233064][ T5718] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  396.996811][ T5718] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  397.008570][ T5718] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  397.022973][   T30] audit: type=1400 audit(1777264289.732:464): avc:  denied  { ioctl } for  pid=10119 comm="syz.5.1073" path="socket:[42453]" dev="sockfs" ino=42453 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  397.128813][ T5718] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  397.150940][ T5718] usb 1-1: config 179 interface 65 has no altsetting 0
[  397.177614][ T5718] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  397.209983][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.271095][ T5718] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29
[  397.353188][ T4962] input input29: unable to receive magic message: -110
[  397.378322][ T4962] input input29: unable to receive magic message: -32
[  397.411247][ T4962] input input29: unable to receive magic message: -32
[  397.454449][ T4962] input input29: unable to receive magic message: -32
[  397.518622][ T5595] input input29: unable to receive magic message: -32
[  397.581628][ T4962] input input29: unable to receive magic message: -32
[  397.596558][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.633286][ T4962] input input29: unable to receive magic message: -32
[  397.643896][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.070888][T10141] input input29: unable to receive magic message: -32
[  398.154541][ T5796] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  398.380822][T10148] netlink: 'syz.1.1079': attribute type 4 has an invalid length.
[  398.389597][T10148] netlink: 'syz.1.1079': attribute type 1 has an invalid length.
[  398.398152][T10148] netlink: 'syz.1.1079': attribute type 3 has an invalid length.
[  398.406927][T10148] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1079'.
[  398.416018][T10148] NCSI netlink: No device for ifindex 830110067
[  398.667641][ T5796] usb 6-1: Using ep0 maxpacket: 16
[  398.782105][ T5796] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  398.810785][ T5796] usb 6-1: config 1 has no interface number 0
[  398.838072][ T5796] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  398.867005][ T5796] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  398.886698][ T5796] usb 6-1: config 1 interface 105 has no altsetting 0
[  398.945886][ T5796] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  398.976468][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  398.997497][ T5796] usb 6-1: Product: syz
[  399.007331][ T5796] usb 6-1: Manufacturer: syz
[  399.012276][ T5796] usb 6-1: SerialNumber: syz
[  399.037059][T10139] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  399.049711][T10139] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  399.330975][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  399.330980][ T5795] usb 1-1: USB disconnect, device number 56
[  399.594308][T10139] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  399.597920][T10160] overlayfs: failed to resolve './file1/file0': -2
[  399.667574][T10139] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  399.863085][ T5718] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  399.933603][T10162] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1085'.
[  400.106165][ T5718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.144931][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.169723][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.180386][ T5718] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  400.189744][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.249082][ T5718] usb 2-1: config 0 descriptor??
[  400.260572][T10167] syzkaller0: entered promiscuous mode
[  400.284234][T10167] syzkaller0: entered allmulticast mode
[  400.289957][   T30] audit: type=1400 audit(1777264293.002:465): avc:  denied  { kexec_image_load } for  pid=10164 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  400.562881][   T30] audit: type=1400 audit(1777264293.062:466): avc:  denied  { map } for  pid=10164 comm="syz.0.1087" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[  401.645788][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  401.923609][ T5718] usbhid 2-1:0.0: can't add hid device: -71
[  401.942322][   T30] audit: type=1400 audit(1777264294.362:467): avc:  denied  { nlmsg_read } for  pid=10154 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  401.968431][ T5718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  402.010972][ T5718] usb 2-1: USB disconnect, device number 42
[  402.283902][T10182] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  402.311199][T10182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1090'.
[  402.573958][T10187] overlayfs: failed to clone upperpath
[  403.593057][ T5795] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  403.994978][ T5796] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  404.007190][ T5796] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  404.019843][ T5796] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  404.143349][ T5795] usb 3-1: Using ep0 maxpacket: 32
[  404.153413][ T5795] usb 3-1: unable to get BOS descriptor or descriptor too short
[  404.168490][ T5795] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  404.193231][ T5795] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  404.208682][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.218125][ T5795] usb 3-1: Product: syz
[  404.223228][ T5795] usb 3-1: Manufacturer: syz
[  404.235195][ T5796] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ee:ce:9e:64:06:59
[  404.255352][ T5795] usb 3-1: SerialNumber: syz
[  404.288078][ T5796] usb 6-1: USB disconnect, device number 34
[  404.342189][ T5796] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  404.566450][ T5795] usb 3-1: Cannot retrieve CPort count: -71
[  404.577363][ T5795] usb 3-1: Cannot retrieve CPort count: -71
[  404.587463][ T5795] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71
[  404.625844][ T5795] usb 3-1: USB disconnect, device number 46
[  404.707173][ T5796] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  404.730951][ T5796] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  404.755603][ T5796] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  405.046876][ T4942] block nbd0: Possible stuck request ffff888027fb5080: control (read@0,1024B). Runtime 270 seconds
[  405.057630][ T4942] block nbd0: Possible stuck request ffff888027fb5240: control (read@1024,1024B). Runtime 270 seconds
[  405.068858][ T4942] block nbd0: Possible stuck request ffff888027fb5400: control (read@2048,1024B). Runtime 270 seconds
[  405.079990][ T4942] block nbd0: Possible stuck request ffff888027fb55c0: control (read@3072,1024B). Runtime 270 seconds
[  405.116456][T10188] ALSA: mixer_oss: invalid OSS volume ''
[  405.150791][T10206] program syz.5.1096 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  406.794062][   T30] audit: type=1400 audit(1777264299.512:468): avc:  denied  { create } for  pid=10209 comm="syz.2.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  407.675772][T10227] FAULT_INJECTION: forcing a failure.
[  407.675772][T10227] name failslab, interval 1, probability 0, space 0, times 0
[  407.702206][T10227] CPU: 0 UID: 0 PID: 10227 Comm: syz.5.1101 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  407.702234][T10227] Tainted: [L]=SOFTLOCKUP
[  407.702240][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  407.702249][T10227] Call Trace:
[  407.702255][T10227]  <TASK>
[  407.702262][T10227]  dump_stack_lvl+0x100/0x190
[  407.702286][T10227]  should_fail_ex.cold+0x5/0xa
[  407.702311][T10227]  should_failslab+0xc2/0x120
[  407.702330][T10227]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  407.702355][T10227]  ? alloc_empty_file+0x5b/0x1c0
[  407.702384][T10227]  alloc_empty_file+0x5b/0x1c0
[  407.702410][T10227]  alloc_file_pseudo+0x13a/0x230
[  407.702435][T10227]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  407.702461][T10227]  ? _raw_spin_unlock+0x28/0x50
[  407.702488][T10227]  ? alloc_fd+0x476/0x790
[  407.702513][T10227]  __anon_inode_getfile+0xe8/0x280
[  407.702543][T10227]  __anon_inode_getfd+0x5c/0xe0
[  407.702573][T10227]  __x64_sys_fsopen+0x190/0x220
[  407.702592][T10227]  do_syscall_64+0x10b/0xf80
[  407.702610][T10227]  ? clear_bhb_loop+0x40/0x90
[  407.702631][T10227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.702648][T10227] RIP: 0033:0x7f106e39cdd9
[  407.702663][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.702679][T10227] RSP: 002b:00007f106f302028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  407.702696][T10227] RAX: ffffffffffffffda RBX: 00007f106e615fa0 RCX: 00007f106e39cdd9
[  407.702708][T10227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  407.702718][T10227] RBP: 00007f106f302090 R08: 0000000000000000 R09: 0000000000000000
[  407.702728][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.702737][T10227] R13: 00007f106e616038 R14: 00007f106e615fa0 R15: 00007ffe9df17718
[  407.702759][T10227]  </TASK>
[  409.571348][T10241] ieee802154 phy0 wpan0: encryption failed: -22
[  409.581913][   T30] audit: type=1400 audit(1777264302.282:469): avc:  denied  { create } for  pid=10240 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  409.634120][   T30] audit: type=1400 audit(1777264302.282:470): avc:  denied  { write } for  pid=10240 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  409.932557][   T30] audit: type=1400 audit(1777264302.642:471): avc:  denied  { lock } for  pid=10248 comm="syz.0.1108" path="socket:[43596]" dev="sockfs" ino=43596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  411.344992][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'.
[  411.392491][   T30] audit: type=1400 audit(1777264304.102:472): avc:  denied  { call } for  pid=10252 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  412.871920][ T5718] libceph: connect (1)[c::]:6789 error -101
[  412.885680][ T5718] libceph: mon0 (1)[c::]:6789 connect error
[  413.442833][T10272] ceph: No mds server is up or the cluster is laggy
[  413.705345][T10283] fuse: Bad value for 'fd'
[  414.918124][   T30] audit: type=1400 audit(1777264307.632:473): avc:  denied  { read } for  pid=10288 comm="syz.5.1119" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  415.021577][   T30] audit: type=1400 audit(1777264307.662:474): avc:  denied  { open } for  pid=10288 comm="syz.5.1119" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  415.459472][T10295] fuse: Unknown parameter 'V�
Et�O�U�'
[  415.537090][   T30] audit: type=1400 audit(1777264307.672:475): avc:  denied  { ioctl } for  pid=10288 comm="syz.5.1119" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  415.570737][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'.
[  416.050489][   T30] audit: type=1400 audit(1777264308.762:476): avc:  denied  { write } for  pid=10308 comm="syz.1.1125" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  416.176594][   T30] audit: type=1400 audit(1777264308.762:477): avc:  denied  { ioctl } for  pid=10308 comm="syz.1.1125" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x582a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  416.823767][ T5795] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  417.002467][   T30] audit: type=1400 audit(1777264309.712:478): avc:  denied  { execute } for  pid=10320 comm="syz.1.1128" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=42813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  417.034472][ T5795] usb 1-1: Using ep0 maxpacket: 8
[  417.085027][ T5795] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  417.126677][ T5795] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  417.173414][ T5795] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  417.205252][ T5795] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  417.237825][ T5795] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  417.268365][ T5795] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  417.298710][ T5795] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  417.333978][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.605066][ T5795] usb 1-1: GET_CAPABILITIES returned 0
[  417.634203][ T5795] usbtmc 1-1:16.0: can't read capabilities
[  417.736675][T10338] xt_hashlimit: size too large, truncated to 1048576
[  418.104862][ T5718] usb 1-1: USB disconnect, device number 57
[  418.203336][T10339] 8021q: adding VLAN 0 to HW filter on device batadv1
[  418.423178][   T30] audit: type=1400 audit(1777264311.142:479): avc:  denied  { map } for  pid=10337 comm="syz.5.1132" path="cgroup:[4026532805]" dev="nsfs" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  418.538766][   T30] audit: type=1400 audit(1777264311.172:480): avc:  denied  { execute } for  pid=10337 comm="syz.5.1132" path="cgroup:[4026532805]" dev="nsfs" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  418.589973][T10351] fuse: Bad value for 'fd'
[  419.098860][T10362] overlayfs: invalid origin (0000)
[  419.195115][T10365] No source specified
[  420.503842][T10373] fuse: Bad value for 'user_id'
[  420.515332][T10373] fuse: Bad value for 'user_id'
[  420.610987][   T30] audit: type=1400 audit(1777264313.322:481): avc:  denied  { listen } for  pid=10375 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  421.419254][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1142'.
[  421.796949][   T30] audit: type=1400 audit(1777264314.512:482): avc:  denied  { append } for  pid=10385 comm="syz.0.1143" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  421.856724][T10387] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  421.856724][T10387] The task syz.0.1143 (10387) triggered the difference, watch for misbehavior.
[  422.243223][ T5795] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  422.423455][ T5796] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  422.443588][ T5795] usb 6-1: Using ep0 maxpacket: 32
[  422.452992][ T5795] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  422.472453][ T5795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.493976][ T5795] usb 6-1: config 0 has no interface number 0
[  422.508929][ T5795] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  422.546110][ T5795] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  422.572951][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.603103][ T5795] usb 6-1: Product: syz
[  422.607691][ T5795] usb 6-1: Manufacturer: syz
[  422.612671][ T5795] usb 6-1: SerialNumber: syz
[  422.633141][ T5796] usb 2-1: Using ep0 maxpacket: 8
[  422.641300][ T5796] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  422.657043][ T5795] usb 6-1: config 0 descriptor??
[  422.672960][ T5796] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  422.694922][ T5795] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[  422.723033][ T5796] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  422.733806][ T5795] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5
[  422.753147][ T5796] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  422.782964][ T5796] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  422.810361][ T5796] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  422.829110][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.865711][ T5796] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  423.320610][ T5795] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[  423.343980][ T5795] usbhid 6-1:0.35: couldn't find an input interrupt endpoint
[  423.423498][ T5795] usb 6-1: USB disconnect, device number 35
[  423.533804][T10405] overlayfs: invalid origin (0000)
[  424.039212][   T30] audit: type=1400 audit(1777264316.752:483): avc:  denied  { accept } for  pid=10413 comm="syz.0.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  424.867731][   T30] audit: type=1400 audit(1777264317.582:484): avc:  denied  { lock } for  pid=10417 comm="syz.5.1152" path="socket:[42990]" dev="sockfs" ino=42990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  425.374909][T10421] fuse: Unknown parameter '/� �����yC�^Et��6R��`���&�cXv�?!���~;~mW�l�?w+3�!JV�'
[  426.929678][ T5795] usb 2-1: USB disconnect, device number 43
[  427.070264][T10429] overlayfs: invalid origin (0000)
[  427.547783][T10444] overlayfs: failed to clone upperpath
[  427.657127][T10448] ieee802154 phy0 wpan0: encryption failed: -22
[  428.250300][T10464] netlink: 'syz.4.1164': attribute type 4 has an invalid length.
[  429.009641][T10475] openvswitch: netlink: Missing key (keys=400440, expected=200000)
[  429.168674][T10478] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1168'.
[  429.963995][ T5718] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  430.042075][ T5718] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  430.422290][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'.
[  430.469274][T10484] fido_id[10484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  430.553090][ T5796] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  430.715172][ T5796] usb 6-1: Using ep0 maxpacket: 8
[  430.742199][ T5796] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  430.763893][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.765512][T10498] fuseblk: Unknown parameter 'user_i��00000000000000000000'
[  430.780644][T10496] mmap: syz.2.1173 (10496) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  430.806817][ T5796] usb 6-1: Product: syz
[  430.835120][ T5796] usb 6-1: Manufacturer: syz
[  430.851442][ T5796] usb 6-1: SerialNumber: syz
[  430.874773][ T5796] usb 6-1: config 0 descriptor??
[  430.895451][ T5796] gspca_main: se401-2.14.0 probing 047d:5003
[  430.972994][ T5705] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  431.456514][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  431.480346][T10502] overlayfs: failed to clone upperpath
[  431.488131][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  431.503007][ T5705] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  431.542875][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.585764][ T5705] usb 2-1: config 0 descriptor??
[  431.608181][ T5796] gspca_se401: Wrong descriptor type
[  431.866328][   T30] audit: type=1400 audit(1777264324.582:485): avc:  denied  { view } for  pid=10482 comm="syz.5.1170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  431.933216][   T30] audit: type=1400 audit(1777264324.632:486): avc:  denied  { map } for  pid=10482 comm="syz.5.1170" path="socket:[44307]" dev="sockfs" ino=44307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  431.969344][ T5718] usb 6-1: USB disconnect, device number 36
[  432.045353][ T5705] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  432.236611][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  432.276848][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.302662][T10509] (syz.2.1178,10509,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  432.321345][ T5705] isku 0003:1E7D:319C.0008: couldn't init struct isku_device
[  432.333937][T10509] (syz.2.1178,10509,1):ocfs2_fill_super:1177 ERROR: status = -22
[  432.350442][ T5705] isku 0003:1E7D:319C.0008: couldn't install keyboard
[  432.361061][T10511] binder: 10508:10511 ioctl c00c620f 200000000480 returned -22
[  432.382850][ T5705] isku 0003:1E7D:319C.0008: probe with driver isku failed with error -71
[  432.418148][ T5705] usb 2-1: USB disconnect, device number 44
[  432.832497][T10506] openvswitch: netlink: IP tunnel dst address not specified
[  434.025058][T10532] fuse: Bad value for 'fd'
[  434.416691][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  434.638093][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'.
[  434.766118][T10543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1186'.
[  434.777206][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'.
[  434.857645][T10546] syz.2.1187 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  435.417458][ T5705] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  435.563471][ T5705] usb 6-1: Using ep0 maxpacket: 8
[  435.594414][ T5705] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  435.621509][ T5705] usb 6-1: config 179 has no interface number 0
[  435.646542][ T5705] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  435.673535][ T4942] block nbd0: Possible stuck request ffff888027fb5080: control (read@0,1024B). Runtime 300 seconds
[  435.684325][ T4942] block nbd0: Possible stuck request ffff888027fb5240: control (read@1024,1024B). Runtime 300 seconds
[  435.695347][ T4942] block nbd0: Possible stuck request ffff888027fb5400: control (read@2048,1024B). Runtime 300 seconds
[  435.706438][ T4942] block nbd0: Possible stuck request ffff888027fb55c0: control (read@3072,1024B). Runtime 300 seconds
[  435.730167][ T5705] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  435.766204][ T5705] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  435.795411][ T5705] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  435.902731][ T5705] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  435.943485][ T5705] usb 6-1: config 179 interface 65 has no altsetting 0
[  436.087193][ T5705] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  436.109484][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.869523][ T5705] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input32
[  436.953387][ T4962] input input32: unable to receive magic message: -110
[  437.010803][ T4962] input input32: unable to receive magic message: -32
[  437.258547][ T4962] input input32: unable to receive magic message: -32
[  437.272812][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.933853][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.040632][ T4962] input input32: unable to receive magic message: -32
[  438.106574][ T4962] input input32: unable to receive magic message: -32
[  438.526106][T10575] input input32: unable to receive magic message: -32
[  440.014544][ T5705] usb 6-1: USB disconnect, device number 37
[  440.014610][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  440.073048][T10587] overlayfs: failed to clone upperpath
[  441.480482][T10590] input: syz0 as /devices/virtual/input/input33
[  441.972397][T10596] fuse: Bad value for 'fd'
[  443.204785][T10610] overlayfs: invalid origin (0000)
[  444.957021][ T5796] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  445.507061][ T5796] usb 3-1: Using ep0 maxpacket: 32
[  445.636820][ T5796] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[  445.719308][ T5796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  445.729715][ T5796] usb 3-1: config 0 has no interface number 0
[  445.736377][ T5796] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  446.097629][   T30] audit: type=1326 audit(1777264338.802:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106e39cdd9 code=0x7fc00000
[  446.139058][T10649] overlayfs: cannot append lower layer
[  446.171277][T10650] fuse: Bad value for 'fd'
[  446.185729][ T5796] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  446.190656][   T30] audit: type=1400 audit(1777264338.842:488): avc:  denied  { getopt } for  pid=10638 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  446.282326][   T30] audit: type=1400 audit(1777264338.902:489): avc:  denied  { search } for  pid=10638 comm="syz.5.1212" name="/" dev="configfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  446.642698][   T30] audit: type=1326 audit(1777264339.342:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106e39cdd9 code=0x7fc00000
[  446.866929][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.875740][ T5796] usb 3-1: Product: syz
[  446.880275][ T5796] usb 3-1: Manufacturer: syz
[  446.885373][ T5796] usb 3-1: SerialNumber: syz
[  446.896554][ T5796] usb 3-1: config 0 descriptor??
[  446.915821][ T5796] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input34
[  447.382282][   T30] audit: type=1326 audit(1777264340.092:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.2.1209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e7679cdd9 code=0x0
[  447.969171][T10652] overlayfs: invalid origin (0000)
[  448.249091][T10669] FAT-fs (nullb0): bogus number of reserved sectors
[  448.283657][T10669] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  448.513035][ T5705] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  448.525353][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  448.538588][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  448.546746][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  448.554993][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  448.564258][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  448.590640][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  448.603381][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  448.613222][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  448.622312][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  448.629759][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  448.726284][ T5705] usb 6-1: config index 0 descriptor too short (expected 65230, got 72)
[  448.746124][ T5705] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  448.759518][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.777343][ T5705] usb 6-1: Product: syz
[  448.787701][ T5705] usb 6-1: Manufacturer: syz
[  448.807150][ T5705] usb 6-1: SerialNumber: syz
[  448.829251][ T5705] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  448.876419][T10683] fuse: fd is not a fuse device
[  448.987579][ T5718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  449.302188][T10678] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.321269][T10678] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.339016][T10678] bridge_slave_0: entered allmulticast mode
[  449.358831][T10678] bridge_slave_0: entered promiscuous mode
[  449.369163][   T30] audit: type=1400 audit(1777264341.094:492): avc:  denied  { cmd } for  pid=10706 comm="syz.0.1225" path="socket:[45598]" dev="sockfs" ino=45598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  449.390064][T10678] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.399679][T10678] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.407273][T10678] bridge_slave_1: entered allmulticast mode
[  449.415249][T10678] bridge_slave_1: entered promiscuous mode
[  449.480572][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.489980][T10708] bridge0: port 2(bridge_slave_1) entered listening state
[  449.504589][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.520789][T10708] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.530692][T10678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.542687][T10678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.571778][T10678] team0: Port device team_slave_0 added
[  449.580345][T10678] team0: Port device team_slave_1 added
[  449.660303][T10678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.667302][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.694513][T10678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.731562][T10678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.738550][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.764454][T10678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.807279][T10678] hsr_slave_0: entered promiscuous mode
[  449.854945][T10678] hsr_slave_1: entered promiscuous mode
[  449.863939][ T5705] usb 3-1: USB disconnect, device number 47
[  449.870832][T10678] debugfs: 'hsr0' already exists in 'hsr'
[  449.880943][T10678] Cannot create hsr debugfs directory
[  450.053939][ T5718] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  450.087288][ T5718] ath9k_htc: Failed to initialize the device
[  450.204533][  T988] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  450.602358][ T5718] usb 6-1: ath9k_htc: USB layer deinitialized
[  450.606071][  T988] usb 1-1: Using ep0 maxpacket: 8
[  450.741908][ T5618] Bluetooth: hci5: command tx timeout
[  450.904106][T10678] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  450.915298][T10678] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  450.928792][T10678] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  450.939294][T10678] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  450.947998][T10678] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  450.956379][  T988] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  450.965391][  T988] usb 1-1: config 179 has no interface number 0
[  450.972297][  T988] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  450.992439][  T988] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  451.003825][  T988] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  451.019204][T10678] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  451.049937][T10678] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  451.072017][  T988] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  451.083394][  T988] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  451.115872][T10678] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  451.124542][  T988] usb 1-1: config 179 interface 65 has no altsetting 0
[  451.143189][  T988] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  451.180218][  T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.238240][T10678] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.270664][   T30] audit: type=1400 audit(1777264342.974:493): avc:  denied  { execute } for  pid=10726 comm="syz.2.1229" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  451.296377][T10678] 8021q: adding VLAN 0 to HW filter on device team0
[  451.314200][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.321301][ T6241] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.353405][ T5704] usb 6-1: USB disconnect, device number 38
[  451.550228][T10678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  451.580327][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.588587][  T988] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input35
[  451.609875][T10678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.645194][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.421876][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.429041][ T6241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.666020][ T4962] input input35: unable to receive magic message: -110
[  453.913188][ T5618] Bluetooth: hci5: command tx timeout
[  454.413603][ T4962] input input35: unable to receive magic message: -32
[  454.569521][ T4962] input input35: unable to receive magic message: -32
[  454.743675][ T4962] input input35: unable to receive magic message: -32
[  454.814131][ T4962] input input35: unable to receive magic message: -32
[  454.894704][ T5704] usb 1-1: USB disconnect, device number 58
[  454.894827][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  454.910429][    C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  455.049651][T10755] FAULT_INJECTION: forcing a failure.
[  455.049651][T10755] name failslab, interval 1, probability 0, space 0, times 0
[  455.366924][T10755] CPU: 1 UID: 0 PID: 10755 Comm: syz.2.1233 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  455.366952][T10755] Tainted: [L]=SOFTLOCKUP
[  455.366958][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  455.366967][T10755] Call Trace:
[  455.366972][T10755]  <TASK>
[  455.366979][T10755]  dump_stack_lvl+0x100/0x190
[  455.367004][T10755]  should_fail_ex.cold+0x5/0xa
[  455.367027][T10755]  should_failslab+0xc2/0x120
[  455.367048][T10755]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  455.367072][T10755]  ? proc_alloc_inode+0x25/0x200
[  455.367095][T10755]  ? __pfx_proc_alloc_inode+0x10/0x10
[  455.367117][T10755]  proc_alloc_inode+0x25/0x200
[  455.367137][T10755]  alloc_inode+0x68/0x250
[  455.367152][T10755]  new_inode+0x22/0x1c0
[  455.367170][T10755]  proc_pid_make_inode+0x22/0x160
[  455.367190][T10755]  proc_pident_instantiate+0x85/0x310
[  455.367214][T10755]  proc_pident_lookup+0x1e3/0x270
[  455.367240][T10755]  __lookup_slow+0x251/0x460
[  455.367266][T10755]  ? __pfx___lookup_slow+0x10/0x10
[  455.367302][T10755]  ? __d_lookup+0x266/0x4a0
[  455.367325][T10755]  lookup_slow+0x50/0x70
[  455.367349][T10755]  link_path_walk+0x1377/0x1cc0
[  455.367375][T10755]  path_openat+0x1be/0x31a0
[  455.367394][T10755]  ? kasan_save_stack+0x3f/0x50
[  455.367417][T10755]  ? kasan_save_stack+0x30/0x50
[  455.367439][T10755]  ? kasan_save_track+0x14/0x30
[  455.367462][T10755]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  455.367492][T10755]  ? __pfx_path_openat+0x10/0x10
[  455.367521][T10755]  do_file_open+0x20e/0x430
[  455.367544][T10755]  ? __pfx_do_file_open+0x10/0x10
[  455.367573][T10755]  ? __pfx_kfree_link+0x10/0x10
[  455.367597][T10755]  ? alloc_fd+0x476/0x790
[  455.367620][T10755]  ? do_getname+0x191/0x390
[  455.367646][T10755]  do_sys_openat2+0x10d/0x1e0
[  455.367669][T10755]  ? __pfx_do_sys_openat2+0x10/0x10
[  455.367691][T10755]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  455.367722][T10755]  ? __fget_files+0x21f/0x3d0
[  455.367746][T10755]  __x64_sys_openat+0x12d/0x210
[  455.367771][T10755]  ? __pfx___x64_sys_openat+0x10/0x10
[  455.367793][T10755]  ? ksys_write+0x1ac/0x250
[  455.367814][T10755]  ? rcu_is_watching+0x12/0xc0
[  455.367842][T10755]  do_syscall_64+0x10b/0xf80
[  455.367860][T10755]  ? clear_bhb_loop+0x40/0x90
[  455.367880][T10755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.367897][T10755] RIP: 0033:0x7f0e7675d60e
[  455.367911][T10755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  455.367927][T10755] RSP: 002b:00007f0e749f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  455.367943][T10755] RAX: ffffffffffffffda RBX: 00007f0e749f66c0 RCX: 00007f0e7675d60e
[  455.367954][T10755] RDX: 0000000000000002 RSI: 00007f0e749f5f90 RDI: ffffffffffffff9c
[  455.367964][T10755] RBP: 00007f0e749f6090 R08: 0000000000000000 R09: 0000000000000000
[  455.367974][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  455.367983][T10755] R13: 00007f0e76a16128 R14: 00007f0e76a16090 R15: 00007ffd44a21c08
[  455.368007][T10755]  </TASK>
[  455.824411][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.840619][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1236'.
[  455.911956][T10763] batadv_slave_0: entered promiscuous mode
[  455.998894][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.133351][ T5704] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  456.214215][ T5618] Bluetooth: hci5: command tx timeout
[  456.222290][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.283053][ T5704] usb 6-1: Using ep0 maxpacket: 8
[  456.307123][ T5704] usb 6-1: config 0 has an invalid interface number: 176 but max is 2
[  456.337147][ T5704] usb 6-1: config 0 has no interface number 1
[  456.368151][ T5704] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  456.405003][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.450568][ T5704] usb 6-1: config 0 descriptor??
[  456.454485][ T5795] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  456.473857][T10779] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1239'.
[  456.501799][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.633643][ T5795] usb 1-1: Using ep0 maxpacket: 8
[  456.670179][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.671425][ T5795] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  456.718847][ T5704] qcserial 6-1:0.2: Qualcomm USB modem converter detected
[  456.737844][ T5795] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40
[  456.768801][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.819303][ T5795] usb 1-1: Product: syz
[  456.854231][ T5795] usb 1-1: Manufacturer: syz
[  456.888060][ T5795] usb 1-1: SerialNumber: syz
[  457.063271][ T5705] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  457.151070][   T13] bridge_slave_1: left allmulticast mode
[  457.194658][   T13] bridge_slave_1: left promiscuous mode
[  457.201353][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.232100][ T5705] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4
[  457.242707][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.252034][   T13] bridge_slave_0: left allmulticast mode
[  457.537271][   T13] bridge_slave_0: left promiscuous mode
[  457.552125][ T5705] gspca_main: sunplus-2.14.0 probing 046d:0960
[  457.565983][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.836226][ T5795] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  458.052755][ T5795] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2
[  458.072820][ T5795] usb 1-1: USB disconnect, device number 59
[  458.093496][ T5705] gspca_sunplus: reg_w_riv err -110
[  458.118191][ T5705] sunplus 3-1:8.0: probe with driver sunplus failed with error -110
[  458.204188][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  458.304392][ T5618] Bluetooth: hci5: command tx timeout
[  458.430696][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  458.442686][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  458.452805][   T13] bond0 (unregistering): Released all slaves
[  458.474524][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5
[  458.562550][   T13] tipc: Left network mode
[  458.600952][T10811] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1241'.
[  458.802595][T10678] veth0_vlan: entered promiscuous mode
[  458.812708][T10678] veth1_vlan: entered promiscuous mode
[  458.833106][T10678] veth0_macvtap: entered promiscuous mode
[  458.856574][  T988] usb 6-1: USB disconnect, device number 39
[  458.864784][  T988] qcserial 6-1:0.2: device disconnected
[  458.885919][T10678] veth1_macvtap: entered promiscuous mode
[  458.935362][T10678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.042167][T10678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.365723][ T5733] usb 3-1: USB disconnect, device number 48
[  459.467527][   T13] hsr_slave_0: left promiscuous mode
[  459.496532][   T13] hsr_slave_1: left promiscuous mode
[  459.502371][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.534290][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.544169][T10838] overlayfs: failed to clone upperpath
[  459.557631][T10829] overlayfs: invalid origin (0000)
[  459.570192][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.632619][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.776354][ T5796] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  459.908247][   T13] veth1_macvtap: left promiscuous mode
[  459.923486][   T13] veth0_macvtap: left promiscuous mode
[  459.929681][   T13] veth1_vlan: left promiscuous mode
[  459.936349][ T5796] usb 1-1: Using ep0 maxpacket: 32
[  459.942354][   T13] veth0_vlan: left promiscuous mode
[  459.950221][ T5796] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  459.960346][ T5796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  459.970674][ T5796] usb 1-1: config 0 has no interface number 0
[  459.976762][ T5796] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  460.229543][   T13] pim6reg (unregistering): left allmulticast mode
[  460.591992][ T5796] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  460.610033][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.637720][ T5796] usb 1-1: Product: syz
[  460.651935][ T5796] usb 1-1: Manufacturer: syz
[  460.672937][ T5796] usb 1-1: SerialNumber: syz
[  460.686243][   T13] team0 (unregistering): Port device team_slave_1 removed
[  460.702623][ T5796] usb 1-1: config 0 descriptor??
[  460.758948][ T5796] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  460.783407][ T5796] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5
[  460.876220][   T13] team0 (unregistering): Port device team_slave_0 removed
[  461.438741][ T5796] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  461.448932][ T5796] usbhid 1-1:0.35: couldn't find an input interrupt endpoint
[  461.540522][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.573429][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.582131][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.590820][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.646671][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6
[  461.727268][ T5733] usb 1-1: USB disconnect, device number 60
[  461.933411][T10858] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  461.939338][T10858] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  461.954070][T10858] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  462.662727][   T30] audit: type=1400 audit(1777264354.294:494): avc:  denied  { read write } for  pid=10881 comm="syz.2.1255" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  462.765485][   T30] audit: type=1400 audit(1777264354.304:495): avc:  denied  { open } for  pid=10881 comm="syz.2.1255" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  462.921843][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.937253][   T13] IPVS: stop unused estimator thread 0...
[  462.964996][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.000387][T10888] overlayfs: failed to clone upperpath
[  463.219595][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.229633][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.976450][ T5618] Bluetooth: hci5: command 0x0c1a tx timeout
[  464.004402][   T30] audit: type=1400 audit(1777264355.704:496): avc:  denied  { create } for  pid=10894 comm="syz.5.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  464.993205][T10915] overlayfs: invalid origin (0000)
[  465.004659][T10915] overlayfs: overlapping lowerdir path
[  465.379592][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7
[  465.393220][ T5796] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  465.576724][ T5796] usb 3-1: unable to get BOS descriptor or descriptor too short
[  465.604679][ T5796] usb 3-1: config 63 has an invalid interface number: 66 but max is 0
[  465.635056][ T5796] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  465.668074][ T5796] usb 3-1: config 63 has no interface number 0
[  465.693741][ T5796] usb 3-1: config 63 interface 66 has no altsetting 0
[  465.721857][ T5796] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  465.733939][ T4942] block nbd0: Possible stuck request ffff888027fb5080: control (read@0,1024B). Runtime 330 seconds
[  465.741507][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.744760][ T4942] block nbd0: Possible stuck request ffff888027fb5240: control (read@1024,1024B). Runtime 330 seconds
[  465.744787][ T4942] block nbd0: Possible stuck request ffff888027fb5400: control (read@2048,1024B). Runtime 330 seconds
[  465.744810][ T4942] block nbd0: Possible stuck request ffff888027fb55c0: control (read@3072,1024B). Runtime 330 seconds
[  465.826491][ T5796] usb 3-1: Product: syz
[  465.879107][ T5796] usb 3-1: Manufacturer: syz
[  465.893750][ T5796] usb 3-1: SerialNumber: syz
[  466.070673][ T5618] Bluetooth: hci5: command 0x0c1a tx timeout
[  466.210319][ T5796] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22
[  466.309205][ T5796] usb 3-1: USB disconnect, device number 49
[  466.566843][T10958] netlink: 'syz.6.1271': attribute type 21 has an invalid length.
[  466.588251][T10958] netlink: 'syz.6.1271': attribute type 30 has an invalid length.
[  466.725443][ T5796] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  466.893936][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8
[  466.927652][ T5796] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  466.962016][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.997458][ T5796] usb 3-1: Product: syz
[  467.009846][ T5796] usb 3-1: Manufacturer: syz
[  467.033066][ T5796] usb 3-1: SerialNumber: syz
[  467.070305][ T5796] usb 3-1: config 0 descriptor??
[  467.308981][ T5796] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  467.543516][T10972] 9pnet: Found fid 0 not clunked
[  467.939036][   T30] audit: type=1400 audit(1777264359.654:497): avc:  denied  { setopt } for  pid=10982 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  468.923769][ T5618] Bluetooth: hci5: command 0x0c1a tx timeout
[  469.276350][   T30] audit: type=1400 audit(1777264359.654:498): avc:  denied  { bind } for  pid=10982 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  574.612849][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  574.619830][    C1] rcu: 	0-...!: (1 GPs behind) idle=e71c/1/0x4000000000000000 softirq=51100/51101 fqs=2
[  574.630316][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=54217, q=328 ncpus=2)
[  574.638020][    C1] Sending NMI from CPU 1 to CPUs 0:
[  574.638043][    C0] NMI backtrace for cpu 0
[  574.638056][    C0] CPU: 0 UID: 0 PID: 5603 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  574.638076][    C0] Tainted: [L]=SOFTLOCKUP
[  574.638080][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  574.638088][    C0] RIP: 0010:debug_smp_processor_id+0x0/0x20
[  574.638112][    C0] Code: 20 48 c7 c7 40 31 1c 8c e8 9d 95 98 f5 e8 98 1c eb f5 eb ac 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 c7 c6 80 31 1c 8c 48 c7 c7 c0 31 1c 8c e9 f9 fe ff
[  574.638124][    C0] RSP: 0018:ffffc90000007d60 EFLAGS: 00000083
[  574.638136][    C0] RAX: 0000000000000000 RBX: ffff88802aa752c0 RCX: ffffffff899ab85d
[  574.638145][    C0] RDX: 1ffff1100554ea5d RSI: ffffffff899b73d2 RDI: ffff88802aa752c0
[  574.638155][    C0] RBP: ffffffff899b73d2 R08: 0000000000000005 R09: 0000000000000000
[  574.638163][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  574.638172][    C0] R13: 18aa1e45cc706519 R14: ffff88805579c800 R15: ffff88805579c800
[  574.638181][    C0] FS:  000055558d9ef500(0000) GS:ffff888124379000(0000) knlGS:0000000000000000
[  574.638196][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  574.638206][    C0] CR2: 00007fcf8e5456b8 CR3: 000000005baf9000 CR4: 00000000003526f0
[  574.638215][    C0] Call Trace:
[  574.638220][    C0]  <IRQ>
[  574.638225][    C0]  rcu_is_watching+0x12/0xc0
[  574.638247][    C0]  ? advance_sched+0x6a2/0xd20
[  574.638264][    C0]  lock_release+0x245/0x310
[  574.638283][    C0]  _raw_spin_unlock+0x16/0x50
[  574.638303][    C0]  advance_sched+0x6a2/0xd20
[  574.638323][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[  574.638342][    C0]  ? __pfx_advance_sched+0x10/0x10
[  574.638360][    C0]  __hrtimer_run_queues+0x470/0xa00
[  574.638385][    C0]  hrtimer_interrupt+0x3e5/0x940
[  574.638403][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x460
[  574.638424][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  574.638438][    C0]  </IRQ>
[  574.638443][    C0]  <TASK>
[  574.638448][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  574.638464][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70
[  574.638481][    C0] Code: 01 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 d1 4b 84 09 8b 82 cc 16 00 00 85 c0 74 f1 8b 82 a8 16 00 00 <83> f8 02 75 e6 48 8b 8a b0 16 00 00 8b 92 ac 16 00 00 48 8b 01 48
[  574.638499][    C0] RSP: 0018:ffffc900045774a0 EFLAGS: 00000246
[  574.638509][    C0] RAX: 0000000000000000 RBX: ffff888071bab5f0 RCX: ffffffff8282674b
[  574.638518][    C0] RDX: ffff88807c9c4a00 RSI: ffffffff82826877 RDI: ffff88807c9c4a00
[  574.638527][    C0] RBP: 8000000000000007 R08: 0000000000000005 R09: 0000000000000000
[  574.638536][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[  574.638544][    C0] R13: 0000000000000001 R14: ffff88805bb055f0 R15: 1ffff920008aee97
[  574.638556][    C0]  ? __page_table_check_ptes_set+0xcb/0x4e0
[  574.638571][    C0]  ? __page_table_check_ptes_set+0x1f7/0x4e0
[  574.638587][    C0]  __page_table_check_ptes_set+0x1f7/0x4e0
[  574.638602][    C0]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  574.638618][    C0]  ? copy_page_range+0x1e45/0x5b00
[  574.638636][    C0]  ? copy_page_range+0x1e53/0x5b00
[  574.638655][    C0]  copy_page_range+0x217a/0x5b00
[  574.638683][    C0]  ? mas_wr_store_entry+0xa1/0x1e80
[  574.638699][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  574.638720][    C0]  ? __pfx___might_resched+0x10/0x10
[  574.638743][    C0]  ? up_write+0x28c/0x4f0
[  574.638763][    C0]  dup_mmap+0xd25/0x2180
[  574.638783][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  574.638798][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  574.638814][    C0]  ? __lock_acquire+0x4a5/0x2630
[  574.638830][    C0]  ? find_held_lock+0x2b/0x80
[  574.638843][    C0]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  574.638871][    C0]  copy_process+0x7b37/0x7fa0
[  574.638896][    C0]  ? __pfx_copy_process+0x10/0x10
[  574.638916][    C0]  ? do_raw_spin_lock+0x128/0x260
[  574.638939][    C0]  kernel_clone+0x12e/0x9c0
[  574.638952][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  574.638964][    C0]  ? __lock_acquire+0x4a5/0x2630
[  574.638983][    C0]  ? find_held_lock+0x2b/0x80
[  574.638995][    C0]  ? __might_fault+0xc5/0x140
[  574.639015][    C0]  __do_sys_clone+0xd9/0x120
[  574.639028][    C0]  ? __pfx___do_sys_clone+0x10/0x10
[  574.639047][    C0]  ? rcu_is_watching+0x12/0xc0
[  574.639067][    C0]  do_syscall_64+0x10b/0xf80
[  574.639082][    C0]  ? clear_bhb_loop+0x40/0x90
[  574.639097][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.639111][    C0] RIP: 0033:0x7fcf8d7c5852
[  574.639123][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  574.639135][    C0] RSP: 002b:00007ffc95b5ac50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  574.639149][    C0] RAX: ffffffffffffffda RBX: 00007ffc95b5ac50 RCX: 00007fcf8d7c5852
[  574.639158][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  574.639167][    C0] RBP: 00007ffc95b5addc R08: 0000000000000000 R09: 0000000000000001
[  574.639176][    C0] R10: 000055558d9ef7d0 R11: 0000000000000246 R12: 0000000000000001
[  574.639185][    C0] R13: 00000000000927c0 R14: 0000000000072a04 R15: 00007ffc95b5ae30
[  574.639199][    C0]  </TASK>
[  574.640039][    C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g54217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  575.156517][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  575.166469][    C1] rcu: RCU grace-period kthread stack dump:
[  575.172338][    C1] task:rcu_preempt     state:R  running task     stack:28216 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  575.185817][    C1] Call Trace:
[  575.189083][    C1]  <TASK>
[  575.192006][    C1]  __schedule+0x10e9/0x6820
[  575.196516][    C1]  ? __pfx___schedule+0x10/0x10
[  575.201353][    C1]  ? find_held_lock+0x2b/0x80
[  575.206019][    C1]  ? schedule+0x2bf/0x390
[  575.210340][    C1]  schedule+0xdd/0x390
[  575.214396][    C1]  schedule_timeout+0x127/0x280
[  575.219242][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  575.224610][    C1]  ? __pfx_process_timeout+0x10/0x10
[  575.229890][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  575.235685][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  575.241141][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[  575.245896][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  575.251172][    C1]  ? prepare_to_swait_event+0xae/0x4a0
[  575.256622][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  575.261555][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[  575.266747][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  575.272551][    C1]  rcu_gp_kthread+0x179/0x230
[  575.277218][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  575.282405][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  575.288201][    C1]  ? __kthread_parkme+0x18c/0x230
[  575.293216][    C1]  ? kthread+0x13a/0x450
[  575.297450][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  575.302639][    C1]  kthread+0x370/0x450
[  575.306701][    C1]  ? __pfx_kthread+0x10/0x10
[  575.311288][    C1]  ret_from_fork+0x72b/0xd50
[  575.315873][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  575.320977][    C1]  ? __switch_to+0x800/0x1100
[  575.325651][    C1]  ? __pfx_kthread+0x10/0x10
[  575.330231][    C1]  ret_from_fork_asm+0x1a/0x30
[  575.335002][    C1]  </TASK>
[  575.338008][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  575.344315][    C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  575.355154][    C1] Tainted: [L]=SOFTLOCKUP
[  575.359460][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  575.369502][    C1] Workqueue: events_unbound toggle_allocation_gate
[  575.376005][    C1] RIP: 0010:smp_call_function_many_cond+0x589/0x1700
[  575.382672][    C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 09 80 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31
[  575.402265][    C1] RSP: 0018:ffffc90000127870 EFLAGS: 00000293
[  575.408317][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc0f3d
[  575.416274][    C1] RDX: ffff88801e2b8000 RSI: ffffffff81fc0f17 RDI: ffff88801e2b8000
[  575.424231][    C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000
[  575.432188][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  575.440143][    C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0
[  575.448100][    C1] FS:  0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000
[  575.457017][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  575.463587][    C1] CR2: 00007f106e387f40 CR3: 000000000e596000 CR4: 00000000003526f0
[  575.471548][    C1] Call Trace:
[  575.474812][    C1]  <TASK>
[  575.477733][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  575.482760][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  575.489080][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  575.494454][    C1]  ? __pfx___text_poke+0x10/0x10
[  575.499389][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  575.504408][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  575.509511][    C1]  ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190
[  575.516001][    C1]  smp_text_poke_batch_finish+0x337/0xc60
[  575.521710][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  575.527944][    C1]  ? arch_jump_label_transform_queue+0xc0/0x120
[  575.534172][    C1]  ? find_held_lock+0x2b/0x80
[  575.538848][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  575.544819][    C1]  jump_label_update+0x37a/0x550
[  575.549759][    C1]  static_key_enable_cpuslocked+0x1bc/0x270
[  575.555643][    C1]  static_key_enable+0x1a/0x20
[  575.560397][    C1]  toggle_allocation_gate+0xfe/0x2d0
[  575.565682][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  575.571577][    C1]  ? rcu_is_watching+0x12/0xc0
[  575.576343][    C1]  process_one_work+0xa0e/0x1980
[  575.581282][    C1]  ? __pfx_process_one_work+0x10/0x10
[  575.586652][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  575.592545][    C1]  worker_thread+0x5ef/0xe50
[  575.597140][    C1]  ? kthread+0x13a/0x450
[  575.601373][    C1]  ? __pfx_worker_thread+0x10/0x10
[  575.606478][    C1]  kthread+0x370/0x450
[  575.610538][    C1]  ? __pfx_kthread+0x10/0x10
[  575.615122][    C1]  ret_from_fork+0x72b/0xd50
[  575.619705][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  575.624811][    C1]  ? __switch_to+0x800/0x1100
[  575.629486][    C1]  ? __pfx_kthread+0x10/0x10
[  575.634068][    C1]  ret_from_fork_asm+0x1a/0x30
[  575.638841][    C1]  </TASK>