last executing test programs:

10m49.521612365s ago: executing program 32 (id=1735):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfffffffffffffd84, 0x0, &(0x7f0000000540)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (fail_nth: 5)

10m21.74783252s ago: executing program 4 (id=1736):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x136)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x6020400)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020)

10m21.521737265s ago: executing program 4 (id=1812):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000300)={0xbc, 0x0, 0x2}) (fail_nth: 1)

10m20.686312365s ago: executing program 4 (id=1817):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1a0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xf8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

10m20.413688781s ago: executing program 33 (id=1817):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1a0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xf8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

10m13.324662715s ago: executing program 2 (id=1842):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0xff92, 0x0, 0x1, 0x4000007})
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120008050b3d18000000000001090224000100070000090400060103000000092104000c012228000905810320008408fe0000000000a60353301002fa25bb56b692bb30129d6ccf7e4b891d00f022337e49f527553441f410b4a79c74b15a13b580cecc1e617362ca5b39ce4ed041193fca2397960b184c779fcb82caff6555154576f64dcf5dd2b7cdfb213c8350a3c765e7da3e89ff8e9f9652f975f20cd05039e9de3b1d754a5198c76cfad51b1d1797c1700ad1c44fa12cfa43e48a157633d728e6dce5cdfd1ecc185c958277843d17e6fa8f69df9f66d5efa8cb921ed68697631e51acdc2838179be9e3bc3970a378c2619be34fbf5a6a3ac2c815c27c30ccc814ba6261795dfa0b5f60cf9b0ebd70570f292f05c5aa897cd72efe04370a9d9686ae43213cfa1f33d5b2cce5fe49281cd8f729"], 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x6, 0x0, &(0x7f0000000080))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000ef96b080000a06010100000000000000000700000980000000000000000000000000000000050007000c000000060004404e22000008000940800000010500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)
r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x18200, 0x0)
ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000440)={0x3, 0x10000, 0x10, 0x3, 0x10, 0x200, 0x0, 0x5, 0x10, 0x8, 0x80, 0x10000, &(0x7f0000000240)=[0x8, 0x8, 0x0, 0x71], 0x4, &(0x7f0000000340)="be20e01112ed497f5533a46dcf07db4039f1933ebcd61c130180cf03da9c0093ff949c491579302d2772f39ebb909d27f1be157d9801a1e96a16a5378fe6435cfc83328815b47a647e5bd705eb16632226cac9a459f4ae50ade61f6ffac19a80ac708505b97feb92de7b11096d6c21d712eb0cfe8abb04075fb3feb8cf0c8b95ea2f942d6dbb79eb97124b2e0a331473367ea36cd03fa0925c0e7f70927846f970a5b529c76c7d1296999c04b289de0d10d19e4b8eeb6959a23e92904ffc9265628f094fb6376a01d790c1a9a9d2f41fb6f0b73f1e71797c8561c17258e73a4b54dd270799766c8c6abc4fbaa09a49e479fbc067f4f64e5098", 0xf9})
ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000300)={0xc000003, 0xf, &(0x7f0000000040)=[0x16, 0x1000009, 0x1003, 0xffff32eb, 0x8, 0xffffdff9, 0x2d7b, 0x401, 0x5d, 0x5, 0x4, 0x633, 0x6, 0xce, 0x2], 0x0, 0x4000003})
r5 = userfaultfd(0x800)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2)
ioctl$KDFONTOP_SET_DEF(r6, 0x4b4b, &(0x7f0000000880)={0x2, 0x1, 0x14, 0xb, 0xc3, 0x0})
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file3\x00')
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})

10m10.025854648s ago: executing program 2 (id=1852):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x2, 0x0, [{0x203, 0x0, 0x292}, {0x357, 0x0, 0x3}]})

10m9.172985778s ago: executing program 2 (id=1853):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xcd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff0b, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000d00000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)

10m8.965265458s ago: executing program 2 (id=1854):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x136)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x6020400)
read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x2020)

10m8.529319251s ago: executing program 2 (id=1856):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000802)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x40488c2}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x48, 0x2, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9})

10m7.044828461s ago: executing program 2 (id=1862):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpeername(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000000c0)=0x80)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) (async, rerun: 32)
ioctl$VT_WAITACTIVE(r1, 0x5607) (rerun: 32)

10m6.793486592s ago: executing program 34 (id=1862):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpeername(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000000c0)=0x80)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) (async, rerun: 32)
ioctl$VT_WAITACTIVE(r1, 0x5607) (rerun: 32)

9m48.222040276s ago: executing program 6 (id=1863):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x136)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x6020400)
read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x2020)

9m48.082629077s ago: executing program 6 (id=1926):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010100, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2f, 0x70bd2a, 0x70bd28, 0x70bd26, 0x3}}]}, 0x154}}, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x2)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})

9m47.057815476s ago: executing program 6 (id=1930):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt(r1, 0x3, 0x5, 0x0, 0x0)
listen(r0, 0x7)

9m46.803956943s ago: executing program 35 (id=1930):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt(r1, 0x3, 0x5, 0x0, 0x0)
listen(r0, 0x7)

9m46.556543614s ago: executing program 0 (id=1933):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0xc, 0x8, 0x0, 0x0, 0x69, 0xfffffffffffffff3})
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58)
mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xfffffff1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0xe, 0x1}}, 0x44, 0x1, &(0x7f0000000100)="92bf9800be902377827fa88415921644a5e75310e51f330fbaf097662c12feb05e1ad720a7e633d9a31824523b5c963045ba495a853e533f4baeee51368771416dff2b35"})
r2 = mq_open(&(0x7f00000001c0)='\\:\'}.\x00', 0x800, 0x24, &(0x7f0000000200)={0x9, 0xe9e, 0x5c21, 0xa00000000000})
mq_getsetattr(r2, &(0x7f0000000240)={0xe, 0xb898, 0x5, 0x7}, &(0x7f0000000280))
r3 = syz_io_uring_complete(0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x45}, 0x8)
r4 = accept4$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0xc0800)
sendto$packet(r4, &(0x7f0000000380)="3c8b23a21af2ec6381418946a813ee4dfe683d645f17bff057b77f7b3ae38a99d5d9c5c50870d1dfb8d55631d813a9e2c4e2333cfd8df69683a5ac024bf704cfdba4d05f2b03ea2e6fbc4a8398469c832c120e28d3e76417b017f8c43556f3db6535cb13c145184311cf08", 0x6b, 0x40, 0x0, 0x0)
io_setup(0x1, &(0x7f0000000400)=<r6=>0x0)
io_pgetevents(r6, 0x1000, 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x7fffffffffffffff]}, 0x8})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
landlock_create_ruleset(&(0x7f0000000680)={0x10000, 0x2, 0x2}, 0x18, 0x3)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r7)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20008000)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
r10 = syz_genetlink_get_family_id$net_dm(&(0x7f00000008c0), r7)
sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r10, 0x8, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6044}, 0x4)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r7)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000a40)={'wpan3\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r11, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x56}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002080)={{<r13=>r1, &(0x7f0000000b80)='\x00', 0x20400, &(0x7f0000000bc0)={@align=0x8000000000000001, {0x5, 0x6, 0x3, 0x7}}, 0x696b, &(0x7f0000000c00), &(0x7f0000000c40)=0x5}, 0x5, &(0x7f0000001fc0)=[{0x2, 0x6, &(0x7f0000000c80)='*;\'\x00', &(0x7f0000000cc0)="f25d1bcc6728ebac8eeab4e4b4a69ad06e7c54a79cca9cccf0c70837844cce416282b9f63ab034b6dfcbaf75f9868d05a010e91672bfa708e477bd0d1754db734099c17f676080864a64ce90bd604e0cfa72943756c409efe9c4af6ed5168822512c8830fd46f7bbc9e8f9a41e081bf0dd1af25b481388aeba093bcddc9616809d80c3b6399ce4a18b72aaa3458ff5b2652d1396", 0x94, 0x30}, {0x1, 0x9, &(0x7f0000000d80)='wpan3\x00', &(0x7f0000000dc0)="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", 0x1000, 0xa}, {0x2, 0xff, &(0x7f0000001dc0)='{\x00', &(0x7f0000001e00)="ec284dcfdc3891a52565ed8679c3b2814d", 0x11, 0x2}, {0x3, 0x2, &(0x7f0000001e40)='$&{\x00', &(0x7f0000001e80)="ee7ae5cf580372b97f6e522bca6568a3d727e89c3e7cb91ad0ed14a07a42cdfcf2d960716bc061ab6e63beb56284d690d31bd6ecfb1bb0ab7d9cceab2ce5d6974f6bee34ed08128583ffa72170ee17f2e8877ed31c58d28de311e056fc19902e286536cbab84ad447ed1f74d9b0788626efbce5ba6f0b5ed81bdfe8309982d9f372b8db202918d5f9e12f62b22c48481c8f87669e657b737a3342280d0c00ba1ff109b93f48ba62b5a49d77ecf1391", 0xaf, 0x10}, {0x2, 0x1000, &(0x7f0000001f40)='\x00', &(0x7f0000001f80)="bad6c283d0", 0x5, 0x10}]})
ioctl$USBDEVFS_GET_SPEED(r13, 0x551f)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000023c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002380)={&(0x7f0000002240)={0x140, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

9m45.571985764s ago: executing program 0 (id=1935):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)='0', 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002e1f36a087205feca07440102030109022b000101099005090408070224d86c0509058000000408040609051103000200041c0705c1", @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x7e, &(0x7f0000000000)=@string={0x7e, 0x3, "ed57aa3acd100cc08590c109ea2e7636ad5a0d2f79c3d46f7f2d1589815cc6b73681ded9796eee79689ea7f2152297ef802fa5c3abf2de7f2bbeed2efa31fa85ea141ef8822cc6b960df4335e5c5c7c32c416731c4fe87d21a9596e8f32782a419a16703b7e8555c05a78f64afa05cc18133790a8738e91ab3def65a"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41c}}, {0x1b, &(0x7f0000000100)=@string={0x21, 0x3, "06fbc8a58ef885c57039c5aa6ac0889766a7e9a07077d3b49b1e35cef056aa"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x422}}]})

9m43.870510945s ago: executing program 0 (id=1941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x36}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000580)={0x11, 0xc5, &(0x7f0000000480)="1d5adbbcb902145c2f62c4ba35864a2af48ea065a505fa679d16198192995ec01d615197ca0c1a15b9daf5d1a03ca31aea3f3b3b2569b54d7090c72afb6871233f18d0f3a6f48470768bdc0e87134b677d3280771a7e5d4cd439654f58a296cb31b7900220fde8198871c2a2ca6f8cd8b1426651fe8ebf479976ae78fc0ba8c0daf96a6ac82e006d4b7a6181beeccc9262631ea7606f975d73634b999173f77664295be92f8dea5c0a738610dcef1fa63306ec01f1557ce838a5d5b586594a67a30c38f246"})
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
socket$netlink(0x10, 0x3, 0x5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
futimesat(r5, 0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'})
ioctl$TIOCGPTPEER(r4, 0x5441, 0x4)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x278, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x890}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe14e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xde}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa9b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c54}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x278}}, 0x20008000)

9m40.896366483s ago: executing program 0 (id=1948):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x136)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020)

9m40.790626685s ago: executing program 0 (id=1949):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x400000000008, 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020)

9m38.698864026s ago: executing program 0 (id=1954):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010100, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2f, 0x70bd2a, 0x70bd28, 0x70bd26, 0x3}}]}, 0x154}}, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x2)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})

9m38.390649181s ago: executing program 36 (id=1954):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010100, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2f, 0x70bd2a, 0x70bd28, 0x70bd26, 0x3}}]}, 0x154}}, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x2)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})

9m19.224830537s ago: executing program 3 (id=2007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

9m19.021909516s ago: executing program 3 (id=2008):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (fail_nth: 4)

9m18.83046923s ago: executing program 3 (id=2009):
r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0))
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/4096}, 0x1008, 0x2, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000)
msgctl$IPC_RMID(0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES16], 0x0)

9m17.474366437s ago: executing program 3 (id=2015):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x136)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)

9m17.431521476s ago: executing program 3 (id=2016):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (fail_nth: 5)

9m17.075942133s ago: executing program 5 (id=2017):
r0 = socket(0x2, 0x80805, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="d9", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r2, 0x1367, 0xd0, "7816e7962e4d854ab94eaf7eea307c42eedef1172eebe82831e9d5e9cb02326236d5cd3b36f1c41ec924e95544690cddfe84e01c15869168598cc3dcf92f1bd10f2ee800b7f7bacaaa6808c0dc484d65f60f20736b02274f5d264c4075c6c44018436498c3e7a2120ef80b8de0050982d44a5a673ee4b0d95e05b24cb56a9af01cc0b864c58ba7ecd6476850b4a8621c0b3ef8cdac83a37ab9a68dc679a22ce7797d5abf801e49b0c209b01847f50fb5e61f9e1aecba6d67abc2ef07236cc6599107f7d246f2c7e5d0c29dc66c6e5bd5"}, 0xd8)
connect$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/31)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002680)={r2, 0x2}, 0x8)
syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

9m15.750187422s ago: executing program 3 (id=2018):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r2)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000)
sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x10)

9m15.304838615s ago: executing program 37 (id=2018):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r2)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000)
sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x10)

9m15.24923174s ago: executing program 5 (id=2020):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="97a000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x6, 0xe3, {0xe3, 0x0, "b72ea01eabb2a85e9b019bbca805ba3659c82c11b1c138a32a417f549972017ee3f34071c84fad95e44cf27e1542e73405addfd68c02f7a345a65776f7432f775747cc7df02f944cb06ed49ea26d835ac6e1fb1196c639b59e8781a631ce69c9c5db31b890227936d701e1af73de75a2cbc2b772590f24c926c8e6672cc3392cd26fbc7bf308f357c8f3332c8726c8d220f8b352cb8cdd594385ffbfacffb1f70b6d6f57075508836eb203894153c184804a9fabe5320d0b5f6acd65cadcf9029f560bda06aa03508879193c24b6d3b5813dd514a88e7b0a59d25fbaa03211a51d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0xb}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x0, 0xe6, {0xe4, "74da7ca28e45cfe7814f50fffed1ddf892e68df540dc1db20e6550c10cc7902b86e4805b884ddaf61abb09ff24455c564ec7b2d27b3c8b4bcdd8735e931a843257137533f7a1ef30b5ca3001e9bb7b8a2b2e64f34711432317ee357aa265ad3710008e2610443af38f9b5460c463d5820bf060354dde43646f20764f6978126ca893e67bc8bead97430efc7d061f8292da97c44427ab449293b76939d8640b64fc1b84fe22da7d286e22bde4e5ef11e6aa4f150af7bbb9f6362d23720439ff74b80948642ca825e3eaeda7af200acf2438d5b391167b59c0167e2ceca7780edaafec7b3f"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xa2}})

9m12.363366558s ago: executing program 5 (id=2021):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)=ANY=[@ANYBLOB="200000001e00010a000000000000000007000000f4837e629eda4a7ea9f10000"], 0x20}}, 0x0)

9m11.94621325s ago: executing program 5 (id=2022):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x136)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)

9m11.533063669s ago: executing program 5 (id=2023):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="97a000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x6, 0xe3, {0xe3, 0x0, "b72ea01eabb2a85e9b019bbca805ba3659c82c11b1c138a32a417f549972017ee3f34071c84fad95e44cf27e1542e73405addfd68c02f7a345a65776f7432f775747cc7df02f944cb06ed49ea26d835ac6e1fb1196c639b59e8781a631ce69c9c5db31b890227936d701e1af73de75a2cbc2b772590f24c926c8e6672cc3392cd26fbc7bf308f357c8f3332c8726c8d220f8b352cb8cdd594385ffbfacffb1f70b6d6f57075508836eb203894153c184804a9fabe5320d0b5f6acd65cadcf9029f560bda06aa03508879193c24b6d3b5813dd514a88e7b0a59d25fbaa03211a51d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0xb}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x0, 0xe6, {0xe4, "74da7ca28e45cfe7814f50fffed1ddf892e68df540dc1db20e6550c10cc7902b86e4805b884ddaf61abb09ff24455c564ec7b2d27b3c8b4bcdd8735e931a843257137533f7a1ef30b5ca3001e9bb7b8a2b2e64f34711432317ee357aa265ad3710008e2610443af38f9b5460c463d5820bf060354dde43646f20764f6978126ca893e67bc8bead97430efc7d061f8292da97c44427ab449293b76939d8640b64fc1b84fe22da7d286e22bde4e5ef11e6aa4f150af7bbb9f6362d23720439ff74b80948642ca825e3eaeda7af200acf2438d5b391167b59c0167e2ceca7780edaafec7b3f"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xa2}})

9m10.752023646s ago: executing program 5 (id=2024):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2eb}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2c}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000845) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xcc) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff024}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) (async)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) (async)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001c00763c0e10634a39fc40102030000000020010804a08109045c090090936d0c"], 0x0)

9m10.305990472s ago: executing program 38 (id=2024):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2eb}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2c}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000845) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xcc) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff024}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) (async)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) (async)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001c00763c0e10634a39fc40102030000000020010804a08109045c090090936d0c"], 0x0)

7.405581636s ago: executing program 7 (id=4991):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x101000)
sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

7.174448327s ago: executing program 9 (id=4996):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a3100000000380004803400018009000100686173680000000024000280080006400000000408000240000000140800074000000001d9e10440000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

7.117494864s ago: executing program 9 (id=4998):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x40086201, 0x0)

6.918418906s ago: executing program 9 (id=4999):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000380)="240000005800410f9c00f4f90085b3a85c91fddf08000100050104000000000000e901d1", 0x24)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2}, 0x8)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000080)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vlan0\x00', <r3=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffff00000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000300)={0x2, @vbi={0x8, 0x5, 0x0, 0x32314d4e, [0x9, 0x7], [0xe75, 0xe], 0x1}})
socket$nl_route(0x10, 0x3, 0x0) (async)
write(r0, &(0x7f0000000380)="240000005800410f9c00f4f90085b3a85c91fddf08000100050104000000000000e901d1", 0x24) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2}, 0x8) (async)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000080)=0x8, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) (async)
sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffff00000000, 0x2) (async)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000300)={0x2, @vbi={0x8, 0x5, 0x0, 0x32314d4e, [0x9, 0x7], [0xe75, 0xe], 0x1}}) (async)

5.089962324s ago: executing program 1 (id=5012):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a3000000000400000001b0a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001f50400000000000000a76c020010030900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000)
syz_usb_connect$midi(0x5, 0xd4, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x1, 0x1, 0x3, 0xa0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0xbf, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x7, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0xff}], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x5, 0xb2, 0x7, {0x10, 0x25, 0x1, 0xc, "c2c8e6024529be20d561aa0f"}}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x4, 0x3, 0x9, {0xd, 0x25, 0x1, 0x9, "4946ac53ee16356662"}}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x7, 0xf, 0x4, {0x4}}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x8, 0x5f, {0xb, 0x25, 0x1, 0x7, "6ea8e1950fa113"}}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x0, 0x3, 0x7, {0xf, 0x25, 0x1, 0xb, "53f897b0f824e870ed54e5"}}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x4, 0x0, 0x2, {0x9, 0x25, 0x1, 0x5, "eb6b2a1489"}}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0xd, 0x4, {0x10, 0x25, 0x1, 0xc, "cbf64db4a32f0bd155d56371"}}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x1, 0x8, {0x8, 0x25, 0x1, 0x4, "6914e272"}}}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x3, 0xff, 0x5, 0x0, 0x8}, 0x96, &(0x7f0000000400)={0x5, 0xf, 0x96, 0x3, [@generic={0x73, 0x10, 0xa, "c73834682b3243ccd3c0371832611d46e490bcba6d6c8ea26d54415acf3214cda30170d01b4fa8c4a812d021427704551f089f41e79aad6c69e0adbb33a557a2b6b0e411a0e29da47936c6060efaca3be6220f9c48e2a68664a12b31b6c511effe2fb7fb4059203f91614b9d339ca45b"}, @ssp_cap={0x14, 0x10, 0xa, 0xf3, 0x2, 0x3, 0xf, 0x4, [0xffc0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7f, 0x9, 0xb9aa}]}, 0x5, [{0x6a, &(0x7f00000004c0)=@string={0x6a, 0x3, "6d42236828da226d7426504b49f18a89df9ea27537010644fdd92d6dc436eec3f336bb30ea750036a395c7c6874c3664d960fb1fab4c6badd6ef5f5dcc3a5616c9ab24fac4b873db31d6788dac507de960b54ae641c1b83c2d406bf2d622fea327831d588a63432b"}}, {0x14, &(0x7f0000000540)=@string={0x14, 0x3, "506a535787838d53e92e4e10c1b6b209c901"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x200a}}, {0xf3, &(0x7f00000005c0)=@string={0xf3, 0x3, "d62a9042e17ac46c6624294af3d322155be68ff093906b2d69adb0a04f6cebb4a9154ba1d4ff1d9626a0ad585a6b6ba27a9a699308f6e941c14d475a0cffc293b5185f6cb0be720f258e57cd32742c6fbf5f940c9eba700824a7b96553f4500139b701266a13c2e6249517a74b33ced7c9c2d5936c2a3c1f5793d7e52beb41e44607159281f7e9523aeec1b1209c4091e94e3405da68e2836c58fae69ff330fdee2551afa118d87dac31de81c27f9c1208668d64cecb8a973b0f4470d784df9013b4c67720ab7795a271ae67e77fad87acdbff5d215f6b72e6da267d1c96392f59ead355cb16a450c90d7c3a1bd341f41f"}}, {0x68, &(0x7f00000006c0)=@string={0x68, 0x3, "583d6d8f39be97438b6bebc6e90e0d01a329e153e5525abde3ecd44d820fd309017129b4e2f182283c4d479eb262b0caa89e8e86f494310c27582037b7b8f61659ecc83b6d5159ca3c87f2235e11a5d8172cb9c6a36763ac41aa2e6385c94c5e79a5b57c310d"}}]})

4.299077266s ago: executing program 7 (id=5019):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0)
pidfd_send_signal(r0, 0x3b, &(0x7f0000000080)={0x3b, 0x8000, 0xfa}, 0x1000000)

4.149169027s ago: executing program 7 (id=5021):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x50)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x40)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x845}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x2208c880)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
getsockname(r0, 0x0, &(0x7f0000000200))
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
lsetxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0/../file0/file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r3 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000580)={0x2, 0x6, 0x1, 'queue0\x00', 0x8})
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

3.810385634s ago: executing program 9 (id=5023):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x7fff, 0x5e, 0x4})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@host, 0x2}, @hyper, 0x0, 0x1000000, 0x3, 0x0, 0x97, 0xfffffffe})
r2 = open(&(0x7f0000000000)='.\x00', 0x4400, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
write$sysctl(r3, &(0x7f0000000200)='4\x00', 0x2)
fsmount(r2, 0x1, 0x88)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001640)={@ptr={0x70742a85, 0x0, 0x0, 0xfffffffffffffe70, 0x1, 0x3}, @fda={0x66646185, 0x7, 0x0, 0x32}, @ptr={0x70742a85, 0x4556f2c6, &(0x7f00000016c0)=""/153, 0x99, 0x2, 0x37}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

3.484569474s ago: executing program 1 (id=5026):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000000c0)={0x0, 0x1, [0x100, 0x5, 0x2, 0x20, 0x80000001, 0x898f, 0x10001, 0x15f]})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000077c0)={@null, 0x3, 'pim6reg1\x00'})

3.453205092s ago: executing program 9 (id=5027):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x101000)
sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

3.266415592s ago: executing program 1 (id=5028):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, &(0x7f0000001040)=ANY=[], &(0x7f0000001080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f00000010c0)=ANY=[@ANYBLOB="00220b000000a355ab1bfcc31702000000"], &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xad4, 0x1, 0x1, {0x22, 0x82c}}}}, &(0x7f0000001540)={0x2c, &(0x7f00000012c0)={0x0, 0x10, 0xf2, "f724793c42f2358dcc51a3d688680af1e67b3baf712b5eb90e5ff9809e1018fccd738a4607273c70d3bec60f82bf65d729a6da125f54d83a1707eb96cd965f6c77ad01e5f570793cc20eebc710aea7b0bc509e7aa16335f99738e89cfde1019a3f0a88e5f69b2e658cea57cba5b7aff6ef7a5a2ee0650077fccfa1ca03b07cd03dae3093840ebfa6feee321729f1611bfb65ea7e0c331d723860695a833533f0269e42d0b02f9f675043e50cc76436deded802d610384b06e4eb2e27f05a8932ad6630b4455df6b3ceed7ce36a53aecbd4e76757127da11f41203b87c52baa723a3be63c809e7ff3a593c2d0783450ba7f5e"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001440)={0x20, 0x1, 0x9d, "a17ad6b4ea0c1f1dedbfe52424d6152d279b500fe88f2b487064ebd641a99ac0a0867cd404f116ddfaded2c7388ad3b75e7c88993a0b21ba78873aea2bc5c92c627657c1440355ef35bde2d213ca337d6374354921cb18cf8a43158ee2619368f8c42614aab76c84d900284674cc380fa1f20e65442c0a8e809f9e95b07984f402688cffac480b12cc84ff199b009c09859f2600ee80305ae7d7bcb8de"}, &(0x7f0000001500)={0x20, 0x3, 0x1, 0x2}})

2.365059978s ago: executing program 7 (id=5034):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c", 0x5}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d04", 0x14}], 0x2}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000008c0)="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", 0x10a)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, &(0x7f0000000640)="f4c4c185fc6f5e0f01c90f3064260f8400500000c4c11ddf80779f0000650f01b76c260000c4e2ad06ca670f08c744240085250000c744240205000000c7442406000000000f011c24", 0x49}], 0x1, 0x2, &(0x7f0000000700)=[@cstype0={0x4, 0x9}, @cr0={0x0, 0x30000}], 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.792813817s ago: executing program 1 (id=5040):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = syz_open_dev$video(&(0x7f0000000180), 0x1, 0x200)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}})
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000004c80)=ANY=[@ANYBLOB="060128007f1e6140fd0704007e06010203010902120001f80000020904a88100ff"], 0x0)

1.237900148s ago: executing program 7 (id=5041):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3], 0x40}}, 0x20)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r0, 0x111, 0x7ffffffe, 0x0, &(0x7f0000000080))

978.570795ms ago: executing program 7 (id=5042):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x50)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x40)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x845}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x2208c880)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
getsockname(r0, 0x0, &(0x7f0000000200))
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
lsetxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0/../file0/file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r3 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000580)={0x2, 0x6, 0x1, 'queue0\x00', 0x8})
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

541.674407ms ago: executing program 1 (id=5043):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x1, 0x8010800000000084)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

429.329953ms ago: executing program 8 (id=5044):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x7fff, 0x5e, 0x4})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@host, 0x2}, @hyper, 0x0, 0x1000000, 0x3, 0x0, 0x97, 0xfffffffe})
r2 = open(&(0x7f0000000000)='.\x00', 0x4400, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
write$sysctl(r3, &(0x7f0000000200)='4\x00', 0x2)
fsmount(r2, 0x1, 0x88)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001640)={@ptr={0x70742a85, 0x0, 0x0, 0xfffffffffffffe70, 0x1, 0x3}, @fda={0x66646185, 0x7, 0x0, 0x32}, @ptr={0x70742a85, 0x4556f2c6, &(0x7f00000016c0)=""/153, 0x99, 0x2, 0x37}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

376.027529ms ago: executing program 1 (id=5045):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x7}}}}}]}}]}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r2, &(0x7f0000002dc0)={0x1, {&(0x7f0000000640)=""/144, 0x90, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20, 0x22, 0x2c, {0x2c, 0x30, "5584d0372e4b6f1858a5183dd798f66774e4e16e7cd81892e3a0becb078bd5b25c7fcedb332559bec7a4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

310.406163ms ago: executing program 8 (id=5046):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x80})
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048010000180090001006c6173740000c9002c0001800a0001006d617463680000001c00028006000300038b000008000240000000000800010074746c000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x44840}, 0x40400c4)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1000000001, 0x281)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000040)=0x4)
r6 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='z', 0x1}], 0x1, 0x0, 0x0, 0x4000040}, 0x488d4)

292.91159ms ago: executing program 8 (id=5047):
r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb6)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000540)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8}, r3}}, 0x30)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x34325258, 0x1, @discrete={0xff, 0xfffffeff}})

255.758365ms ago: executing program 9 (id=5048):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856", 0x244}, {&(0x7f0000000bc0)="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", 0x161}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b041", 0x74}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d)
write(r0, &(0x7f0000000000)="41000200010001", 0x7)
close_range(r0, r0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

162.358556ms ago: executing program 8 (id=5049):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000740)={{<r1=>r0, &(0x7f0000000000)='*!(\x9c$)\x84}O+:-+%:+\\!\x00', 0x2102, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x3]}, {0x10, 0xda, 0x101, 0x5}}, 0xf, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}, 0x6, &(0x7f0000000680)=[{0x3, 0x4, &(0x7f0000000100)=':*}.!$*\x00', &(0x7f0000000140)="265b7aa1d090355638232a946595ffe8df5f1f96bb40b1ae62d6e4f6d204cc8aa7ef72807b35a00e24d085a97ffdc2b30f7599c5531c4380c8d98cf3596bd50b988d5983e50dea9f1e6724d7e6da9e2ab8b673297c568c6ff26a7e298c3f612e083cf497dd83c49e4459e70fa286e857e0627097b0ce2a426913d9293647076de6099ee60edde45832871a65fe0f0a3fcb738b392ef7884e7c2a63fa9212b44b06b48d0ec1d4a8cd80a61042856f6ee2cd08f370a260324690477d9016670c067e62851646", 0xc5, 0x2}, {0x3, 0x7, &(0x7f0000000240)='\'\x88&\\\x00', &(0x7f0000000280)="eb95a051e391f00c4349e7b12857bb286118a84e60599f9105e2b1fd98e0a59a939e763233b75b2e82db25f65b9a0103c9c251ec88e655d203391e91a114610a4920", 0x42, 0x20}, {0x2, 0x8, &(0x7f0000000300)='\x00', &(0x7f0000000340)="50d8bea8fee43b0d3293d3516a31ba1157a9c23aee8e6e6f889bf57c95882c37bb201b1d436ee0fe256d1b4f4c6752b5506db056e11d4d7698b470fc83a5cd65491e3771c5090fb334ba2731ac4edc0398d3bebddb260d1dc13e297360dbdc31b13f21e830617292a84bda674a1f", 0x6e, 0x28}, {0x1, 0x8440, &(0x7f00000003c0)='\f.*&\x00', &(0x7f0000000400)="1b6fd6b2476e1aa0192eec5c7bb31e7f3fc5bace58447874f3c8b3fee1eac0aad2e07aada04aec64e611299f83ddb1648aed230bea94df1546763e98ed766d95b6691119e161cc02d8bac62e7cbcefa932fb517ae01aa9161df3145e5a46ed8069eaeab4e48cd57a190e17bd735eae9dcafcc57da6147946e21e77b6cb00338e0e7422fb6711497ad3569f848d574fe8bb8c37d539da99910511f0483b6aa614e09bca810860d921f259d5dedf01850d4d3650a0e84d2e23aa2bca30de1a4cc213ab16ba397b2100f795a3b5c538d678b153efb6", 0xd4, 0x20}, {0x3, 0xd, &(0x7f0000000500)='{^-$&@\x00', &(0x7f0000000540)="5364494fe92ea2438e4433992b81d7c9bf5f559dcd3a95eb440313c0fe11c7b9d30d4e878e7626c51f84354d226cc3b7c89e4282dbe0e7da33e1772791ab895c13", 0x41, 0x2}, {0x1, 0x7, &(0x7f00000005c0)='$!{}-@/]:\x00', &(0x7f0000000600)="efe63e63fbdaf7f82e7487a370c9401f8c07fdfe239c578288c676dec3c3124a6a7766c1c5d0507d433640d66d57a34e50a83b70a2e109d972f92b321a73fa915b04f517dcee206501", 0x49, 0xa}]})
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f00000007c0))
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e)
ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x620f0c23)
ioctl$COMEDI_SUBDINFO(r1, 0x80486402, &(0x7f0000000840))
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000008c0), &(0x7f0000000940)=0x80)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
r3 = signalfd4(r2, &(0x7f00000009c0)={[0x1]}, 0x8, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000c00)={&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/243, 0xf3, 0x0, &(0x7f0000000b00)=""/236, 0xec}, &(0x7f0000000c40)=0x40)
ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000c80)={0xb6, 0x0, 0x1043})
write$apparmor_exec(r3, &(0x7f0000000d00)={'stack ', '.,*$\x00'}, 0xb)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000d40)={"3d6ef2c2ef7a302903522d0e2effd873b41cc4142169157a5d69893a65e389ff56c1a13d41099ab91edea97a42e4935a98cc104c1ed0f191ea222f86eb619e0dec1c5cb188b8ff2dd0d3deb1b24a450ffa9c9cd45f3dfada37c21cc2248289161e4778cd417edc6ddf0290d3ad3b7b35e41e426b35775d4175d5aaf53b877e080b4360db06719fbc94367944e3150bf83ad96bb26874368f582b1d14f787b371502949f4bf15feef53ff0ee1f85d569c9543b83b73173443ab76ae6c54943f474bf3fd54c24b4625139bcbd1a70ec66d97eed520de1fbcc746227697c523089257a1a439d42c9e520580265161604b3031c3356a7a4c5c68dc8ad1bb3c423b1e8a2c320e6b2d49b408a4e01821a28ae697d799749ab939907ea12068a41944db87751ad5dcdb3d23c8e5f800612b020e35a4e40d01f8d239fca1b989621c1774d1c05ebbd67ae3db311e6e25fe8004f188170e8a0d964c7ba89892c2ea0cd17576930be76a9ad5a89519e486d7310f97ba7b9ec1bd27bd3f69b9f9880221c21ea6ae5e61f73c745b65112d2d7d02fe5dcccf55aa457dd861826487f7871955e266917db90211b0a7313935f687f0b2e68bc324da50c30a15cb422074e214335c218c1a80fbea904471fa9dbda47b810bf05bf93a66716a5aa3f06c9761ccf20154bc00fa6eb2ebb00f223f63b93262429311f61322e3e4d3dfde17a9860b9bb90a8d35c79270c28276609137d6d96264eb00d431927e96cec5a0d0cddf97a4d606f17de2b8afac6c50ae1b1f5478267110fda8ac8fee6f787b360acd34991ea22811dc2c41dff7230ae660130e783aac5b90d34ab1253939d11c9dcd21a0e3425f7bdafe043ebf50cdd6a6c0c1c28085923aa82d517f1432111e544a6a613166585bb8dfcb57e1db1e12343c6d957c5aebb6fa7c31e8cd5e7e9497188f1b0fea792880de6245aba83460163941cd28507e0266ddf7fcece86a4dfc59791107d12d039165582c31ea175c15cdaf5e49187b64f74ff7582b051a1cefd94523838c4e513700ac062eff901d354fad6dc42cdbc06e696fa54143db2c3736ea6da3b36cdc05b62820d237d3edbf0f06dca731fcc3c8a8dec6b46df925cce6cb1520ae57e955977dd8a3aa69917178dba6053bc5db125c017477f38ec646e1435c0b7d12b4367dd92d4175f8a1876b2e80ca50665d7c57799d47d4aedba19c554a96c4d98d9f3f78fbda41ddb235bf6fac867b19f9ef74b83ece3ef1ed3e4ad9069e08fbad1084098ea3dd17091fb5756c70660a3d69bad89e90dd7dd79c9758850a4e1b4972d1f715c4ff7dedb99599940c980288b28e74afc15440c723004612439fe48aead078cca581014ed4d48a89a8c14ccbc54e8d156c9aa411e418ef717defc7dac5ef8c6cb49016474a6ddb43814f5ba4fb7c7e8467b0631714bd69024f2b"})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xa04d9000)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf)
r4 = eventfd2(0x1, 0x80000)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001140), 0x323201, 0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000001180)={r4, 0x55de2847, 0x2, r5})
mkdirat(r5, &(0x7f00000011c0)='./file0\x00', 0x103)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001200)=0x1, 0x4)
ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f0000001240)={0x6, 0x34, "ff8e2ae787e5c2c698d5da8cb83b508dffb6a056983e35bbef011d05ab91a56ef18aadd94d52ae6bcc68a5c257f7d85aca3225ae"})
r6 = gettid()
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000001280)={0x0, 0x5})
syz_clone3(&(0x7f00000014c0)={0x42000000, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340), {0x20}, &(0x7f0000001380)=""/143, 0x8f, &(0x7f0000001440)=""/1, &(0x7f0000001480)=[r6, r6, r6, r6], 0x4, {r5}}, 0x58)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001540), 0x501000, 0x0)
ioctl$COMEDI_UNLOCK(r7, 0x6406)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001580)={[0x3, 0x7fff, 0x7, 0x8, 0x0, 0xab16, 0x8, 0x0, 0x8000000000000001, 0x0, 0x6, 0x8, 0x5, 0xb3b, 0xfffffffffffffff9, 0x49b4], 0x54000, 0x40004})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r5)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, r8, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x24004041)

141.718987ms ago: executing program 8 (id=5050):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x40}}, 0x20)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r0, 0x111, 0x7ffffffe, 0x0, &(0x7f0000000080))

0s ago: executing program 8 (id=5051):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f00000002c0)={'dummy0\x00', @random}) (fail_nth: 6)

kernel console output (not intermixed with test programs):

: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.371196][ T5709] usb 9-1: Product: syz
[  862.371218][ T5709] usb 9-1: Manufacturer: syz
[  862.371233][ T5709] usb 9-1: SerialNumber: syz
[  862.420929][ T5709] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  862.488032][    T9] usb 8-1: config 0 has an invalid interface number: 64 but max is 0
[  862.488060][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  862.488078][    T9] usb 8-1: config 0 has no interface number 0
[  862.492360][    T9] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  862.492388][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.492409][    T9] usb 8-1: Product: syz
[  862.492422][    T9] usb 8-1: Manufacturer: syz
[  862.492436][    T9] usb 8-1: SerialNumber: syz
[  862.509106][    T9] usb 8-1: config 0 descriptor??
[  862.527500][    T9] uvcvideo 8-1:0.64: probe with driver uvcvideo failed with error -22
[  862.538455][T20209] FAULT_INJECTION: forcing a failure.
[  862.538455][T20209] name failslab, interval 1, probability 0, space 0, times 0
[  862.538491][T20209] CPU: 0 UID: 0 PID: 20209 Comm: syz.1.4806 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  862.538518][T20209] Tainted: [L]=SOFTLOCKUP
[  862.538526][T20209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  862.538538][T20209] Call Trace:
[  862.538545][T20209]  <TASK>
[  862.538554][T20209]  dump_stack_lvl+0xe8/0x150
[  862.538584][T20209]  should_fail_ex+0x46b/0x600
[  862.538619][T20209]  should_failslab+0xa8/0x100
[  862.538646][T20209]  kmem_cache_alloc_noprof+0x87/0x680
[  862.538670][T20209]  ? do_getname+0x2e/0x250
[  862.538701][T20209]  do_getname+0x2e/0x250
[  862.538719][T20209]  ? getname_flags+0x11/0x20
[  862.538740][T20209]  do_sys_openat2+0xcc/0x200
[  862.538765][T20209]  ? __pfx_do_sys_openat2+0x10/0x10
[  862.538788][T20209]  ? __fget_files+0x2a/0x420
[  862.538813][T20209]  ? __fget_files+0x3a6/0x420
[  862.538833][T20209]  ? __fget_files+0x2a/0x420
[  862.538860][T20209]  __x64_sys_openat+0x138/0x170
[  862.538884][T20209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.538905][T20209]  do_syscall_64+0x174/0x580
[  862.538933][T20209]  ? trace_irq_disable+0x3b/0x140
[  862.538953][T20209]  ? clear_bhb_loop+0x40/0x90
[  862.538975][T20209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.538991][T20209] RIP: 0033:0x7f51420cd68e
[  862.539008][T20209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  862.539024][T20209] RSP: 002b:00007f514035c3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  862.539045][T20209] RAX: ffffffffffffffda RBX: 00007f514035e6c0 RCX: 00007f51420cd68e
[  862.539060][T20209] RDX: 0000000000000002 RSI: 00007f51421a2126 RDI: ffffffffffffff9c
[  862.539073][T20209] RBP: 0000200000fe8000 R08: 0000000000000000 R09: 0000000000000000
[  862.539086][T20209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000fe8800
[  862.539098][T20209] R13: 00007f514035cbd0 R14: 000000000000006b R15: 00000000000000c0
[  862.539124][T20209]  </TASK>
[  862.779038][T12367] usb 8-1: USB disconnect, device number 30
[  862.847900][ T5709] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  862.848484][ T5709] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  862.848539][ T5709] usb 9-1: media controller created
[  862.890602][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  863.021699][ T5709] usb 9-1: USB disconnect, device number 26
[  863.048865][ T5799] udevd[5799]: setting owner of /dev/bus/usb/009/026 to uid=0, gid=0 failed: No such file or directory
[  863.130442][T20217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4809'.
[  863.130687][T20217] Unknown options in mask b7f2
[  863.341541][T20223] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4811'.
[  863.516215][ T5709] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  863.625984][T18977] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  863.696120][ T5709] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  863.696151][ T5709] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.696171][ T5709] usb 10-1: Product: syz
[  863.696187][ T5709] usb 10-1: Manufacturer: syz
[  863.696202][ T5709] usb 10-1: SerialNumber: syz
[  863.717814][ T5709] usb 10-1: config 0 descriptor??
[  863.806175][T18977] usb 8-1: Using ep0 maxpacket: 16
[  863.814626][T18977] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  863.814711][T18977] usb 8-1: config 0 has no interface number 0
[  863.833392][T18977] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  863.833474][T18977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.833495][T18977] usb 8-1: Product: syz
[  863.833509][T18977] usb 8-1: Manufacturer: syz
[  863.833532][T18977] usb 8-1: SerialNumber: syz
[  863.854149][T18977] usb 8-1: config 0 descriptor??
[  863.874297][T18977] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  864.263280][T20225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  864.264505][T20225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  864.305776][T18977] gspca_spca1528: reg_w err -71
[  864.336319][T18977] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71
[  864.353923][T18977] usb 8-1: USB disconnect, device number 31
[  864.386347][T18978] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  864.547102][T18978] usb 9-1: Using ep0 maxpacket: 16
[  864.564057][T18978] usb 9-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  864.564136][T18978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.564147][T18978] usb 9-1: Product: syz
[  864.564156][T18978] usb 9-1: Manufacturer: syz
[  864.564164][T18978] usb 9-1: SerialNumber: syz
[  864.572006][T18978] usb 9-1: config 0 descriptor??
[  864.602187][T18978] gspca_main: spca508-2.14.0 probing 041e:4018
[  864.784232][ T5709] usb 10-1: Firmware version (0.0) predates our first public release.
[  864.784248][ T5709] usb 10-1: Please update to version 0.2 or newer
[  864.785986][ T5616] Bluetooth: hci4: command 0x0406 tx timeout
[  864.807853][T18978] gspca_spca508: reg_read err -32
[  864.835723][T18978] gspca_spca508: reg_read err -71
[  864.836557][T18978] gspca_spca508: reg_read err -71
[  864.837032][T18978] gspca_spca508: reg_read err -71
[  864.837995][T18978] gspca_spca508: reg_read err -71
[  864.839717][T18978] gspca_spca508: reg write: error -71
[  864.840015][T18978] spca508 9-1:0.0: probe with driver spca508 failed with error -71
[  864.891124][T18978] usb 9-1: USB disconnect, device number 27
[  865.014223][ T5709] usb 10-1: Firmware: build �-�Ln�9��Z�	�-	v��P�'���%��HIj��U?;:�0<�fY/1x/!����c�+v�?Cݯ�c��x�!ޛ{��۾�W��C�
[  865.088398][T20254] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4821'.
[  865.264773][ T5709] usb 10-1: USB disconnect, device number 27
[  865.266230][T18978] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  865.516013][T18978] usb 9-1: config 0 has an invalid interface number: 64 but max is 0
[  865.516042][T18978] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  865.516062][T18978] usb 9-1: config 0 has no interface number 0
[  865.518406][T18978] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  865.518441][T18978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.518461][T18978] usb 9-1: Product: syz
[  865.518472][T18978] usb 9-1: Manufacturer: syz
[  865.518479][T18978] usb 9-1: SerialNumber: syz
[  865.522184][T18978] usb 9-1: config 0 descriptor??
[  865.536582][T18978] uvcvideo 9-1:0.64: probe with driver uvcvideo failed with error -22
[  865.777167][ T5600] usb 9-1: USB disconnect, device number 28
[  866.101527][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4830'.
[  866.356340][ T5709] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  866.406771][ T5601] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  866.481482][T20288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.482090][T20288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  866.488348][T20288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.488898][T20288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  866.498805][T20288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.499355][T20288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  866.516096][ T5709] usb 10-1: Using ep0 maxpacket: 16
[  866.518687][ T5709] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  866.518748][ T5709] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  866.518776][ T5709] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  866.518798][ T5709] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  866.518821][ T5709] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  866.520073][ T5709] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  866.520100][ T5709] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  866.520120][ T5709] usb 10-1: Manufacturer: syz
[  866.529449][ T5709] usb 10-1: config 0 descriptor??
[  866.565592][ T5601] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  866.566131][ T5601] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  866.583017][ T5601] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  866.583045][ T5601] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.583961][ T5601] usb 8-1: Product: syz
[  866.583979][ T5601] usb 8-1: Manufacturer: syz
[  866.583994][ T5601] usb 8-1: SerialNumber: syz
[  866.746042][ T5600] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  866.810397][ T5709] rc_core: IR keymap rc-hauppauge not found
[  866.810412][ T5709] Registered IR keymap rc-empty
[  866.811274][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  866.826413][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  866.864256][ T5709] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  866.886958][ T5709] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input87
[  866.909375][ T5600] usb 2-1: device descriptor read/64, error -71
[  866.963044][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  866.983652][T20280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.992600][T20280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  866.999015][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.016400][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.039981][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.044444][ T5601] usb 8-1: unit 5 not found!
[  867.056828][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.079208][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.108835][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.144509][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.147191][ T5600] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  867.168404][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.198292][ T5709] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  867.227711][ T5709] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  867.227740][ T5709] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  867.231652][ T5709] usb 10-1: USB disconnect, device number 28
[  867.275992][ T5600] usb 2-1: device descriptor read/64, error -71
[  867.280909][ T5601] usb 8-1: USB disconnect, device number 32
[  867.382392][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  867.402824][ T5600] usb usb2-port1: attempt power cycle
[  867.612816][T20300] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4838'.
[  867.613567][T20300] FAULT_INJECTION: forcing a failure.
[  867.613567][T20300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  867.613596][T20300] CPU: 1 UID: 0 PID: 20300 Comm: syz.7.4838 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  867.613611][T20300] Tainted: [L]=SOFTLOCKUP
[  867.613615][T20300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  867.613622][T20300] Call Trace:
[  867.613627][T20300]  <TASK>
[  867.613632][T20300]  dump_stack_lvl+0xe8/0x150
[  867.613650][T20300]  should_fail_ex+0x46b/0x600
[  867.613668][T20300]  _copy_to_iter+0x404/0x17d0
[  867.613685][T20300]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  867.613699][T20300]  ? __pfx__copy_to_iter+0x10/0x10
[  867.613708][T20300]  ? rt_spin_lock+0x1e0/0x400
[  867.613721][T20300]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  867.613739][T20300]  __skb_datagram_iter+0xf8/0x980
[  867.613751][T20300]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  867.613766][T20300]  skb_copy_datagram_iter+0xb5/0x240
[  867.613779][T20300]  netlink_recvmsg+0x2c3/0xa50
[  867.613794][T20300]  ? __pfx_netlink_recvmsg+0x10/0x10
[  867.613806][T20300]  ? __pfx_aa_sk_perm+0x10/0x10
[  867.613816][T20300]  ? __lock_acquire+0x6b5/0x2d10
[  867.613830][T20300]  ? aa_sock_msg_perm+0x122/0x200
[  867.613842][T20300]  ? __pfx_netlink_recvmsg+0x10/0x10
[  867.613852][T20300]  sock_recvmsg_nosec+0x130/0x170
[  867.613867][T20300]  ____sys_recvmsg+0x23d/0x4f0
[  867.613882][T20300]  ? __pfx_____sys_recvmsg+0x10/0x10
[  867.613899][T20300]  ? import_iovec+0x73/0xa0
[  867.613913][T20300]  ___sys_recvmsg+0x215/0x590
[  867.613922][T20300]  ? get_pid_task+0x20/0x1f0
[  867.613936][T20300]  ? __pfx____sys_recvmsg+0x10/0x10
[  867.613948][T20300]  ? __fget_files+0x2a/0x420
[  867.613969][T20300]  ? __fget_files+0x3a6/0x420
[  867.613985][T20300]  __x64_sys_recvmsg+0x1c0/0x2a0
[  867.613997][T20300]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  867.614012][T20300]  ? __pfx_ksys_write+0x10/0x10
[  867.614030][T20300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.614042][T20300]  do_syscall_64+0x174/0x580
[  867.614057][T20300]  ? trace_irq_disable+0x3b/0x140
[  867.614069][T20300]  ? clear_bhb_loop+0x40/0x90
[  867.614082][T20300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.614096][T20300] RIP: 0033:0x7f34a763ce59
[  867.614107][T20300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.614117][T20300] RSP: 002b:00007f34a588e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  867.614129][T20300] RAX: ffffffffffffffda RBX: 00007f34a78b5fa0 RCX: 00007f34a763ce59
[  867.614137][T20300] RDX: 0000000000010100 RSI: 0000200000000640 RDI: 0000000000000003
[  867.614143][T20300] RBP: 00007f34a588e090 R08: 0000000000000000 R09: 0000000000000000
[  867.614150][T20300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  867.614156][T20300] R13: 00007f34a78b6038 R14: 00007f34a78b5fa0 R15: 00007ffd43508a08
[  867.614172][T20300]  </TASK>
[  867.614226][T20300] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4838'.
[  867.789069][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4839'.
[  867.827845][ T5616] Bluetooth: hci1: command tx timeout
[  867.840188][ T5600] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  867.943046][ T5600] usb 2-1: device descriptor read/8, error -71
[  868.175996][ T5600] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  868.206188][ T5600] usb 2-1: device descriptor read/8, error -71
[  868.267740][T20318] FAULT_INJECTION: forcing a failure.
[  868.267740][T20318] name fail_iommufd, interval 1, probability 0, space 0, times 0
[  868.267769][T20318] CPU: 0 UID: 0 PID: 20318 Comm: syz.8.4846 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  868.267789][T20318] Tainted: [L]=SOFTLOCKUP
[  868.267794][T20318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  868.267803][T20318] Call Trace:
[  868.267810][T20318]  <TASK>
[  868.267816][T20318]  dump_stack_lvl+0xe8/0x150
[  868.267842][T20318]  should_fail_ex+0x46b/0x600
[  868.267868][T20318]  iommufd_get_object+0x78/0x4b0
[  868.267885][T20318]  ? tomoyo_path_number_perm+0x219/0x630
[  868.267909][T20318]  ? __pfx_iommufd_get_object+0x10/0x10
[  868.267925][T20318]  ? tomoyo_path_number_perm+0x219/0x630
[  868.267952][T20318]  iommufd_ioas_map+0x28f/0x4d0
[  868.267974][T20318]  ? __pfx_iommufd_ioas_map+0x10/0x10
[  868.267997][T20318]  iommufd_fops_ioctl+0x4b8/0x5d0
[  868.268017][T20318]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  868.268040][T20318]  ? __fget_files+0x2a/0x420
[  868.268065][T20318]  ? __fget_files+0x2a/0x420
[  868.268086][T20318]  ? bpf_lsm_file_ioctl+0x9/0x20
[  868.268113][T20318]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  868.268128][T20318]  __se_sys_ioctl+0xff/0x170
[  868.268149][T20318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.268165][T20318]  do_syscall_64+0x174/0x580
[  868.268186][T20318]  ? trace_irq_disable+0x3b/0x140
[  868.268203][T20318]  ? clear_bhb_loop+0x40/0x90
[  868.268221][T20318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.268241][T20318] RIP: 0033:0x7f230529ce59
[  868.268260][T20318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.268273][T20318] RSP: 002b:00007f23034ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  868.268290][T20318] RAX: ffffffffffffffda RBX: 00007f2305515fa0 RCX: 00007f230529ce59
[  868.268302][T20318] RDX: 0000200000000340 RSI: 0000000000003b85 RDI: 0000000000000003
[  868.268312][T20318] RBP: 00007f23034ee090 R08: 0000000000000000 R09: 0000000000000000
[  868.268321][T20318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  868.268331][T20318] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  868.268354][T20318]  </TASK>
[  868.268892][ T5601] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  868.438180][ T5600] usb usb2-port1: unable to enumerate USB device
[  868.439147][ T5601] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[  868.439172][ T5601] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  868.439191][ T5601] usb 10-1: config 0 has no interface number 0
[  868.507227][ T5601] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  868.507258][ T5601] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.507278][ T5601] usb 10-1: Product: syz
[  868.507292][ T5601] usb 10-1: Manufacturer: syz
[  868.507306][ T5601] usb 10-1: SerialNumber: syz
[  868.534023][ T5601] usb 10-1: config 0 descriptor??
[  868.572865][ T5601] uvcvideo 10-1:0.64: probe with driver uvcvideo failed with error -22
[  868.726099][ T5709] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  868.753558][ T5601] usb 10-1: USB disconnect, device number 29
[  868.887404][ T5709] usb 8-1: Using ep0 maxpacket: 32
[  868.889263][ T5709] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  868.889288][ T5709] usb 8-1: config 0 has no interface number 0
[  868.891663][ T5709] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  868.891691][ T5709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.891711][ T5709] usb 8-1: Product: syz
[  868.891726][ T5709] usb 8-1: Manufacturer: syz
[  868.891740][ T5709] usb 8-1: SerialNumber: syz
[  868.894917][ T5709] usb 8-1: config 0 descriptor??
[  868.902156][ T5709] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  868.956004][T18977] usb 9-1: new low-speed USB device number 29 using dummy_hcd
[  869.117791][T18977] usb 9-1: config 247 has no interfaces?
[  869.120990][T18977] usb 9-1: string descriptor 0 read error: -22
[  869.121145][T18977] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=d4.de
[  869.121159][T18977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.174399][ T5709] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  869.185943][ T5616] Bluetooth: hci2: command 0x0406 tx timeout
[  869.295638][ T5709] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  869.475138][ T5600] usb 9-1: USB disconnect, device number 29
[  869.605267][    C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  869.631491][T12366] usb 8-1: USB disconnect, device number 33
[  869.711226][T12366] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  869.765575][T12366] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  869.791244][T12366] quatech2 8-1:0.51: device disconnected
[  869.978055][T20337] tmpfs: Bad value for 'nr_inodes'
[  870.025997][    T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  870.083936][T20341] tipc: Enabling <eth:lo> not permitted
[  870.083970][T20341] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  870.090755][T20341] netlink: 'syz.1.4857': attribute type 11 has an invalid length.
[  870.091014][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  870.091108][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  870.215993][    T9] usb 10-1: Using ep0 maxpacket: 16
[  870.220055][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.220108][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  870.220136][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  870.220158][    T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  870.220181][    T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  870.221473][    T9] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  870.221501][    T9] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  870.221520][    T9] usb 10-1: Manufacturer: syz
[  870.327289][    T9] usb 10-1: config 0 descriptor??
[  870.607361][    T9] rc_core: IR keymap rc-hauppauge not found
[  870.607382][    T9] Registered IR keymap rc-empty
[  870.608068][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.636148][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.658401][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  870.663010][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input88
[  870.692294][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.731079][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.746737][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.779253][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.796004][ T4927] Bluetooth: hci3: command tx timeout
[  870.796660][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.818637][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.836029][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.855992][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.877350][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.897486][    T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  870.920196][    T9] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  870.920219][    T9] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  871.012314][    T9] usb 10-1: USB disconnect, device number 30
[  871.236921][T18977] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  871.385952][T18977] usb 9-1: Using ep0 maxpacket: 32
[  871.389811][T18977] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  871.389859][T18977] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  871.389883][T18977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.399441][T18977] usb 9-1: config 0 descriptor??
[  871.409473][T18977] hub 9-1:0.0: bad descriptor, ignoring hub
[  871.409509][T18977] hub 9-1:0.0: probe with driver hub failed with error -5
[  871.470925][T18977] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  871.717143][T18977] usb 9-1: USB disconnect, device number 30
[  871.726245][ T5601] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  871.866040][T12366] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  871.876124][ T5601] usb 2-1: Using ep0 maxpacket: 32
[  871.880038][ T5601] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  871.880095][ T5601] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  871.882933][ T5601] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  871.882986][ T5601] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  871.885211][ T5601] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  871.885261][ T5601] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  871.888401][ T5601] usb 2-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a
[  871.888429][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.888450][ T5601] usb 2-1: Product: syz
[  871.888464][ T5601] usb 2-1: Manufacturer: syz
[  871.888479][ T5601] usb 2-1: SerialNumber: syz
[  871.893684][ T5601] usb 2-1: config 0 descriptor??
[  871.900385][ T5601] cdc_acm 2-1:0.0: Zero length descriptor references
[  871.900427][ T5601] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22
[  872.099529][    T9] usb 2-1: USB disconnect, device number 84
[  872.107641][T12366] usb 10-1: Using ep0 maxpacket: 32
[  872.111233][T12366] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[  872.111258][T12366] usb 10-1: config 0 has no interface number 0
[  872.114362][T12366] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  872.114389][T12366] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.114410][T12366] usb 10-1: Product: syz
[  872.114424][T12366] usb 10-1: Manufacturer: syz
[  872.114439][T12366] usb 10-1: SerialNumber: syz
[  872.186772][T12366] usb 10-1: config 0 descriptor??
[  872.193096][T12366] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  872.409479][T12366] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  872.438936][T12366] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  872.806998][ T5709] usb 10-1: USB disconnect, device number 31
[  872.807671][    C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[  872.892044][ T5709] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  872.934685][ T5709] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  872.938781][ T5709] quatech2 10-1:0.51: device disconnected
[  873.017844][    T9] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  873.169678][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  873.171231][    T9] usb 8-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30
[  873.171276][    T9] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  873.171305][    T9] usb 8-1: config 1 interface 0 has no altsetting 0
[  873.175083][    T9] usb 8-1: string descriptor 0 read error: -22
[  873.175199][    T9] usb 8-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40
[  873.175223][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.476758][T20407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  873.483740][T20407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.589945][    T9] usbhid 8-1:1.0: can't add hid device: -71
[  873.590069][    T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  873.632022][    T9] usb 8-1: USB disconnect, device number 34
[  874.077250][    T9] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  874.086444][ T5601] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  874.238320][ T5601] usb 2-1: config 0 interface 0 has no altsetting 0
[  874.238361][ T5601] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  874.238385][ T5601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.245965][    T9] usb 8-1: Using ep0 maxpacket: 16
[  874.248472][ T5601] usb 2-1: config 0 descriptor??
[  874.262601][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  874.262653][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  874.262682][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  874.262704][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  874.262728][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  874.271644][    T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  874.271671][    T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  874.271682][    T9] usb 8-1: Manufacturer: syz
[  874.296000][T12366] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  874.382142][    T9] usb 8-1: config 0 descriptor??
[  874.450251][T12366] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  874.450279][T12366] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253
[  874.453922][T12366] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  874.453950][T12366] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.453970][T12366] usb 10-1: Product: syz
[  874.453983][T12366] usb 10-1: Manufacturer: syz
[  874.454051][T12366] usb 10-1: SerialNumber: syz
[  874.519177][T20420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.531427][T12366] usb 10-1: config 0 descriptor??
[  874.532199][T20420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.599153][T12366] gspca_main: sunplus-2.14.0 probing 055f:c630
[  874.726023][    T9] rc_core: IR keymap rc-hauppauge not found
[  874.726044][    T9] Registered IR keymap rc-empty
[  874.726672][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  874.747282][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  874.780711][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  874.789576][T18978] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  874.818134][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input89
[  874.839094][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  874.856121][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  874.876344][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  874.896896][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  874.917390][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  874.946204][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  874.953092][T18978] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  874.953121][T18978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.953197][T18978] usb 9-1: Product: syz
[  874.953213][T18978] usb 9-1: Manufacturer: syz
[  874.953228][T18978] usb 9-1: SerialNumber: syz
[  874.966500][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  875.006041][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  875.037461][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  875.056139][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  875.095615][    T9] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  875.095642][    T9] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  875.135608][    T9] usb 8-1: USB disconnect, device number 35
[  875.156969][T20420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.160715][T20420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.175729][ T5601] video4linux radio48: keene_cmd_main failed (-71)
[  875.175947][ T5601] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  875.204486][T12366] gspca_sunplus: reg_r err -32
[  875.204562][T12366] sunplus 10-1:0.0: probe with driver sunplus failed with error -32
[  875.309375][T12366] usb 10-1: USB disconnect, device number 32
[  875.374693][ T5601] usb 2-1: USB disconnect, device number 85
[  875.474596][T20436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.493343][T20436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.547885][T20436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.550820][T20436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.778762][T18978] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  875.778823][T18978] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  875.779272][T18978] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  875.779324][T18978] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  875.795751][T18978] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  875.831672][T18978] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[  875.884828][T18978] usb 9-1: USB disconnect, device number 31
[  876.118329][    T9] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  876.252888][   T10] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  876.267616][    T9] usb 8-1: config 0 has an invalid interface number: 168 but max is 0
[  876.267645][    T9] usb 8-1: config 0 has no interface number 0
[  876.267689][    T9] usb 8-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  876.267715][    T9] usb 8-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 225
[  876.267738][    T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  876.267750][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.271115][    T9] usb 8-1: config 0 descriptor??
[  876.271958][T20443] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  876.430381][   T10] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[  876.430410][   T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  876.430429][   T10] usb 10-1: config 0 has no interface number 0
[  876.434992][   T10] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  876.435023][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.435103][   T10] usb 10-1: Product: syz
[  876.435119][   T10] usb 10-1: Manufacturer: syz
[  876.435134][   T10] usb 10-1: SerialNumber: syz
[  876.498205][    T9] usb 8-1: string descriptor 0 read error: -71
[  876.514931][   T10] usb 10-1: config 0 descriptor??
[  876.521217][    T9] keyspan 8-1:0.168: Keyspan 2 port adapter converter detected
[  876.521627][    T9] keyspan 8-1:0.168: found no endpoint descriptor for endpoint 1
[  876.557332][    T9] keyspan 8-1:0.168: found no endpoint descriptor for endpoint 84
[  876.559022][    T9] keyspan 8-1:0.168: found no endpoint descriptor for endpoint 2
[  876.587645][   T10] uvcvideo 10-1:0.64: probe with driver uvcvideo failed with error -22
[  876.605509][    T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  876.671478][    T9] keyspan 8-1:0.168: found no endpoint descriptor for endpoint 88
[  876.671610][    T9] keyspan 8-1:0.168: found no endpoint descriptor for endpoint 6
[  876.692378][    T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  876.711025][    T9] usb 8-1: USB disconnect, device number 36
[  876.734679][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  876.751495][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  876.753276][    T9] keyspan 8-1:0.168: device disconnected
[  876.811575][ T5601] usb 10-1: USB disconnect, device number 33
[  876.951761][T20467] FAULT_INJECTION: forcing a failure.
[  876.951761][T20467] name failslab, interval 1, probability 0, space 0, times 0
[  876.951790][T20467] CPU: 0 UID: 0 PID: 20467 Comm: syz.8.4895 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  876.951811][T20467] Tainted: [L]=SOFTLOCKUP
[  876.951817][T20467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  876.951825][T20467] Call Trace:
[  876.951831][T20467]  <TASK>
[  876.951838][T20467]  dump_stack_lvl+0xe8/0x150
[  876.951858][T20467]  should_fail_ex+0x46b/0x600
[  876.951884][T20467]  should_failslab+0xa8/0x100
[  876.951904][T20467]  kmem_cache_alloc_noprof+0x87/0x680
[  876.951923][T20467]  ? skb_clone+0x212/0x3a0
[  876.951940][T20467]  skb_clone+0x212/0x3a0
[  876.951952][T20467]  ? nfnetlink_rcv+0x4b0/0x27b0
[  876.951973][T20467]  nfnetlink_rcv+0x4e2/0x27b0
[  876.951994][T20467]  ? sock_sendmsg_nosec+0x13a/0x180
[  876.952012][T20467]  ? __pfx_snprintf+0x10/0x10
[  876.952032][T20467]  ? unwind_get_return_address+0x4d/0x90
[  876.952058][T20467]  ? trim_netdev_trace+0x7ac/0x840
[  876.952078][T20467]  ? __pfx_trim_netdev_trace+0x10/0x10
[  876.952092][T20467]  ? stack_trace_save+0xa9/0x100
[  876.952110][T20467]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  876.952149][T20467]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  876.952165][T20467]  ? ref_tracker_free+0x673/0x820
[  876.952188][T20467]  ? __netlink_deliver_tap+0x636/0x8b0
[  876.952209][T20467]  ? netlink_deliver_tap+0x19c/0x1b0
[  876.952231][T20467]  ? netlink_unicast+0x754/0x920
[  876.952251][T20467]  ? netlink_sendmsg+0x813/0xb40
[  876.952265][T20467]  ? sock_sendmsg_nosec+0x13a/0x180
[  876.952282][T20467]  ? ____sys_sendmsg+0x55c/0x870
[  876.952305][T20467]  ? ___sys_sendmsg+0x2a5/0x360
[  876.952327][T20467]  ? __x64_sys_sendmsg+0x1c3/0x2a0
[  876.952345][T20467]  ? do_syscall_64+0x174/0x580
[  876.952364][T20467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.952389][T20467]  ? skb_clone+0x246/0x3a0
[  876.952404][T20467]  ? __netlink_deliver_tap+0x866/0x8b0
[  876.952425][T20467]  ? netlink_deliver_tap+0x2e/0x1b0
[  876.952450][T20467]  ? netlink_deliver_tap+0x2e/0x1b0
[  876.952470][T20467]  ? netlink_deliver_tap+0x2e/0x1b0
[  876.952494][T20467]  netlink_unicast+0x780/0x920
[  876.952520][T20467]  netlink_sendmsg+0x813/0xb40
[  876.952540][T20467]  ? __pfx_netlink_sendmsg+0x10/0x10
[  876.952556][T20467]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  876.952577][T20467]  ? aa_sock_msg_perm+0x122/0x200
[  876.952596][T20467]  ? __pfx_netlink_sendmsg+0x10/0x10
[  876.952609][T20467]  sock_sendmsg_nosec+0x13a/0x180
[  876.952628][T20467]  ____sys_sendmsg+0x55c/0x870
[  876.952654][T20467]  ? __pfx_____sys_sendmsg+0x10/0x10
[  876.952681][T20467]  ? import_iovec+0x73/0xa0
[  876.952701][T20467]  ___sys_sendmsg+0x2a5/0x360
[  876.952720][T20467]  ? __lock_acquire+0x6b5/0x2d10
[  876.952740][T20467]  ? __pfx____sys_sendmsg+0x10/0x10
[  876.952784][T20467]  ? __fget_files+0x2a/0x420
[  876.952801][T20467]  ? __fget_files+0x3a6/0x420
[  876.952824][T20467]  __x64_sys_sendmsg+0x1c3/0x2a0
[  876.952847][T20467]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  876.952876][T20467]  ? __pfx_ksys_write+0x10/0x10
[  876.952902][T20467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.952918][T20467]  do_syscall_64+0x174/0x580
[  876.952938][T20467]  ? trace_irq_disable+0x3b/0x140
[  876.952955][T20467]  ? clear_bhb_loop+0x40/0x90
[  876.952973][T20467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.952988][T20467] RIP: 0033:0x7f230529ce59
[  876.953003][T20467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  876.953017][T20467] RSP: 002b:00007f23034ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  876.953034][T20467] RAX: ffffffffffffffda RBX: 00007f2305515fa0 RCX: 00007f230529ce59
[  876.953045][T20467] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  876.953055][T20467] RBP: 00007f23034ee090 R08: 0000000000000000 R09: 0000000000000000
[  876.953064][T20467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  876.953075][T20467] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  876.953101][T20467]  </TASK>
[  877.409326][ T5601] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  877.556021][ T5601] usb 2-1: Using ep0 maxpacket: 8
[  877.558744][ T5601] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  877.558790][ T5601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  877.558817][ T5601] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  877.558842][ T5601] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  877.558854][ T5601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.563542][ T5601] usb 2-1: config 0 descriptor??
[  877.564369][T20471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  877.715962][ T5709] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  877.870612][ T5709] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  877.870632][ T5709] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  877.870655][ T5709] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  877.870668][ T5709] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.931337][ T5709] usb 10-1: config 0 descriptor??
[  877.991878][ T5601] usbhid 2-1:0.0: can't add hid device: -71
[  877.991999][ T5601] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  878.018115][ T5601] usb 2-1: USB disconnect, device number 86
[  878.415278][ T5709] pyra 0003:1E7D:2CF6.0035: unknown main item tag 0x0
[  878.415325][ T5709] pyra 0003:1E7D:2CF6.0035: unknown main item tag 0x0
[  878.415352][ T5709] pyra 0003:1E7D:2CF6.0035: unknown main item tag 0x0
[  878.415378][ T5709] pyra 0003:1E7D:2CF6.0035: unknown main item tag 0x0
[  878.415403][ T5709] pyra 0003:1E7D:2CF6.0035: unknown main item tag 0x0
[  878.415425][ T5709] pyra 0003:1E7D:2CF6.0035: unknown main item tag 0x0
[  878.415451][ T5709] pyra 0003:1E7D:2CF6.0035: unknown main item tag 0x0
[  878.424152][ T5709] pyra 0003:1E7D:2CF6.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0
[  878.740738][ T5709] pyra 0003:1E7D:2CF6.0035: couldn't init struct pyra_device
[  878.740793][ T5709] pyra 0003:1E7D:2CF6.0035: couldn't install mouse
[  878.752018][ T5709] pyra 0003:1E7D:2CF6.0035: probe with driver pyra failed with error -5
[  878.786777][ T4927] Bluetooth: hci3: command tx timeout
[  878.855940][ T5601] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  878.913729][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4910'.
[  878.942568][T18978] usb 10-1: USB disconnect, device number 34
[  879.008264][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.008300][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.008333][ T5601] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  879.008346][ T5601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.011937][ T5601] usb 9-1: config 0 descriptor??
[  879.146104][ T5709] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  879.301943][ T5709] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  879.301973][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  879.301994][ T5709] usb 2-1: config 0 has no interface number 0
[  879.305602][ T5709] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  879.305632][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.305704][ T5709] usb 2-1: Product: syz
[  879.305720][ T5709] usb 2-1: Manufacturer: syz
[  879.305735][ T5709] usb 2-1: SerialNumber: syz
[  879.321139][ T5709] usb 2-1: config 0 descriptor??
[  879.350079][ T5709] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22
[  879.425726][ T5601] hid-steam 0003:28DE:1142.0036: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0
[  879.496036][ T5601] hid-steam 0003:28DE:1142.0036: Steam wireless receiver connected
[  879.615109][   T10] usb 2-1: USB disconnect, device number 87
[  879.659616][ T5601] hid-steam 0003:28DE:1142.0037: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0
[  879.704502][ T5601] usb 9-1: USB disconnect, device number 32
[  879.794988][T20505] fido_id[20505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  879.841728][ T5601] hid-steam 0003:28DE:1142.0036: Steam wireless receiver disconnected
[  880.093483][T20510] tmpfs: Unknown parameter 'nr_blocksM4'
[  880.173003][T20514] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4914'.
[  880.174270][T20514] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4914'.
[  880.480779][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4918'.
[  880.480805][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4918'.
[  880.578747][T20527] FAULT_INJECTION: forcing a failure.
[  880.578747][T20527] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  880.578782][T20527] CPU: 0 UID: 0 PID: 20527 Comm: syz.1.4920 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  880.578810][T20527] Tainted: [L]=SOFTLOCKUP
[  880.578817][T20527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  880.578828][T20527] Call Trace:
[  880.578836][T20527]  <TASK>
[  880.578845][T20527]  dump_stack_lvl+0xe8/0x150
[  880.578873][T20527]  should_fail_ex+0x46b/0x600
[  880.578906][T20527]  _copy_from_user+0x2d/0xb0
[  880.578930][T20527]  ___sys_sendmsg+0x1c6/0x360
[  880.578959][T20527]  ? __lock_acquire+0x6b5/0x2d10
[  880.578987][T20527]  ? __pfx____sys_sendmsg+0x10/0x10
[  880.579052][T20527]  ? __fget_files+0x2a/0x420
[  880.579075][T20527]  ? __fget_files+0x3a6/0x420
[  880.579114][T20527]  __x64_sys_sendmsg+0x1c3/0x2a0
[  880.579144][T20527]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  880.579183][T20527]  ? __pfx_ksys_write+0x10/0x10
[  880.579218][T20527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.579239][T20527]  do_syscall_64+0x174/0x580
[  880.579268][T20527]  ? trace_irq_disable+0x3b/0x140
[  880.579290][T20527]  ? clear_bhb_loop+0x40/0x90
[  880.579314][T20527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.579333][T20527] RIP: 0033:0x7f514210ce59
[  880.579352][T20527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  880.579369][T20527] RSP: 002b:00007f514035e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  880.579391][T20527] RAX: ffffffffffffffda RBX: 00007f5142385fa0 RCX: 00007f514210ce59
[  880.579406][T20527] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003
[  880.579419][T20527] RBP: 00007f514035e090 R08: 0000000000000000 R09: 0000000000000000
[  880.579432][T20527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  880.579444][T20527] R13: 00007f5142386038 R14: 00007f5142385fa0 R15: 00007fff3f8fa528
[  880.579474][T20527]  </TASK>
[  880.980069][   T10] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  881.113652][T20535] netlink: 'syz.7.4924': attribute type 10 has an invalid length.
[  881.148418][   T10] usb 9-1: config 0 has an invalid interface number: 64 but max is 0
[  881.148447][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  881.148467][   T10] usb 9-1: config 0 has no interface number 0
[  881.150747][   T10] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  881.150776][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.150796][   T10] usb 9-1: Product: syz
[  881.150812][   T10] usb 9-1: Manufacturer: syz
[  881.150826][   T10] usb 9-1: SerialNumber: syz
[  881.158634][   T10] usb 9-1: config 0 descriptor??
[  881.167540][T20536] netlink: 'syz.7.4924': attribute type 10 has an invalid length.
[  881.204251][   T10] uvcvideo 9-1:0.64: probe with driver uvcvideo failed with error -22
[  881.336392][T18978] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  881.362107][T20542] FAULT_INJECTION: forcing a failure.
[  881.362107][T20542] name failslab, interval 1, probability 0, space 0, times 0
[  881.362142][T20542] CPU: 1 UID: 0 PID: 20542 Comm: syz.1.4926 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  881.362169][T20542] Tainted: [L]=SOFTLOCKUP
[  881.362176][T20542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  881.362188][T20542] Call Trace:
[  881.362195][T20542]  <TASK>
[  881.362203][T20542]  dump_stack_lvl+0xe8/0x150
[  881.362230][T20542]  should_fail_ex+0x46b/0x600
[  881.362264][T20542]  should_failslab+0xa8/0x100
[  881.362291][T20542]  __kmalloc_noprof+0xdf/0x7b0
[  881.362315][T20542]  ? ethnl_default_set_doit+0x16a/0xae0
[  881.362344][T20542]  ethnl_default_set_doit+0x16a/0xae0
[  881.362366][T20542]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  881.362391][T20542]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  881.362424][T20542]  genl_family_rcv_msg_doit+0x22a/0x330
[  881.362448][T20542]  ? __asan_memcpy+0x40/0x70
[  881.362472][T20542]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  881.362508][T20542]  ? bpf_lsm_capable+0x9/0x20
[  881.362526][T20542]  ? security_capable+0x7e/0x2c0
[  881.362563][T20542]  genl_rcv_msg+0x61c/0x7a0
[  881.362593][T20542]  ? __pfx_genl_rcv_msg+0x10/0x10
[  881.362614][T20542]  ? ref_tracker_free+0x673/0x820
[  881.362643][T20542]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  881.362666][T20542]  ? ____sys_sendmsg+0x55c/0x870
[  881.362697][T20542]  ? ___sys_sendmsg+0x2a5/0x360
[  881.362722][T20542]  ? __x64_sys_sendmsg+0x1c3/0x2a0
[  881.362749][T20542]  ? do_syscall_64+0x174/0x580
[  881.362777][T20542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.362807][T20542]  netlink_rcv_skb+0x232/0x4b0
[  881.362841][T20542]  ? __pfx_genl_rcv_msg+0x10/0x10
[  881.362863][T20542]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  881.362902][T20542]  ? netlink_deliver_tap+0x2e/0x1b0
[  881.362928][T20542]  ? netlink_deliver_tap+0x2e/0x1b0
[  881.362952][T20542]  genl_rcv+0x28/0x40
[  881.362969][T20542]  netlink_unicast+0x780/0x920
[  881.363001][T20542]  netlink_sendmsg+0x813/0xb40
[  881.363027][T20542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  881.363047][T20542]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  881.363074][T20542]  ? aa_sock_msg_perm+0x122/0x200
[  881.363095][T20542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  881.363114][T20542]  sock_sendmsg_nosec+0x13a/0x180
[  881.363138][T20542]  ____sys_sendmsg+0x55c/0x870
[  881.363172][T20542]  ? __pfx_____sys_sendmsg+0x10/0x10
[  881.363210][T20542]  ? import_iovec+0x73/0xa0
[  881.363236][T20542]  ___sys_sendmsg+0x2a5/0x360
[  881.363263][T20542]  ? __lock_acquire+0x6b5/0x2d10
[  881.363290][T20542]  ? __pfx____sys_sendmsg+0x10/0x10
[  881.363354][T20542]  ? __fget_files+0x2a/0x420
[  881.363376][T20542]  ? __fget_files+0x3a6/0x420
[  881.363405][T20542]  __x64_sys_sendmsg+0x1c3/0x2a0
[  881.363434][T20542]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  881.363473][T20542]  ? __pfx_ksys_write+0x10/0x10
[  881.363506][T20542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.363525][T20542]  do_syscall_64+0x174/0x580
[  881.363556][T20542]  ? trace_irq_disable+0x3b/0x140
[  881.363572][T20542]  ? clear_bhb_loop+0x40/0x90
[  881.363590][T20542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.363604][T20542] RIP: 0033:0x7f514210ce59
[  881.363618][T20542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  881.363631][T20542] RSP: 002b:00007f514035e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  881.363647][T20542] RAX: ffffffffffffffda RBX: 00007f5142385fa0 RCX: 00007f514210ce59
[  881.363657][T20542] RDX: 0000000000000084 RSI: 0000200000000540 RDI: 0000000000000003
[  881.363666][T20542] RBP: 00007f514035e090 R08: 0000000000000000 R09: 0000000000000000
[  881.363675][T20542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  881.363683][T20542] R13: 00007f5142386038 R14: 00007f5142385fa0 R15: 00007fff3f8fa528
[  881.363706][T20542]  </TASK>
[  881.386551][T20535] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  881.393288][T20535] team0: Port device netdevsim1 added
[  881.476765][   T10] usb 9-1: USB disconnect, device number 33
[  881.589595][ T4927] Bluetooth: hci2: command 0x0406 tx timeout
[  881.664174][T18978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  881.664223][T18978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  881.664262][T18978] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  881.664286][T18978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.703781][T20536] team0: Port device netdevsim1 removed
[  881.745950][T20536] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  881.786932][T20536] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  881.854426][T18978] usb 10-1: config 0 descriptor??
[  881.950327][T20548] FAULT_INJECTION: forcing a failure.
[  881.950327][T20548] name failslab, interval 1, probability 0, space 0, times 0
[  881.950362][T20548] CPU: 1 UID: 0 PID: 20548 Comm: syz.7.4928 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  881.950390][T20548] Tainted: [L]=SOFTLOCKUP
[  881.950400][T20548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  881.950412][T20548] Call Trace:
[  881.950420][T20548]  <TASK>
[  881.950429][T20548]  dump_stack_lvl+0xe8/0x150
[  881.950468][T20548]  should_fail_ex+0x46b/0x600
[  881.950503][T20548]  should_failslab+0xa8/0x100
[  881.950530][T20548]  __kmalloc_noprof+0xdf/0x7b0
[  881.950552][T20548]  ? rcu_is_watching+0x15/0xb0
[  881.950577][T20548]  ? snd_interval_refine+0x602/0xa50
[  881.950680][T20548]  ? snd_pcm_hw_refine+0x9ef/0x17a0
[  881.950736][T20548]  snd_pcm_hw_refine+0x9ef/0x17a0
[  881.950771][T20548]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  881.950824][T20548]  ? __asan_memset+0x22/0x50
[  881.950843][T20548]  ? snd_pcm_oss_change_params_locked+0x6e5/0x3e00
[  881.950895][T20548]  ? snd_pcm_oss_change_params_locked+0x744/0x3e00
[  881.950923][T20548]  snd_pcm_oss_change_params_locked+0x851/0x3e00
[  881.950960][T20548]  ? tomoyo_path_number_perm+0x219/0x630
[  881.951000][T20548]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  881.951035][T20548]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  881.951063][T20548]  ? lockdep_hardirqs_on+0x7a/0x110
[  881.951091][T20548]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  881.951117][T20548]  ? mutex_lock_interruptible_nested+0x152/0x1d0
[  881.951139][T20548]  ? snd_pcm_oss_get_active_substream+0x136/0x280
[  881.951169][T20548]  snd_pcm_oss_get_active_substream+0x1e2/0x280
[  881.951200][T20548]  snd_pcm_oss_get_formats+0x34/0x420
[  881.951230][T20548]  snd_pcm_oss_set_format+0x41/0x500
[  881.951254][T20548]  ? __might_fault+0xaf/0x130
[  881.951281][T20548]  snd_pcm_oss_ioctl+0xbec/0xe00
[  881.951306][T20548]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  881.951330][T20548]  __se_sys_ioctl+0xff/0x170
[  881.951358][T20548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.951380][T20548]  do_syscall_64+0x174/0x580
[  881.951407][T20548]  ? trace_irq_disable+0x3b/0x140
[  881.951428][T20548]  ? clear_bhb_loop+0x40/0x90
[  881.951461][T20548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.951480][T20548] RIP: 0033:0x7f34a763ce59
[  881.951498][T20548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  881.951515][T20548] RSP: 002b:00007f34a588e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  881.951537][T20548] RAX: ffffffffffffffda RBX: 00007f34a78b5fa0 RCX: 00007f34a763ce59
[  881.951552][T20548] RDX: 00002000000000c0 RSI: 00000000c0045005 RDI: 0000000000000003
[  881.951565][T20548] RBP: 00007f34a588e090 R08: 0000000000000000 R09: 0000000000000000
[  881.951577][T20548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  881.951589][T20548] R13: 00007f34a78b6038 R14: 00007f34a78b5fa0 R15: 00007ffd43508a08
[  881.951619][T20548]  </TASK>
[  882.358664][T18978] hid-steam 0003:28DE:1142.0038: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0
[  882.416490][T18978] hid-steam 0003:28DE:1142.0038: Steam wireless receiver connected
[  882.439059][T18978] hid-steam 0003:28DE:1142.0039: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0
[  882.455596][T20556] FAULT_INJECTION: forcing a failure.
[  882.455596][T20556] name failslab, interval 1, probability 0, space 0, times 0
[  882.455628][T20556] CPU: 0 UID: 0 PID: 20556 Comm: syz.7.4932 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  882.455655][T20556] Tainted: [L]=SOFTLOCKUP
[  882.455663][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  882.455674][T20556] Call Trace:
[  882.455682][T20556]  <TASK>
[  882.455691][T20556]  dump_stack_lvl+0xe8/0x150
[  882.455718][T20556]  should_fail_ex+0x46b/0x600
[  882.455751][T20556]  should_failslab+0xa8/0x100
[  882.455778][T20556]  __kmalloc_cache_noprof+0x84/0x690
[  882.455804][T20556]  ? sock_sendmsg_nosec+0x13a/0x180
[  882.455823][T20556]  ? xfrm_policy_alloc+0x78/0x310
[  882.455846][T20556]  xfrm_policy_alloc+0x78/0x310
[  882.455866][T20556]  xfrm_policy_construct+0x39/0x6b0
[  882.455905][T20556]  xfrm_add_policy+0x26b/0x6c0
[  882.455931][T20556]  ? __pfx_xfrm_add_policy+0x10/0x10
[  882.455951][T20556]  ? apparmor_capable+0x126/0x170
[  882.455982][T20556]  ? __nla_parse+0x40/0x60
[  882.456006][T20556]  xfrm_user_rcv_msg+0x7ae/0xc40
[  882.456033][T20556]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  882.456086][T20556]  ? __lock_acquire+0x6b5/0x2d10
[  882.456114][T20556]  ? netlink_deliver_tap+0x19c/0x1b0
[  882.456140][T20556]  ? netlink_unicast+0x754/0x920
[  882.456164][T20556]  ? netlink_sendmsg+0x813/0xb40
[  882.456180][T20556]  ? sock_sendmsg_nosec+0x13a/0x180
[  882.456201][T20556]  ? ____sys_sendmsg+0x55c/0x870
[  882.456228][T20556]  ? ___sys_sendmsg+0x2a5/0x360
[  882.456252][T20556]  ? __x64_sys_sendmsg+0x1c3/0x2a0
[  882.456287][T20556]  netlink_rcv_skb+0x232/0x4b0
[  882.456317][T20556]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  882.456340][T20556]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  882.456378][T20556]  ? lockdep_hardirqs_on+0x7a/0x110
[  882.456408][T20556]  ? mutex_lock_nested+0x152/0x1d0
[  882.456429][T20556]  ? xfrm_netlink_rcv+0x6a/0x90
[  882.456453][T20556]  xfrm_netlink_rcv+0x79/0x90
[  882.456474][T20556]  netlink_unicast+0x780/0x920
[  882.456511][T20556]  netlink_sendmsg+0x813/0xb40
[  882.456538][T20556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  882.456559][T20556]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  882.456586][T20556]  ? aa_sock_msg_perm+0x122/0x200
[  882.456608][T20556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  882.456626][T20556]  sock_sendmsg_nosec+0x13a/0x180
[  882.456651][T20556]  ____sys_sendmsg+0x55c/0x870
[  882.456684][T20556]  ? __pfx_____sys_sendmsg+0x10/0x10
[  882.456721][T20556]  ? import_iovec+0x73/0xa0
[  882.456747][T20556]  ___sys_sendmsg+0x2a5/0x360
[  882.456773][T20556]  ? __lock_acquire+0x6b5/0x2d10
[  882.456799][T20556]  ? __pfx____sys_sendmsg+0x10/0x10
[  882.456860][T20556]  ? __fget_files+0x2a/0x420
[  882.456887][T20556]  ? __fget_files+0x3a6/0x420
[  882.456918][T20556]  __x64_sys_sendmsg+0x1c3/0x2a0
[  882.456950][T20556]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  882.456988][T20556]  ? __pfx_ksys_write+0x10/0x10
[  882.457022][T20556]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  882.457043][T20556]  do_syscall_64+0x174/0x580
[  882.457069][T20556]  ? trace_irq_disable+0x3b/0x140
[  882.457090][T20556]  ? clear_bhb_loop+0x40/0x90
[  882.457113][T20556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  882.457132][T20556] RIP: 0033:0x7f34a763ce59
[  882.457150][T20556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  882.457166][T20556] RSP: 002b:00007f34a588e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  882.457188][T20556] RAX: ffffffffffffffda RBX: 00007f34a78b5fa0 RCX: 00007f34a763ce59
[  882.457201][T20556] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003
[  882.457214][T20556] RBP: 00007f34a588e090 R08: 0000000000000000 R09: 0000000000000000
[  882.457227][T20556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  882.457238][T20556] R13: 00007f34a78b6038 R14: 00007f34a78b5fa0 R15: 00007ffd43508a08
[  882.457269][T20556]  </TASK>
[  882.486067][ T5600] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  882.641232][ T5600] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  882.643886][ T5600] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  882.643913][ T5600] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.643934][ T5600] usb 9-1: Product: syz
[  882.643948][ T5600] usb 9-1: Manufacturer: syz
[  882.643963][ T5600] usb 9-1: SerialNumber: syz
[  882.672997][ T5600] usb 9-1: config 0 descriptor??
[  882.846766][    T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  882.922638][T18978] usb 10-1: USB disconnect, device number 35
[  882.967708][T18978] hid-steam 0003:28DE:1142.0038: Steam wireless receiver disconnected
[  882.993136][   T10] usb 9-1: USB disconnect, device number 34
[  883.006038][    T9] usb 2-1: device descriptor read/64, error -71
[  883.031703][T20560] fido_id[20560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  883.046097][ T5600] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  883.215999][ T5600] usb 8-1: Using ep0 maxpacket: 32
[  883.218602][ T5600] usb 8-1: unable to get BOS descriptor or descriptor too short
[  883.228436][ T5600] usb 8-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  883.228465][ T5600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.228486][ T5600] usb 8-1: Product: syz
[  883.228501][ T5600] usb 8-1: Manufacturer: syz
[  883.228516][ T5600] usb 8-1: SerialNumber: syz
[  883.268290][    T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  883.406197][    T9] usb 2-1: device descriptor read/64, error -71
[  883.480054][T20562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  883.480699][T20562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  883.507616][ T4927] Bluetooth: hci1: command tx timeout
[  883.533820][    T9] usb usb2-port1: attempt power cycle
[  883.685922][ T5600] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  883.686303][ T5600] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  883.765510][T20574] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000
[  883.814008][T20574] 9p: Bad value for 'rfdno'
[  883.896057][ T5600] usb 8-1: USB disconnect, device number 37
[  883.966202][    T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  884.002786][    T9] usb 2-1: device descriptor read/8, error -71
[  884.256523][    T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  884.288094][    T9] usb 2-1: device descriptor read/8, error -71
[  884.406033][ T5600] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  884.406719][    T9] usb usb2-port1: unable to enumerate USB device
[  884.456195][T18978] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[  884.572977][ T5600] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  884.573074][ T5600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  884.573103][ T5600] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  884.573127][ T5600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  884.573153][ T5600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  884.575529][ T5600] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  884.575557][ T5600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.575579][ T5600] usb 8-1: Product: syz
[  884.575593][ T5600] usb 8-1: Manufacturer: syz
[  884.575609][ T5600] usb 8-1: SerialNumber: syz
[  884.585419][ T5600] usb 8-1: config 0 descriptor??
[  884.599310][ T5600] iguanair 8-1:0.0: probe with driver iguanair failed with error -12
[  884.683303][T18978] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[  884.683329][T18978] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  884.683349][T18978] usb 10-1: config 0 has no interface number 0
[  884.688790][T18978] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  884.688819][T18978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.688839][T18978] usb 10-1: Product: syz
[  884.688855][T18978] usb 10-1: Manufacturer: syz
[  884.688871][T18978] usb 10-1: SerialNumber: syz
[  884.753385][T18978] usb 10-1: config 0 descriptor??
[  884.768412][T18978] uvcvideo 10-1:0.64: probe with driver uvcvideo failed with error -22
[  884.814018][ T5600] usb 8-1: USB disconnect, device number 38
[  884.937816][T20580] netlink: 'syz.8.4939': attribute type 11 has an invalid length.
[  884.968707][   T10] usb 10-1: USB disconnect, device number 36
[  885.787441][T18978] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  885.939725][T18978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  885.939753][T18978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  885.939776][T18978] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  885.939788][T18978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.949233][    T9] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  885.951206][T18978] usb 8-1: config 0 descriptor??
[  886.152344][    T9] usb 10-1: Using ep0 maxpacket: 8
[  886.161371][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  886.163538][    T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  886.163589][    T9] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  886.163616][    T9] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0
[  886.163639][    T9] usb 10-1: config 1 interface 0 has no altsetting 0
[  886.200210][    T9] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  886.200240][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.200260][    T9] usb 10-1: Product: syz
[  886.200274][    T9] usb 10-1: Manufacturer: syz
[  886.200286][    T9] usb 10-1: SerialNumber: syz
[  886.295951][   T10] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  886.419827][T18978] hid-steam 0003:28DE:1142.003A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  886.445955][   T10] usb 9-1: Using ep0 maxpacket: 16
[  886.448788][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  886.448838][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  886.449137][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  886.449243][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  886.449267][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  886.480801][T18978] hid-steam 0003:28DE:1142.003A: Steam wireless receiver connected
[  886.523360][   T10] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  886.523400][   T10] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  886.523421][   T10] usb 9-1: Manufacturer: syz
[  886.565064][T18978] hid-steam 0003:28DE:1142.003B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  886.591553][   T10] usb 9-1: config 0 descriptor??
[  886.636698][T18978] usb 8-1: USB disconnect, device number 39
[  886.789961][T18978] hid-steam 0003:28DE:1142.003A: Steam wireless receiver disconnected
[  886.879278][    T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  886.892976][    T9] usb 10-1: USB disconnect, device number 37
[  886.915442][T20602] fido_id[20602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  886.969351][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  887.026375][   T10] rc_core: IR keymap rc-hauppauge not found
[  887.026396][   T10] Registered IR keymap rc-empty
[  887.026594][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.027672][ T4927] Bluetooth: hci3: command tx timeout
[  887.058085][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.079731][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  887.088535][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input91
[  887.122056][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.147774][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.176498][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.196097][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.215999][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.236236][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.256080][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.276087][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.296254][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.315981][   T10] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  887.399518][   T10] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  887.399544][   T10] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  887.424882][T20611] FAULT_INJECTION: forcing a failure.
[  887.424882][T20611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  887.425101][T20611] CPU: 1 UID: 0 PID: 20611 Comm: syz.9.4950 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  887.425130][T20611] Tainted: [L]=SOFTLOCKUP
[  887.425137][T20611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  887.425148][T20611] Call Trace:
[  887.425156][T20611]  <TASK>
[  887.425165][T20611]  dump_stack_lvl+0xe8/0x150
[  887.425193][T20611]  should_fail_ex+0x46b/0x600
[  887.425226][T20611]  _copy_from_user+0x2d/0xb0
[  887.425247][T20611]  get_timespec64+0x96/0x1b0
[  887.425274][T20611]  ? __pfx_get_timespec64+0x10/0x10
[  887.425306][T20611]  __x64_sys_recvmmsg+0x14b/0x250
[  887.425330][T20611]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  887.425357][T20611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.425378][T20611]  do_syscall_64+0x174/0x580
[  887.425405][T20611]  ? trace_irq_disable+0x3b/0x140
[  887.425425][T20611]  ? clear_bhb_loop+0x40/0x90
[  887.425449][T20611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.425471][T20611] RIP: 0033:0x7f00c3afce59
[  887.425489][T20611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  887.425506][T20611] RSP: 002b:00007f00c1d4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  887.425527][T20611] RAX: ffffffffffffffda RBX: 00007f00c3d75fa0 RCX: 00007f00c3afce59
[  887.425541][T20611] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  887.425552][T20611] RBP: 00007f00c1d4e090 R08: 0000200000003700 R09: 0000000000000000
[  887.425565][T20611] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  887.425576][T20611] R13: 00007f00c3d76038 R14: 00007f00c3d75fa0 R15: 00007ffee5eaa158
[  887.425606][T20611]  </TASK>
[  887.506405][ T4927] Bluetooth: hci1: command 0x0406 tx timeout
[  887.557344][T20613] netlink: 'syz.1.4951': attribute type 27 has an invalid length.
[  887.678203][   T10] usb 9-1: USB disconnect, device number 35
[  887.884851][T20620] netlink: 'syz.7.4954': attribute type 10 has an invalid length.
[  887.917830][T18977] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[  887.945518][T20620] team0: Port device dummy0 added
[  887.966446][T20620] netlink: 763 bytes leftover after parsing attributes in process `syz.7.4954'.
[  888.106106][T18977] usb 10-1: device descriptor read/64, error -71
[  888.106224][ T5601] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  888.257583][ T5601] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  888.257611][ T5601] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  888.257631][ T5601] usb 2-1: config 0 has no interface number 0
[  888.260696][ T5601] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  888.260727][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.260747][ T5601] usb 2-1: Product: syz
[  888.260762][ T5601] usb 2-1: Manufacturer: syz
[  888.260773][ T5601] usb 2-1: SerialNumber: syz
[  888.265300][ T5601] usb 2-1: config 0 descriptor??
[  888.312700][ T5601] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22
[  888.346078][T18977] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[  888.476017][   T10] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  888.476062][T18977] usb 10-1: device descriptor read/64, error -71
[  888.511658][ T5601] usb 2-1: USB disconnect, device number 92
[  888.586375][T18977] usb usb10-port1: attempt power cycle
[  888.639136][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.639170][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.639209][   T10] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  888.639232][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.647700][   T10] usb 9-1: config 0 descriptor??
[  888.926214][T18977] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[  888.946781][T18977] usb 10-1: device descriptor read/8, error -71
[  889.061902][   T10] hid-steam 0003:28DE:1142.003C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0
[  889.116310][   T10] hid-steam 0003:28DE:1142.003C: Steam wireless receiver connected
[  889.157982][   T10] hid-steam 0003:28DE:1142.003D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0
[  889.187311][T18977] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[  889.210315][T18977] usb 10-1: device descriptor read/8, error -71
[  889.258228][   T10] usb 9-1: USB disconnect, device number 36
[  889.299844][   T10] hid-steam 0003:28DE:1142.003C: Steam wireless receiver disconnected
[  889.310424][T12367] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  889.319179][T18977] usb usb10-port1: unable to enumerate USB device
[  889.465925][T12367] usb 2-1: Using ep0 maxpacket: 8
[  889.467657][T12367] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  889.469795][T12367] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  889.469824][T12367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.469844][T12367] usb 2-1: Product: syz
[  889.469856][T12367] usb 2-1: Manufacturer: syz
[  889.469864][T12367] usb 2-1: SerialNumber: syz
[  889.472872][T12367] usb 2-1: config 0 descriptor??
[  889.527775][T12367] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  889.527843][T12367] usb 2-1: setting power ON
[  889.527863][T12367] dvb-usb: bulk message failed: -22 (2/0)
[  889.533760][T12367] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  889.534352][T12367] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  889.534384][T12367] usb 2-1: media controller created
[  889.583703][T12367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  889.602785][T12367] usb 2-1: selecting invalid altsetting 6
[  889.602807][T12367] usb 2-1: digital interface selection failed (-22)
[  889.602821][T12367] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  889.603468][T12367] usb 2-1: setting power OFF
[  889.603481][T12367] dvb-usb: bulk message failed: -22 (2/0)
[  889.603490][T12367] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  889.603511][T12367] (NULL device *): no alternate interface
[  889.670406][T12367] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  889.701136][T18977] usb 2-1: USB disconnect, device number 93
[  890.076025][ T5601] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  890.246074][ T5601] usb 9-1: Using ep0 maxpacket: 32
[  890.254786][ T5601] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  890.254819][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  890.254842][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  890.254866][ T5601] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  890.254879][ T5601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.260813][ T5601] usb 9-1: config 0 descriptor??
[  890.310471][ T5601] hub 9-1:0.0: USB hub found
[  890.507984][ T5601] hub 9-1:0.0: config failed, can't read hub descriptor (err -22)
[  890.519214][ T5601] usbhid 9-1:0.0: can't add hid device: -71
[  890.519326][ T5601] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  890.562601][ T5616] Bluetooth: hci2: command 0x0406 tx timeout
[  890.586763][ T5601] usb 9-1: USB disconnect, device number 37
[  890.996037][T18781] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  891.060906][T20664] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4970'.
[  891.097865][T18977] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[  891.150449][T18781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.150477][T18781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  891.150500][T18781] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  891.150513][T18781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.157045][T18781] usb 2-1: config 0 descriptor??
[  891.243453][T20670] FAULT_INJECTION: forcing a failure.
[  891.243453][T20670] name failslab, interval 1, probability 0, space 0, times 0
[  891.243541][T20670] CPU: 1 UID: 0 PID: 20670 Comm: syz.8.4972 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  891.243569][T20670] Tainted: [L]=SOFTLOCKUP
[  891.243577][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  891.243589][T20670] Call Trace:
[  891.243596][T20670]  <TASK>
[  891.243601][T20670]  dump_stack_lvl+0xe8/0x150
[  891.243621][T20670]  should_fail_ex+0x46b/0x600
[  891.243642][T20670]  should_failslab+0xa8/0x100
[  891.243657][T20670]  __kmalloc_cache_noprof+0x84/0x690
[  891.243671][T20670]  ? vhost_iotlb_alloc+0x54/0x180
[  891.243783][T20670]  vhost_iotlb_alloc+0x54/0x180
[  891.243799][T20670]  vhost_dev_ioctl+0xd4b/0x1170
[  891.243822][T20670]  ? __pfx_vhost_dev_ioctl+0x10/0x10
[  891.243834][T20670]  ? lockdep_hardirqs_on+0x7a/0x110
[  891.243852][T20670]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  891.243867][T20670]  ? mutex_lock_nested+0x152/0x1d0
[  891.243878][T20670]  ? vhost_vsock_dev_ioctl+0x223/0xed0
[  891.243916][T20670]  vhost_vsock_dev_ioctl+0x231/0xed0
[  891.243932][T20670]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[  891.243945][T20670]  ? __fget_files+0x2a/0x420
[  891.243957][T20670]  ? __fget_files+0x3a6/0x420
[  891.243968][T20670]  ? __fget_files+0x2a/0x420
[  891.243982][T20670]  ? bpf_lsm_file_ioctl+0x9/0x20
[  891.243997][T20670]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[  891.244010][T20670]  __se_sys_ioctl+0xff/0x170
[  891.244025][T20670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  891.244037][T20670]  do_syscall_64+0x174/0x580
[  891.244052][T20670]  ? trace_irq_disable+0x3b/0x140
[  891.244064][T20670]  ? clear_bhb_loop+0x40/0x90
[  891.244077][T20670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  891.244087][T20670] RIP: 0033:0x7f230529ce59
[  891.244099][T20670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  891.244109][T20670] RSP: 002b:00007f23034ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  891.244121][T20670] RAX: ffffffffffffffda RBX: 00007f2305515fa0 RCX: 00007f230529ce59
[  891.244129][T20670] RDX: 0000200000003900 RSI: 000000004008af03 RDI: 0000000000000003
[  891.244136][T20670] RBP: 00007f23034ee090 R08: 0000000000000000 R09: 0000000000000000
[  891.244143][T20670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  891.244150][T20670] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  891.244166][T20670]  </TASK>
[  891.256048][T18977] usb 10-1: Using ep0 maxpacket: 32
[  891.303548][T18977] usb 10-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  891.303579][T18977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.303816][T18977] usb 10-1: Product: syz
[  891.303833][T18977] usb 10-1: Manufacturer: syz
[  891.303848][T18977] usb 10-1: SerialNumber: syz
[  891.426036][   T10] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  891.547955][T18977] visor 10-1:1.0: Handspring Visor / Palm OS converter detected
[  891.554871][T18977] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  891.570136][T18977] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  891.625706][T18781] hid-steam 0003:28DE:1142.003E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  891.667768][   T10] usb 8-1: device descriptor read/64, error -71
[  891.676116][T18781] hid-steam 0003:28DE:1142.003E: Steam wireless receiver connected
[  891.709936][T18781] hid-steam 0003:28DE:1142.003F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  891.776383][T18978] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  891.792654][T18781] usb 2-1: USB disconnect, device number 94
[  891.843658][ T6360] udevd[6360]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory
[  891.843745][ T6360] udevd[6360]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory
[  891.879701][T18781] hid-steam 0003:28DE:1142.003E: Steam wireless receiver disconnected
[  891.908256][T18978] usb 9-1: device descriptor read/64, error -71
[  891.956155][   T10] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[  892.086039][   T10] usb 8-1: device descriptor read/64, error -71
[  892.146016][T18978] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  892.196967][   T10] usb usb8-port1: attempt power cycle
[  892.275990][T18978] usb 9-1: device descriptor read/64, error -71
[  892.386865][T18978] usb usb9-port1: attempt power cycle
[  892.556044][   T10] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  892.577259][   T10] usb 8-1: device descriptor read/8, error -71
[  892.725939][T18978] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  892.746622][T18978] usb 9-1: device descriptor read/8, error -71
[  892.827344][   T10] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  892.847317][   T10] usb 8-1: device descriptor read/8, error -71
[  892.895924][    T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  892.957309][   T10] usb usb8-port1: unable to enumerate USB device
[  892.986156][T18978] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  893.007499][T18978] usb 9-1: device descriptor read/8, error -71
[  893.050742][    T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  893.050772][    T9] usb 2-1: config 220 has an invalid descriptor of length 96, skipping remainder of the config
[  893.050792][    T9] usb 2-1: config 220 has no interface number 2
[  893.050830][    T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  893.050845][    T9] usb 2-1: config 220 interface 0 has no altsetting 0
[  893.050855][    T9] usb 2-1: config 220 interface 76 has no altsetting 0
[  893.050865][    T9] usb 2-1: config 220 interface 1 has no altsetting 0
[  893.053050][    T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  893.053079][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.053127][    T9] usb 2-1: Product: syz
[  893.053136][    T9] usb 2-1: Manufacturer: syz
[  893.053143][    T9] usb 2-1: SerialNumber: syz
[  893.120121][T18978] usb usb9-port1: unable to enumerate USB device
[  893.344005][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  893.344628][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  893.373539][    T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  893.373561][    T9] uvcvideo 2-1:220.0: No valid video chain found.
[  893.373668][    T9] usb 2-1: selecting invalid altsetting 0
[  893.402368][    T9] usb 2-1: selecting invalid altsetting 0
[  893.402402][    T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  893.420544][    T9] usb 2-1: USB disconnect, device number 95
[  893.850415][T18977] usb 10-1: USB disconnect, device number 42
[  893.861600][T18977] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  893.867379][T18977] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  893.868157][T18977] visor 10-1:1.0: device disconnected
[  894.216057][   T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  894.285940][T18977] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[  894.365918][   T10] usb 2-1: Using ep0 maxpacket: 8
[  894.367593][   T10] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  894.367621][   T10] usb 2-1: config 0 has no interface number 0
[  894.369781][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  894.369809][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.369828][   T10] usb 2-1: Product: syz
[  894.369843][   T10] usb 2-1: Manufacturer: syz
[  894.369857][   T10] usb 2-1: SerialNumber: syz
[  894.374830][   T10] usb 2-1: config 0 descriptor??
[  894.436078][T18977] usb 10-1: Using ep0 maxpacket: 16
[  894.440652][T18977] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  894.440706][T18977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  894.440735][T18977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  894.440759][T18977] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  894.440782][T18977] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  894.442609][T18977] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  894.442636][T18977] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  894.442656][T18977] usb 10-1: Manufacturer: syz
[  894.451728][T18977] usb 10-1: config 0 descriptor??
[  894.486096][    T9] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  894.582154][   T10] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  894.582232][   T10] uvcvideo 2-1:0.31: No valid video chain found.
[  894.607010][   T10] usb 2-1: USB disconnect, device number 96
[  894.689369][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.689404][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.689442][    T9] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  894.689474][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.737222][    T9] usb 8-1: config 0 descriptor??
[  894.809047][T18977] rc_core: IR keymap rc-hauppauge not found
[  894.809069][T18977] Registered IR keymap rc-empty
[  894.810328][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.835493][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.847260][T18977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  894.849953][T18977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input92
[  894.853227][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.869491][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.886152][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.906353][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.934574][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.948359][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.972028][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  894.993109][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  895.006054][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  895.029750][T18977] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  895.056831][T18977] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  895.056919][T18977] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  895.152581][   T10] usb 10-1: USB disconnect, device number 43
[  895.211447][    T9] hid-steam 0003:28DE:1142.0040: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  895.312971][    T9] hid-steam 0003:28DE:1142.0040: Steam wireless receiver connected
[  895.351238][    T9] hid-steam 0003:28DE:1142.0041: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  895.408182][T18977] usb 8-1: USB disconnect, device number 44
[  895.510854][T20710] fido_id[20710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  895.552723][T18977] hid-steam 0003:28DE:1142.0040: Steam wireless receiver disconnected
[  895.921009][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4989'.
[  896.280841][T20739] FAULT_INJECTION: forcing a failure.
[  896.280841][T20739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  896.280876][T20739] CPU: 1 UID: 0 PID: 20739 Comm: syz.1.4995 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  896.280903][T20739] Tainted: [L]=SOFTLOCKUP
[  896.280910][T20739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  896.280922][T20739] Call Trace:
[  896.280930][T20739]  <TASK>
[  896.280938][T20739]  dump_stack_lvl+0xe8/0x150
[  896.280966][T20739]  should_fail_ex+0x46b/0x600
[  896.281000][T20739]  _copy_from_user+0x2d/0xb0
[  896.281024][T20739]  ___sys_sendmsg+0x1c6/0x360
[  896.281053][T20739]  ? __lock_acquire+0x6b5/0x2d10
[  896.281083][T20739]  ? __pfx____sys_sendmsg+0x10/0x10
[  896.281146][T20739]  ? __fget_files+0x2a/0x420
[  896.281168][T20739]  ? __fget_files+0x3a6/0x420
[  896.281200][T20739]  __x64_sys_sendmsg+0x1c3/0x2a0
[  896.281232][T20739]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  896.281270][T20739]  ? __pfx_ksys_write+0x10/0x10
[  896.281306][T20739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.281336][T20739]  do_syscall_64+0x174/0x580
[  896.281364][T20739]  ? trace_irq_disable+0x3b/0x140
[  896.281386][T20739]  ? clear_bhb_loop+0x40/0x90
[  896.281409][T20739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.281434][T20739] RIP: 0033:0x7f514210ce59
[  896.281453][T20739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  896.281469][T20739] RSP: 002b:00007f514035e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  896.281491][T20739] RAX: ffffffffffffffda RBX: 00007f5142385fa0 RCX: 00007f514210ce59
[  896.281505][T20739] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003
[  896.281518][T20739] RBP: 00007f514035e090 R08: 0000000000000000 R09: 0000000000000000
[  896.281530][T20739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  896.281543][T20739] R13: 00007f5142386038 R14: 00007f5142385fa0 R15: 00007fff3f8fa528
[  896.281573][T20739]  </TASK>
[  896.307715][   T10] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[  896.436004][   T10] usb 8-1: device descriptor read/64, error -71
[  896.565422][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4999'.
[  896.686027][   T10] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[  896.769696][T18977] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  896.846032][T18781] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[  896.863671][   T10] usb 8-1: device descriptor read/64, error -71
[  896.935971][T18977] usb 9-1: Using ep0 maxpacket: 16
[  896.938969][T18977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.939021][T18977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  896.939049][T18977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  896.939070][T18977] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  896.939094][T18977] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  896.940198][T18977] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  896.940224][T18977] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  896.940244][T18977] usb 9-1: Manufacturer: syz
[  896.975962][T18781] usb 10-1: device descriptor read/64, error -71
[  896.978488][T18977] usb 9-1: config 0 descriptor??
[  897.054316][   T10] usb usb8-port1: attempt power cycle
[  897.218221][T18781] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[  897.245976][T18977] rc_core: IR keymap rc-hauppauge not found
[  897.245999][T18977] Registered IR keymap rc-empty
[  897.246142][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.266069][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.288833][T18977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  897.292650][T18977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input93
[  897.296964][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.316084][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.336414][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.346102][T18781] usb 10-1: device descriptor read/64, error -71
[  897.357620][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.376055][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.395993][   T10] usb 8-1: new high-speed USB device number 47 using dummy_hcd
[  897.396144][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.416395][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.429775][   T10] usb 8-1: device descriptor read/8, error -71
[  897.436306][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.456364][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.457044][T18781] usb usb10-port1: attempt power cycle
[  897.475986][T18977] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  897.501015][T18977] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  897.501031][T18977] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  897.612832][T20765] FAULT_INJECTION: forcing a failure.
[  897.612832][T20765] name failslab, interval 1, probability 0, space 0, times 0
[  897.612856][T20765] CPU: 1 UID: 0 PID: 20765 Comm: syz.1.5007 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  897.612872][T20765] Tainted: [L]=SOFTLOCKUP
[  897.612876][T20765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  897.612882][T20765] Call Trace:
[  897.612887][T20765]  <TASK>
[  897.612894][T20765]  dump_stack_lvl+0xe8/0x150
[  897.612912][T20765]  should_fail_ex+0x46b/0x600
[  897.612932][T20765]  should_failslab+0xa8/0x100
[  897.612947][T20765]  __kmalloc_noprof+0xdf/0x7b0
[  897.612960][T20765]  ? sock_kmalloc+0xd6/0x160
[  897.612974][T20765]  sock_kmalloc+0xd6/0x160
[  897.612986][T20765]  skcipher_recvmsg+0x517/0x1140
[  897.613011][T20765]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  897.613025][T20765]  ? __lock_acquire+0x6b5/0x2d10
[  897.613040][T20765]  ? aa_sock_msg_perm+0x122/0x200
[  897.613052][T20765]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  897.613067][T20765]  sock_recvmsg_nosec+0x130/0x170
[  897.613081][T20765]  ____sys_recvmsg+0x23d/0x4f0
[  897.613096][T20765]  ? __pfx_____sys_recvmsg+0x10/0x10
[  897.613114][T20765]  ? import_iovec+0x73/0xa0
[  897.613128][T20765]  ___sys_recvmsg+0x215/0x590
[  897.613137][T20765]  ? get_pid_task+0x20/0x1f0
[  897.613151][T20765]  ? __pfx____sys_recvmsg+0x10/0x10
[  897.613163][T20765]  ? __fget_files+0x2a/0x420
[  897.613188][T20765]  ? __fget_files+0x3a6/0x420
[  897.613205][T20765]  __x64_sys_recvmsg+0x1c0/0x2a0
[  897.613217][T20765]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  897.613232][T20765]  ? __pfx_ksys_write+0x10/0x10
[  897.613251][T20765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.613263][T20765]  do_syscall_64+0x174/0x580
[  897.613278][T20765]  ? trace_irq_disable+0x3b/0x140
[  897.613291][T20765]  ? clear_bhb_loop+0x40/0x90
[  897.613304][T20765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.613315][T20765] RIP: 0033:0x7f514210ce59
[  897.613325][T20765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.613335][T20765] RSP: 002b:00007f514035e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  897.613347][T20765] RAX: ffffffffffffffda RBX: 00007f5142385fa0 RCX: 00007f514210ce59
[  897.613355][T20765] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  897.613362][T20765] RBP: 00007f514035e090 R08: 0000000000000000 R09: 0000000000000000
[  897.613369][T20765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  897.613375][T20765] R13: 00007f5142386038 R14: 00007f5142385fa0 R15: 00007fff3f8fa528
[  897.613391][T20765]  </TASK>
[  897.715588][T20767] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  897.719702][T18977] usb 9-1: USB disconnect, device number 42
[  897.748670][T20767] qnx6: wrong signature (magic) in superblock #1.
[  897.748693][T20767] qnx6: unable to read the first superblock
[  897.795958][   T10] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[  897.808361][T18781] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[  897.849485][T18781] usb 10-1: device descriptor read/8, error -71
[  897.856320][   T10] usb 8-1: device descriptor read/8, error -71
[  897.966210][   T10] usb usb8-port1: unable to enumerate USB device
[  898.045400][T20771] FAULT_INJECTION: forcing a failure.
[  898.045400][T20771] name failslab, interval 1, probability 0, space 0, times 0
[  898.045424][T20771] CPU: 1 UID: 0 PID: 20771 Comm: syz.1.5010 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  898.045439][T20771] Tainted: [L]=SOFTLOCKUP
[  898.045444][T20771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  898.045451][T20771] Call Trace:
[  898.045455][T20771]  <TASK>
[  898.045461][T20771]  dump_stack_lvl+0xe8/0x150
[  898.045483][T20771]  should_fail_ex+0x46b/0x600
[  898.045502][T20771]  should_failslab+0xa8/0x100
[  898.045518][T20771]  __kmalloc_noprof+0xdf/0x7b0
[  898.045530][T20771]  ? kfree+0x4d/0x6c0
[  898.045540][T20771]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  898.045556][T20771]  tomoyo_realpath_from_path+0xe3/0x5d0
[  898.045570][T20771]  ? tomoyo_domain+0xd7/0x130
[  898.045584][T20771]  ? tomoyo_path_number_perm+0x219/0x630
[  898.045608][T20771]  tomoyo_path_number_perm+0x246/0x630
[  898.045625][T20771]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  898.045640][T20771]  ? __lock_acquire+0x6b5/0x2d10
[  898.045656][T20771]  ? do_raw_spin_lock+0x12b/0x2f0
[  898.045682][T20771]  ? __fget_files+0x2a/0x420
[  898.045696][T20771]  ? __fget_files+0x2a/0x420
[  898.045707][T20771]  ? __fget_files+0x3a6/0x420
[  898.045718][T20771]  ? __fget_files+0x2a/0x420
[  898.045732][T20771]  security_file_ioctl+0xc3/0x2a0
[  898.045748][T20771]  __se_sys_ioctl+0x47/0x170
[  898.045764][T20771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.045779][T20771]  do_syscall_64+0x174/0x580
[  898.045805][T20771]  ? trace_irq_disable+0x3b/0x140
[  898.045826][T20771]  ? clear_bhb_loop+0x40/0x90
[  898.045850][T20771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.045870][T20771] RIP: 0033:0x7f514210ce59
[  898.045888][T20771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  898.045899][T20771] RSP: 002b:00007f514035e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  898.045911][T20771] RAX: ffffffffffffffda RBX: 00007f5142385fa0 RCX: 00007f514210ce59
[  898.045919][T20771] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000014
[  898.045926][T20771] RBP: 00007f514035e090 R08: 0000000000000000 R09: 0000000000000000
[  898.045933][T20771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  898.045939][T20771] R13: 00007f5142386038 R14: 00007f5142385fa0 R15: 00007fff3f8fa528
[  898.045955][T20771]  </TASK>
[  898.050391][T20771] ERROR: Out of memory at tomoyo_realpath_from_path.
[  898.085968][T18781] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[  898.120452][T18781] usb 10-1: device descriptor read/8, error -71
[  898.235185][T18781] usb usb10-port1: unable to enumerate USB device
[  898.722335][T20786] FAULT_INJECTION: forcing a failure.
[  898.722335][T20786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  898.722358][T20786] CPU: 1 UID: 0 PID: 20786 Comm: syz.8.5017 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  898.722374][T20786] Tainted: [L]=SOFTLOCKUP
[  898.722378][T20786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  898.722385][T20786] Call Trace:
[  898.722390][T20786]  <TASK>
[  898.722395][T20786]  dump_stack_lvl+0xe8/0x150
[  898.722413][T20786]  should_fail_ex+0x46b/0x600
[  898.722431][T20786]  _copy_to_iter+0x589/0x17d0
[  898.722458][T20786]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  898.722473][T20786]  ? __pfx__copy_to_iter+0x10/0x10
[  898.722482][T20786]  ? rt_spin_lock+0x1e0/0x400
[  898.722495][T20786]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  898.722515][T20786]  __skb_datagram_iter+0xf8/0x980
[  898.722528][T20786]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  898.722543][T20786]  skb_copy_datagram_iter+0xb5/0x240
[  898.722555][T20786]  netlink_recvmsg+0x2c3/0xa50
[  898.722572][T20786]  ? __pfx_netlink_recvmsg+0x10/0x10
[  898.722583][T20786]  ? __pfx_aa_sk_perm+0x10/0x10
[  898.722596][T20786]  ? aa_sock_msg_perm+0x122/0x200
[  898.722607][T20786]  ? __pfx_netlink_recvmsg+0x10/0x10
[  898.722618][T20786]  sock_recvmsg_nosec+0x130/0x170
[  898.722632][T20786]  ____sys_recvmsg+0x23d/0x4f0
[  898.722647][T20786]  ? __pfx_____sys_recvmsg+0x10/0x10
[  898.722664][T20786]  ? import_iovec+0x73/0xa0
[  898.722678][T20786]  ___sys_recvmsg+0x215/0x590
[  898.722693][T20786]  ? __pfx____sys_recvmsg+0x10/0x10
[  898.722705][T20786]  ? __fget_files+0x2a/0x420
[  898.722726][T20786]  ? __fget_files+0x3a6/0x420
[  898.722743][T20786]  do_recvmmsg+0x33a/0x800
[  898.722757][T20786]  ? __pfx_do_recvmmsg+0x10/0x10
[  898.722773][T20786]  ? _copy_from_user+0x94/0xb0
[  898.722792][T20786]  __x64_sys_recvmmsg+0x1b7/0x250
[  898.722804][T20786]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  898.722818][T20786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.722830][T20786]  do_syscall_64+0x174/0x580
[  898.722847][T20786]  ? clear_bhb_loop+0x40/0x90
[  898.722859][T20786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.722870][T20786] RIP: 0033:0x7f230529ce59
[  898.722881][T20786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  898.722891][T20786] RSP: 002b:00007f23034ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  898.722903][T20786] RAX: ffffffffffffffda RBX: 00007f2305515fa0 RCX: 00007f230529ce59
[  898.722911][T20786] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  898.722918][T20786] RBP: 00007f23034ee090 R08: 0000200000003700 R09: 0000000000000000
[  898.722925][T20786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  898.722932][T20786] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  898.722947][T20786]  </TASK>
[  898.726029][T18781] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  898.821790][T20788] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5018'.
[  898.870758][ T5616] Bluetooth: hci1: unexpected event for opcode 0x0c26
[  898.885948][T18781] usb 2-1: Using ep0 maxpacket: 32
[  898.890235][T18781] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  898.890272][T18781] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  898.890296][T18781] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  898.918088][T18781] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  898.918123][T18781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.918143][T18781] usb 2-1: Product:  
[  898.918157][T18781] usb 2-1: Manufacturer: 橐坓莇厍⻩၎뛁লlj
[  898.918173][T18781] usb 2-1: SerialNumber: ⫖䊐竡泄⑦䨩폳ᔢ邓⵫굩ꂰ汏듫ᖩꅋￔ阝ꀦ墭歚ꉫ驺鍩䇩䷁婇，鏂ᢵ江뺰ི踥쵗琲漬徿ಔ몞ࡰꜤ方Ő뜹☁፪锤ꜗ㍋ퟎ싉鏕⩬Ἴ鍗݆鈕勩뇁鰠酀仩Դ棚菢塬ﴰ◮꽑ᢡ緘ㆬ臞翂ኜ昈撍쯎鞊༻灄蓗郟됓矆ꬠ長熢枮翧螭巿弡牫紦阜⼹嗓ᛋ傤෉㩼팛
[  898.947164][T20778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  898.947848][T20778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  899.200351][T18781] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  899.200416][T18781] usb 2-1: MIDIStreaming interface descriptor not found
[  899.353656][T18781] usb 2-1: USB disconnect, device number 97
[  899.478954][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  899.589559][T18977] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[  899.707501][T20806] FAULT_INJECTION: forcing a failure.
[  899.707501][T20806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  899.707524][T20806] CPU: 0 UID: 0 PID: 20806 Comm: syz.8.5025 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  899.707541][T20806] Tainted: [L]=SOFTLOCKUP
[  899.707545][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  899.707552][T20806] Call Trace:
[  899.707557][T20806]  <TASK>
[  899.707562][T20806]  dump_stack_lvl+0xe8/0x150
[  899.707578][T20806]  should_fail_ex+0x46b/0x600
[  899.707596][T20806]  _copy_to_user+0x31/0xb0
[  899.707610][T20806]  simple_read_from_buffer+0xe1/0x170
[  899.707626][T20806]  proc_fail_nth_read+0x1be/0x230
[  899.707640][T20806]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  899.707655][T20806]  ? rw_verify_area+0x2ac/0x4e0
[  899.707669][T20806]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  899.707682][T20806]  vfs_read+0x212/0xa80
[  899.707700][T20806]  ? __pfx_vfs_read+0x10/0x10
[  899.707715][T20806]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  899.707730][T20806]  ? lockdep_hardirqs_on+0x7a/0x110
[  899.707745][T20806]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  899.707760][T20806]  ? mutex_lock_nested+0x152/0x1d0
[  899.707772][T20806]  ? fdget_pos+0x252/0x320
[  899.707789][T20806]  ksys_read+0x156/0x270
[  899.707804][T20806]  ? __pfx_ksys_read+0x10/0x10
[  899.707821][T20806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.707832][T20806]  do_syscall_64+0x174/0x580
[  899.707849][T20806]  ? trace_irq_disable+0x3b/0x140
[  899.707862][T20806]  ? clear_bhb_loop+0x40/0x90
[  899.707875][T20806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.707885][T20806] RIP: 0033:0x7f230525d68e
[  899.707902][T20806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  899.707912][T20806] RSP: 002b:00007f23034edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  899.707925][T20806] RAX: ffffffffffffffda RBX: 00007f23034ee6c0 RCX: 00007f230525d68e
[  899.707933][T20806] RDX: 000000000000000f RSI: 00007f23034ee0a0 RDI: 0000000000000004
[  899.707940][T20806] RBP: 00007f23034ee090 R08: 0000000000000000 R09: 0000000000000000
[  899.707947][T20806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  899.707954][T20806] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  899.707970][T20806]  </TASK>
[  899.745964][T18977] usb 8-1: Using ep0 maxpacket: 16
[  899.750182][T18977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  899.750233][T18977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  899.750261][T18977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  899.750282][T18977] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  899.750306][T18977] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  899.751847][T18977] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  899.751874][T18977] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  899.751893][T18977] usb 8-1: Manufacturer: syz
[  899.759233][T18977] usb 8-1: config 0 descriptor??
[  900.147166][T18977] rc_core: IR keymap rc-hauppauge not found
[  900.147180][T18977] Registered IR keymap rc-empty
[  900.147271][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.167047][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.198433][T18977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  900.203957][T18977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input94
[  900.220300][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.264462][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.276607][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.296128][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.316030][T18781] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[  900.319736][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.325651][T20818] netlink: 'syz.8.5030': attribute type 5 has an invalid length.
[  900.336414][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.356394][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.376127][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.397041][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.415914][    T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  900.417216][T18977] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  900.449096][T18781] usb 10-1: device descriptor read/64, error -71
[  900.454025][T18977] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  900.454259][T18977] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  900.481122][T18977] usb 8-1: USB disconnect, device number 49
[  900.565926][    T9] usb 2-1: Using ep0 maxpacket: 32
[  900.581261][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  900.581294][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  900.581329][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  900.581367][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  900.581391][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.639218][    T9] usb 2-1: config 0 descriptor??
[  900.657785][    T9] hub 2-1:0.0: USB hub found
[  900.695525][T18781] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[  900.831044][T18781] usb 10-1: device descriptor read/64, error -71
[  900.937055][T18781] usb usb10-port1: attempt power cycle
[  901.073116][    T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  901.094694][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  901.094815][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  901.137891][    T9] usb 2-1: USB disconnect, device number 98
[  901.298464][T18781] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[  901.318120][T18781] usb 10-1: device descriptor read/8, error -71
[  901.545986][ T5600] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  901.565976][T18781] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[  901.590023][T18781] usb 10-1: device descriptor read/8, error -71
[  901.696244][T18781] usb usb10-port1: unable to enumerate USB device
[  901.723223][ T5600] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  901.723255][ T5600] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  901.723280][ T5600] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  901.725594][ T5600] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  901.725624][ T5600] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.725644][ T5600] usb 9-1: Product: syz
[  901.725660][ T5600] usb 9-1: Manufacturer: syz
[  901.725668][ T5600] usb 9-1: SerialNumber: syz
[  901.797671][ T5600] hub 9-1:1.0: bad descriptor, ignoring hub
[  901.797710][ T5600] hub 9-1:1.0: probe with driver hub failed with error -5
[  901.886035][ T5601] usb 2-1: new full-speed USB device number 99 using dummy_hcd
[  902.000645][ T5600] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  902.039994][ T5601] usb 2-1: config 248 has an invalid interface number: 168 but max is 0
[  902.040023][ T5601] usb 2-1: config 248 has no interface number 0
[  902.040050][ T5601] usb 2-1: config 248 interface 168 has no altsetting 0
[  902.042152][ T5601] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 6.7e
[  902.042193][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.042217][ T5601] usb 2-1: Product: syz
[  902.042225][ T5601] usb 2-1: Manufacturer: syz
[  902.042234][ T5601] usb 2-1: SerialNumber: syz
[  902.198089][T20841] FAULT_INJECTION: forcing a failure.
[  902.198089][T20841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  902.198124][T20841] CPU: 1 UID: 0 PID: 20841 Comm: syz.8.5039 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  902.198151][T20841] Tainted: [L]=SOFTLOCKUP
[  902.198159][T20841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  902.198169][T20841] Call Trace:
[  902.198177][T20841]  <TASK>
[  902.198186][T20841]  dump_stack_lvl+0xe8/0x150
[  902.198216][T20841]  should_fail_ex+0x46b/0x600
[  902.198250][T20841]  strncpy_from_user+0x36/0x2b0
[  902.198281][T20841]  do_getname+0x77/0x250
[  902.198305][T20841]  do_sys_openat2+0xcc/0x200
[  902.198330][T20841]  ? __pfx_do_sys_openat2+0x10/0x10
[  902.198354][T20841]  ? ksys_write+0x248/0x270
[  902.198382][T20841]  ? __pfx_ksys_write+0x10/0x10
[  902.198412][T20841]  __x64_sys_openat+0x138/0x170
[  902.198437][T20841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.198458][T20841]  do_syscall_64+0x174/0x580
[  902.198486][T20841]  ? trace_irq_disable+0x3b/0x140
[  902.198508][T20841]  ? clear_bhb_loop+0x40/0x90
[  902.198531][T20841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.198551][T20841] RIP: 0033:0x7f230525d68e
[  902.198569][T20841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  902.198585][T20841] RSP: 002b:00007f23034edb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  902.198605][T20841] RAX: ffffffffffffffda RBX: 00007f23034ee6c0 RCX: 00007f230525d68e
[  902.198619][T20841] RDX: 0000000000000002 RSI: 00007f23034edc00 RDI: ffffffffffffff9c
[  902.198631][T20841] RBP: 00007f23034ee090 R08: 0000000000000000 R09: 0000000000000000
[  902.198641][T20841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  902.198650][T20841] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  902.198673][T20841]  </TASK>
[  902.308115][ T5601] usb 9-1: USB disconnect, device number 43
[  902.323374][ T5601] usblp0: removed
[  902.340723][T18977] usb 2-1: USB disconnect, device number 99
[  902.726091][    T9] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[  902.876100][    T9] usb 8-1: Using ep0 maxpacket: 16
[  902.882311][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  902.882366][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  902.882399][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  902.882421][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  902.882444][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  902.898507][    T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  902.898540][    T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  902.898560][    T9] usb 8-1: Manufacturer: syz
[  902.913728][    T9] usb 8-1: config 0 descriptor??
[  903.258111][    T9] rc_core: IR keymap rc-hauppauge not found
[  903.258134][    T9] Registered IR keymap rc-empty
[  903.258287][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.259503][T20860] Bluetooth: MGMT ver 1.23
[  903.279887][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.299549][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  903.306552][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input95
[  903.312476][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.341010][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.368307][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.388761][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.396181][T18781] usb 2-1: new full-speed USB device number 100 using dummy_hcd
[  903.413665][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.426667][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.449414][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.466052][    T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  903.489669][T20868] FAULT_INJECTION: forcing a failure.
[  903.489669][T20868] name failslab, interval 1, probability 0, space 0, times 0
[  903.489706][T20868] CPU: 1 UID: 0 PID: 20868 Comm: syz.8.5051 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  903.489734][T20868] Tainted: [L]=SOFTLOCKUP
[  903.489741][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  903.489753][T20868] Call Trace:
[  903.489761][T20868]  <TASK>
[  903.489769][T20868]  dump_stack_lvl+0xe8/0x150
[  903.489800][T20868]  should_fail_ex+0x46b/0x600
[  903.489836][T20868]  should_failslab+0xa8/0x100
[  903.489863][T20868]  __kmalloc_cache_noprof+0x84/0x690
[  903.489889][T20868]  ? __hw_addr_create+0x60/0x250
[  903.489924][T20868]  __hw_addr_create+0x60/0x250
[  903.489957][T20868]  __hw_addr_list_snapshot+0x19e/0x750
[  903.489999][T20868]  netif_rx_mode_run+0xfa0/0x1370
[  903.490023][T20868]  ? netif_rx_mode_run+0x4fc/0x1370
[  903.490049][T20868]  ? __pfx_netif_rx_mode_run+0x10/0x10
[  903.490087][T20868]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  903.490121][T20868]  ? netif_rx_mode_clean+0x2b/0x1b0
[  903.490143][T20868]  ? netif_rx_mode_clean+0x194/0x1b0
[  903.490162][T20868]  ? netif_rx_mode_clean+0x2b/0x1b0
[  903.490185][T20868]  netif_rx_mode_sync+0x24/0xa0
[  903.490207][T20868]  dev_ifsioc+0xf51/0x1330
[  903.490233][T20868]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  903.490262][T20868]  ? mutex_lock_nested+0x152/0x1d0
[  903.490284][T20868]  ? dev_ioctl+0x7a4/0x1150
[  903.490314][T20868]  dev_ioctl+0x7b4/0x1150
[  903.490343][T20868]  sock_do_ioctl+0x23e/0x320
[  903.490370][T20868]  ? __pfx_sock_do_ioctl+0x10/0x10
[  903.490412][T20868]  sock_ioctl+0x5c9/0x7f0
[  903.490436][T20868]  ? __pfx_sock_ioctl+0x10/0x10
[  903.490466][T20868]  ? __fget_files+0x2a/0x420
[  903.490489][T20868]  ? __fget_files+0x3a6/0x420
[  903.490511][T20868]  ? __fget_files+0x2a/0x420
[  903.490537][T20868]  ? bpf_lsm_file_ioctl+0x9/0x20
[  903.490566][T20868]  ? __pfx_sock_ioctl+0x10/0x10
[  903.490591][T20868]  __se_sys_ioctl+0xff/0x170
[  903.490619][T20868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.490641][T20868]  do_syscall_64+0x174/0x580
[  903.490668][T20868]  ? trace_irq_disable+0x3b/0x140
[  903.490691][T20868]  ? clear_bhb_loop+0x40/0x90
[  903.490715][T20868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.490735][T20868] RIP: 0033:0x7f230529ce59
[  903.490754][T20868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  903.490770][T20868] RSP: 002b:00007f23034ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  903.490791][T20868] RAX: ffffffffffffffda RBX: 00007f2305515fa0 RCX: 00007f230529ce59
[  903.490806][T20868] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000003
[  903.490818][T20868] RBP: 00007f23034ee090 R08: 0000000000000000 R09: 0000000000000000
[  903.490831][T20868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  903.490844][T20868] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  903.490877][T20868]  </TASK>
[  903.490995][T20868] ------------[ cut here ]------------
[  903.491004][T20868] netdevice: dummy0: failed to sync uc/mc addresses
[  903.491019][T20868] WARNING: net/core/dev_addr_lists.c:1278 at netif_rx_mode_run+0xb56/0x1370, CPU#1: syz.8.5051/20868
[  903.491053][T20868] Modules linked in:
[  903.491071][T20868] CPU: 1 UID: 0 PID: 20868 Comm: syz.8.5051 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  903.491097][T20868] Tainted: [L]=SOFTLOCKUP
[  903.491105][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  903.491116][T20868] RIP: 0010:netif_rx_mode_run+0xc8a/0x1370
[  903.491138][T20868] Code: 3a 48 c7 c2 80 38 51 8c eb 1a e8 71 f4 b0 f8 48 c7 c2 00 37 51 8c eb 0c e8 63 f4 b0 f8 48 c7 c2 00 38 51 8c 4c 89 f7 4c 89 fe <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 3c 02 00 00 84 c0 74 31 e8 3e f4
[  903.491155][T20868] RSP: 0018:ffffc900046f7a00 EFLAGS: 00010293
[  903.491172][T20868] RAX: ffffffff8914a62f RBX: dffffc0000000000 RCX: ffff888011fedd00
[  903.491209][T20868] RDX: ffffffff8c513700 RSI: ffff88805ed3a120 RDI: ffffffff8fbd0180
[  903.491223][T20868] RBP: ffffc900046f7bd0 R08: ffff888011fedd00 R09: 0000000000000006
[  903.491237][T20868] R10: 0000000000000100 R11: 0000000000000005 R12: 0000000000000001
[  903.491250][T20868] R13: ffff88805ed3a120 R14: ffffffff8fbd0180 R15: ffff88805ed3a120
[  903.491265][T20868] FS:  00007f23034ee6c0(0000) GS:ffff888125d7e000(0000) knlGS:0000000000000000
[  903.491282][T20868] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  903.491296][T20868] CR2: 0000001b32a63fff CR3: 0000000051cb0000 CR4: 00000000003526f0
[  903.491313][T20868] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003
[  903.491326][T20868] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  903.491340][T20868] Call Trace:
[  903.491347][T20868]  <TASK>
[  903.491358][T20868]  ? netif_rx_mode_run+0x4fc/0x1370
[  903.491385][T20868]  ? __pfx_netif_rx_mode_run+0x10/0x10
[  903.491423][T20868]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  903.491462][T20868]  ? netif_rx_mode_clean+0x2b/0x1b0
[  903.491485][T20868]  ? netif_rx_mode_clean+0x194/0x1b0
[  903.491505][T20868]  ? netif_rx_mode_clean+0x2b/0x1b0
[  903.491530][T20868]  netif_rx_mode_sync+0x24/0xa0
[  903.491551][T20868]  dev_ifsioc+0xf51/0x1330
[  903.491576][T20868]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  903.491603][T20868]  ? mutex_lock_nested+0x152/0x1d0
[  903.491625][T20868]  ? dev_ioctl+0x7a4/0x1150
[  903.491655][T20868]  dev_ioctl+0x7b4/0x1150
[  903.491685][T20868]  sock_do_ioctl+0x23e/0x320
[  903.491710][T20868]  ? __pfx_sock_do_ioctl+0x10/0x10
[  903.491750][T20868]  sock_ioctl+0x5c9/0x7f0
[  903.491776][T20868]  ? __pfx_sock_ioctl+0x10/0x10
[  903.491800][T20868]  ? __fget_files+0x2a/0x420
[  903.491822][T20868]  ? __fget_files+0x3a6/0x420
[  903.491843][T20868]  ? __fget_files+0x2a/0x420
[  903.491870][T20868]  ? bpf_lsm_file_ioctl+0x9/0x20
[  903.491897][T20868]  ? __pfx_sock_ioctl+0x10/0x10
[  903.491919][T20868]  __se_sys_ioctl+0xff/0x170
[  903.491947][T20868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.491969][T20868]  do_syscall_64+0x174/0x580
[  903.491996][T20868]  ? trace_irq_disable+0x3b/0x140
[  903.492018][T20868]  ? clear_bhb_loop+0x40/0x90
[  903.492043][T20868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.492063][T20868] RIP: 0033:0x7f230529ce59
[  903.492080][T20868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  903.492098][T20868] RSP: 002b:00007f23034ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  903.492118][T20868] RAX: ffffffffffffffda RBX: 00007f2305515fa0 RCX: 00007f230529ce59
[  903.492132][T20868] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000003
[  903.492146][T20868] RBP: 00007f23034ee090 R08: 0000000000000000 R09: 0000000000000000
[  903.492158][T20868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  903.492170][T20868] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  903.492203][T20868]  </TASK>
[  903.492219][T20868] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  903.492234][T20868] CPU: 1 UID: 0 PID: 20868 Comm: syz.8.5051 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  903.492261][T20868] Tainted: [L]=SOFTLOCKUP
[  903.492268][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  903.492279][T20868] Call Trace:
[  903.492287][T20868]  <TASK>
[  903.492296][T20868]  vpanic+0x56c/0xa60
[  903.492326][T20868]  ? __pfx__printk+0x10/0x10
[  903.492346][T20868]  ? __pfx_vpanic+0x10/0x10
[  903.492371][T20868]  ? is_bpf_text_address+0x292/0x2b0
[  903.492397][T20868]  ? is_bpf_text_address+0x26/0x2b0
[  903.492432][T20868]  panic+0xc5/0xd0
[  903.492465][T20868]  ? __pfx_panic+0x10/0x10
[  903.492509][T20868]  __warn+0x315/0x4c0
[  903.492535][T20868]  ? netif_rx_mode_run+0xb56/0x1370
[  903.492558][T20868]  ? netif_rx_mode_run+0xb56/0x1370
[  903.492580][T20868]  __report_bug+0x339/0x540
[  903.492704][T20868]  ? netif_rx_mode_run+0xb56/0x1370
[  903.492727][T20868]  ? __pfx___report_bug+0x10/0x10
[  903.492777][T20868]  report_bug_entry+0x19a/0x290
[  903.492807][T20868]  ? netif_rx_mode_run+0xc8a/0x1370
[  903.492825][T20868]  ? netif_rx_mode_run+0xc8f/0x1370
[  903.492845][T20868]  handle_bug+0xce/0x200
[  903.492868][T20868]  exc_invalid_op+0x1a/0x50
[  903.492889][T20868]  asm_exc_invalid_op+0x1a/0x20
[  903.492909][T20868] RIP: 0010:netif_rx_mode_run+0xc8a/0x1370
[  903.492936][T20868] Code: 3a 48 c7 c2 80 38 51 8c eb 1a e8 71 f4 b0 f8 48 c7 c2 00 37 51 8c eb 0c e8 63 f4 b0 f8 48 c7 c2 00 38 51 8c 4c 89 f7 4c 89 fe <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 3c 02 00 00 84 c0 74 31 e8 3e f4
[  903.492952][T20868] RSP: 0018:ffffc900046f7a00 EFLAGS: 00010293
[  903.492969][T20868] RAX: ffffffff8914a62f RBX: dffffc0000000000 RCX: ffff888011fedd00
[  903.492984][T20868] RDX: ffffffff8c513700 RSI: ffff88805ed3a120 RDI: ffffffff8fbd0180
[  903.492998][T20868] RBP: ffffc900046f7bd0 R08: ffff888011fedd00 R09: 0000000000000006
[  903.493013][T20868] R10: 0000000000000100 R11: 0000000000000005 R12: 0000000000000001
[  903.493025][T20868] R13: ffff88805ed3a120 R14: ffffffff8fbd0180 R15: ffff88805ed3a120
[  903.493048][T20868]  ? netif_rx_mode_run+0xc6f/0x1370
[  903.493079][T20868]  ? netif_rx_mode_run+0x4fc/0x1370
[  903.493106][T20868]  ? __pfx_netif_rx_mode_run+0x10/0x10
[  903.493144][T20868]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  903.493177][T20868]  ? netif_rx_mode_clean+0x2b/0x1b0
[  903.493200][T20868]  ? netif_rx_mode_clean+0x194/0x1b0
[  903.493220][T20868]  ? netif_rx_mode_clean+0x2b/0x1b0
[  903.493244][T20868]  netif_rx_mode_sync+0x24/0xa0
[  903.493266][T20868]  dev_ifsioc+0xf51/0x1330
[  903.493290][T20868]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  903.493319][T20868]  ? mutex_lock_nested+0x152/0x1d0
[  903.493342][T20868]  ? dev_ioctl+0x7a4/0x1150
[  903.493371][T20868]  dev_ioctl+0x7b4/0x1150
[  903.493401][T20868]  sock_do_ioctl+0x23e/0x320
[  903.493428][T20868]  ? __pfx_sock_do_ioctl+0x10/0x10
[  903.493478][T20868]  sock_ioctl+0x5c9/0x7f0
[  903.493504][T20868]  ? __pfx_sock_ioctl+0x10/0x10
[  903.493526][T20868]  ? __fget_files+0x2a/0x420
[  903.493549][T20868]  ? __fget_files+0x3a6/0x420
[  903.493571][T20868]  ? __fget_files+0x2a/0x420
[  903.493598][T20868]  ? bpf_lsm_file_ioctl+0x9/0x20
[  903.493626][T20868]  ? __pfx_sock_ioctl+0x10/0x10
[  903.493648][T20868]  __se_sys_ioctl+0xff/0x170
[  903.493676][T20868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.493698][T20868]  do_syscall_64+0x174/0x580
[  903.493726][T20868]  ? trace_irq_disable+0x3b/0x140
[  903.493747][T20868]  ? clear_bhb_loop+0x40/0x90
[  903.493772][T20868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.493793][T20868] RIP: 0033:0x7f230529ce59
[  903.493811][T20868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  903.493828][T20868] RSP: 002b:00007f23034ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  903.493846][T20868] RAX: ffffffffffffffda RBX: 00007f2305515fa0 RCX: 00007f230529ce59
[  903.493861][T20868] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000003
[  903.493874][T20868] RBP: 00007f23034ee090 R08: 0000000000000000 R09: 0000000000000000
[  903.493891][T20868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  903.493903][T20868] R13: 00007f2305516038 R14: 00007f2305515fa0 R15: 00007ffde636dce8
[  903.493935][T20868]  </TASK>
[  903.494092][T20868] Kernel Offset: disabled